Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e203335393133.roa
File:                     3139392e34382e3138322e302f32342d3234203d3e203335393133.roa (raw, json)
Hash identifier:          uWQE+2dj3UR0AxCwNROh85f+elk2WY24SHdB0bSPL5s=
Subject key identifier:   FA:D4:57:55:96:9F:43:72:24:42:8A:22:94:D7:05:E9:56:29:BA:D2
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       239E54E932C31B1D1ABD6676E21ED63FC2AFAC14
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e203335393133.roa
Signing time:             Thu 27 Jul 2023 18:48:45 +0000
ROA not before:           Thu 27 Jul 2023 18:43:45 +0000
ROA not after:            Thu 25 Jul 2024 18:48:45 +0000
asID:                     35913
IP address blocks:        199.48.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:54:e9:32:c3:1b:1d:1a:bd:66:76:e2:1e:d6:3f:c2:af:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:45 2023 GMT
            Not After : Jul 25 18:48:45 2024 GMT
        Subject: CN=FAD45755969F437224428A2294D705E95629BAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:f1:87:4c:24:22:c1:e9:af:1d:92:58:9a:
                    3a:02:ae:dc:24:92:9f:af:9c:4e:0b:79:4d:5e:dc:
                    6c:9f:9e:ae:ac:71:1e:d5:0b:51:7e:8a:8e:26:60:
                    10:6c:29:34:ea:29:2b:9e:35:78:c0:a5:fe:54:74:
                    2a:5e:2a:8a:cc:2c:a1:1f:1d:e7:5a:9e:4e:f8:de:
                    b4:7f:bc:14:ba:53:66:ac:7d:8e:89:c9:78:d7:72:
                    48:fe:54:6e:f2:f5:d2:6a:1f:88:61:91:03:ad:99:
                    1a:c1:55:8b:43:b2:c4:b6:6d:13:25:fc:2c:55:d2:
                    ba:16:3a:fd:ef:a0:c2:3c:3c:2e:19:49:7d:88:06:
                    36:5f:d0:d4:3f:7a:2a:10:bc:0d:9d:8a:5e:4b:d4:
                    ed:96:d1:de:79:f4:c1:51:02:d0:e4:82:8a:ef:9b:
                    69:0d:6a:93:e7:7b:a4:62:7b:8b:37:85:ee:75:5e:
                    86:ea:41:cb:2e:f8:28:76:b0:a3:da:01:f1:e2:b4:
                    43:ce:4f:0a:ac:fb:f1:78:89:49:cb:21:de:f9:d0:
                    a0:24:4d:69:10:61:28:04:ea:32:ba:91:21:8b:d6:
                    64:29:5e:e4:15:b7:d2:95:d7:8c:90:3e:70:80:3a:
                    0f:13:85:91:dc:0e:cf:ff:b8:da:6a:f4:27:98:b8:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D4:57:55:96:9F:43:72:24:42:8A:22:94:D7:05:E9:56:29:BA:D2
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e203335393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:93:ba:6d:20:f1:90:09:26:79:96:5e:35:36:a2:8e:6f:db:
         c5:2a:b3:be:ad:bf:2e:ff:e1:e8:d4:22:91:f6:1c:e7:78:6a:
         97:8d:54:37:53:db:ec:24:f6:0d:b7:fa:9d:56:bb:4c:90:f5:
         cf:c1:39:45:04:5e:f0:1e:01:c0:88:db:c6:25:02:96:68:bc:
         02:69:05:59:1e:59:21:5d:52:2a:ba:85:84:5a:59:97:f5:a9:
         3e:b4:46:66:40:8a:fd:be:8b:48:0f:a4:56:70:c4:86:69:54:
         d1:2e:23:6c:9d:7d:d3:72:27:5c:29:40:fe:9f:3f:8d:b0:84:
         b6:c3:8d:61:17:d5:9c:3d:17:a5:f6:e1:b1:ae:bd:a9:19:3b:
         2d:b8:77:f1:74:e6:50:f5:f6:c8:ab:48:04:60:02:2e:ab:fe:
         3d:f1:3a:bc:62:49:a6:f5:54:2a:4a:a9:77:82:18:07:ea:ce:
         f4:4e:9f:40:c1:d4:48:80:95:3e:c8:d3:9c:5e:09:e8:92:be:
         44:a3:89:5f:5c:3c:eb:f6:9b:31:5e:f5:5d:fd:73:e3:18:95:
         65:49:55:bf:6b:41:09:5b:9f:4d:f7:a5:a1:60:79:ab:f1:ee:
         d6:a0:a4:1c:b3:53:29:93:8c:a5:82:f4:6c:9d:ba:90:ca:0e:
         25:92:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----