Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20383334.roa
File:                     3139392e34382e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          R+zW2XqGiv61hwerqoerhMRot1FQRtlIncu/Io3ukn0=
Subject key identifier:   B3:A8:01:E5:AC:DB:3B:A0:EC:52:4B:7C:98:81:A1:B4:6C:51:8A:06
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       7577F25C18537B7563E99D1E53773AB5896D1266
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20383334.roa
Signing time:             Fri 13 Oct 2023 00:00:06 +0000
ROA not before:           Thu 12 Oct 2023 23:55:06 +0000
ROA not after:            Fri 11 Oct 2024 00:00:06 +0000
asID:                     834
IP address blocks:        199.48.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:77:f2:5c:18:53:7b:75:63:e9:9d:1e:53:77:3a:b5:89:6d:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Oct 12 23:55:06 2023 GMT
            Not After : Oct 11 00:00:06 2024 GMT
        Subject: CN=B3A801E5ACDB3BA0EC524B7C9881A1B46C518A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:41:7b:e1:12:13:1a:9f:48:a7:0b:18:22:
                    f4:84:62:04:81:95:db:05:f5:f4:43:85:7c:6a:00:
                    cb:da:42:d9:a5:63:39:78:f7:72:29:5a:26:e5:83:
                    4e:a4:91:b1:2e:2a:3e:a8:06:93:58:98:c1:ab:9f:
                    0b:e2:80:8f:b0:75:eb:96:be:9f:d3:03:c6:ad:03:
                    96:37:c1:11:f6:29:d2:e4:20:42:fe:4d:ee:92:ae:
                    77:bb:af:0f:fb:2a:6b:00:1a:79:af:12:61:7a:1b:
                    8c:9b:a7:0d:79:6d:81:f4:c4:93:8a:ba:b4:a9:83:
                    ff:e7:6c:7c:46:3c:96:ec:ef:8e:a4:c7:e5:82:eb:
                    68:b2:1e:01:0c:d9:c6:09:a6:34:88:55:7b:8c:bd:
                    4e:18:dc:78:13:f9:94:6b:a5:95:a0:ad:4f:30:4a:
                    81:6d:36:37:11:96:d5:37:86:60:50:07:7a:9d:0e:
                    1f:e9:73:79:57:7c:ef:5c:c5:50:df:16:bc:d5:06:
                    ab:b9:d7:fb:3a:2e:09:a9:85:48:54:bb:fa:86:a2:
                    22:b5:9f:0e:b8:e4:5b:50:a2:39:52:56:d1:38:4d:
                    eb:38:a9:4f:0e:0f:a9:ba:6c:06:11:93:a7:6a:f6:
                    61:bd:df:ef:03:db:1c:fc:d5:08:32:0a:64:b7:bb:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:01:E5:AC:DB:3B:A0:EC:52:4B:7C:98:81:A1:B4:6C:51:8A:06
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:da:8a:9f:33:9d:90:f0:5e:d9:49:c9:82:12:fc:13:74:c9:
         b1:48:0c:2f:5b:bd:4a:72:2f:a9:bf:97:45:2e:fd:83:a5:d3:
         93:f1:7e:e3:ac:3f:e8:fc:57:b3:87:fc:04:15:f1:71:79:ca:
         2f:5f:2e:a9:e2:04:aa:88:6a:2d:d0:de:17:af:70:34:bb:6c:
         f1:7b:a0:80:9d:cd:a5:99:7f:db:82:e3:09:e9:c4:23:9d:7c:
         9e:79:61:df:80:51:62:28:dd:d7:a0:6f:c3:80:0a:82:bc:66:
         52:46:db:42:db:95:78:1f:93:5d:45:c7:88:ac:78:cf:36:6e:
         c8:db:48:f0:fd:20:14:c5:a6:e8:4d:86:b7:43:00:dd:ba:4c:
         d8:6f:fb:c9:79:cf:cf:f9:8c:ea:52:32:8d:78:99:e7:cb:f8:
         fb:c4:e1:9a:b0:b9:5f:5d:73:d1:3f:18:94:26:5b:33:33:85:
         41:8a:97:37:6c:16:d0:b9:77:49:3d:b6:18:9b:47:8f:35:9b:
         77:16:3b:27:59:df:7a:af:21:aa:fd:9f:ec:a9:68:ad:7e:0f:
         82:d0:c0:63:03:51:0f:db:6a:4b:f3:ca:71:a4:e3:d7:da:b5:
         e7:c6:6d:c1:4e:1c:de:b5:4d:73:ab:16:1a:51:03:28:4f:45:
         27:0c:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----