Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20333936343236.roa
File:                     3139392e34382e3137382e302f32342d3234203d3e20333936343236.roa (raw, json)
Hash identifier:          p5ZvPq6Ndfw6N1ZTY9moAPHZj6tfh9X7WI2JF1Mm5rs=
Subject key identifier:   50:40:52:15:44:4A:EE:A9:03:B2:59:C3:E1:ED:C7:3F:98:84:13:28
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       239A1123902DE323914EA373264D278E038462FE
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20333936343236.roa
Signing time:             Thu 27 Jul 2023 18:48:45 +0000
ROA not before:           Thu 27 Jul 2023 18:43:45 +0000
ROA not after:            Thu 25 Jul 2024 18:48:45 +0000
asID:                     396426
IP address blocks:        199.48.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9a:11:23:90:2d:e3:23:91:4e:a3:73:26:4d:27:8e:03:84:62:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:45 2023 GMT
            Not After : Jul 25 18:48:45 2024 GMT
        Subject: CN=50405215444AEEA903B259C3E1EDC73F98841328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:d2:de:d9:9f:31:68:4e:fb:46:43:91:14:
                    d9:25:58:da:ca:76:95:63:83:f4:29:bc:84:4a:a2:
                    92:fd:36:db:a6:a2:01:8d:ba:05:e8:56:dd:f1:31:
                    79:56:a0:a3:04:ce:43:e7:2f:05:bb:0a:63:50:1a:
                    0b:78:55:f5:5e:44:90:2a:b8:9a:50:43:09:b7:7c:
                    f7:7b:eb:9e:74:0b:b2:8a:da:80:c2:e8:0d:95:c2:
                    bc:97:84:35:68:de:13:60:0e:ec:c8:21:e7:97:38:
                    93:a1:ae:ac:3c:16:7a:a7:22:6a:db:26:5d:17:16:
                    89:b3:47:ce:ee:89:1e:a4:fc:6c:e0:dc:1b:04:4c:
                    4f:d1:0c:89:10:0e:43:f1:0b:c7:78:b9:a3:0e:c6:
                    9f:bc:58:62:c1:57:4a:28:e3:98:7a:ab:22:c5:a6:
                    1d:2c:b2:15:f8:9f:01:88:1c:d7:17:8f:33:77:b0:
                    b4:39:65:72:9e:f7:e1:ea:d4:46:ea:92:89:08:16:
                    cf:81:02:42:ee:a1:5c:b6:0a:5f:39:d5:3c:c2:e9:
                    a8:25:c9:e3:f8:17:ba:3a:cc:7c:5b:39:e8:81:36:
                    89:04:0e:5d:de:16:a5:3a:9c:99:84:f3:2f:32:10:
                    0b:6d:e4:9d:e5:7f:d8:b9:d6:32:0c:9e:a4:7d:8b:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:52:15:44:4A:EE:A9:03:B2:59:C3:E1:ED:C7:3F:98:84:13:28
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20333936343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:22:ec:de:51:a4:0e:a9:a6:c1:ad:a5:ec:0b:fb:91:2d:
         60:0b:a3:44:43:b1:b7:01:7c:5b:a4:36:99:02:0f:e1:e6:1b:
         f9:2e:39:2f:cc:29:b4:93:66:2f:f6:07:f2:70:49:9d:93:84:
         e2:45:1f:e1:2c:f7:34:8f:43:7c:2c:97:92:52:7c:73:f9:5c:
         c9:d2:1f:c5:0e:b8:92:6e:2b:40:ea:dc:05:8f:97:cd:98:97:
         14:e2:b8:bd:3e:56:09:ff:3d:19:8e:2d:85:59:de:86:38:9f:
         e8:05:da:40:e1:3c:05:f4:52:48:89:a4:01:c9:e8:c6:94:d9:
         21:00:f5:a0:55:48:06:b2:3c:67:d6:fe:e2:cd:6b:08:40:e0:
         34:d1:df:43:a8:f3:ce:98:cd:aa:15:48:ad:25:72:52:16:28:
         2b:08:22:51:f2:9b:21:1c:c5:e6:49:c4:3c:5b:2a:fa:0d:b7:
         6e:21:24:23:d5:93:cf:50:fb:a9:e0:31:aa:8d:ac:a0:8a:33:
         47:69:05:4d:a7:8d:10:bf:dc:49:b5:de:a0:ea:88:58:a5:b0:
         ff:28:2b:cd:20:60:33:4e:41:18:88:1a:69:bf:f1:6d:e8:37:
         a3:39:c9:18:96:44:6f:4d:d4:fd:f4:8f:1d:2b:0a:94:24:b5:
         76:6a:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----