Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e203333363936.roa
File:                     3139392e34382e3138332e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          pPBmOBmdZPzI7fv0Xe0ZB9+i0lwN1+JrEH/QMVMAKs4=
Subject key identifier:   8B:FD:DE:95:4A:D5:33:88:AC:8C:03:4C:E2:B3:58:85:53:C0:31:A4
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       31C84B51E12CA31701699609DEF1F4989714E69A
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e203333363936.roa
Signing time:             Thu 27 Jul 2023 18:48:46 +0000
ROA not before:           Thu 27 Jul 2023 18:43:46 +0000
ROA not after:            Thu 25 Jul 2024 18:48:46 +0000
asID:                     33696
IP address blocks:        199.48.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:4b:51:e1:2c:a3:17:01:69:96:09:de:f1:f4:98:97:14:e6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:46 2023 GMT
            Not After : Jul 25 18:48:46 2024 GMT
        Subject: CN=8BFDDE954AD53388AC8C034CE2B3588553C031A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:89:dc:2f:94:21:6c:1e:7d:9c:99:17:51:
                    ec:4b:47:08:ad:87:3a:2b:e5:9a:9e:ab:44:f8:6d:
                    a9:c6:fc:7f:ca:a5:31:bd:29:a9:47:a7:c0:f1:da:
                    fa:a0:24:3d:43:d2:d0:0f:80:22:e2:cf:6f:45:53:
                    b8:ee:95:aa:4e:de:15:ad:57:13:c3:a8:b6:92:11:
                    08:7f:f1:42:41:90:c1:7f:d1:24:7e:c5:17:5b:35:
                    9d:c4:50:8d:e0:d2:5b:f4:a6:d1:52:e1:07:40:40:
                    c9:63:42:70:ef:87:90:14:99:87:e6:74:cd:95:7e:
                    78:af:a7:02:6b:f4:07:f4:d5:c6:ba:93:2c:86:d8:
                    ba:ed:f8:b1:6f:ec:ce:43:96:db:cb:ef:8a:80:31:
                    63:0e:bf:08:45:b9:41:35:d9:3b:3a:c1:c3:86:6e:
                    27:3f:0a:9b:19:f5:41:d8:95:69:46:89:dd:e7:c0:
                    99:da:88:b2:05:71:b6:5b:f1:98:f5:8d:a5:73:c0:
                    7f:29:b2:cc:d3:c8:1c:d8:cd:8a:dd:54:f2:cc:46:
                    9d:d9:0f:05:b5:90:d4:99:4d:e4:4b:49:3c:6b:0f:
                    fb:01:a4:0b:a7:bc:16:b6:61:6a:10:bd:4d:c3:af:
                    70:e6:6b:26:6e:43:0c:b0:08:c8:84:5a:07:3a:78:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:DE:95:4A:D5:33:88:AC:8C:03:4C:E2:B3:58:85:53:C0:31:A4
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:78:21:15:28:09:10:a0:f6:d2:dc:24:fd:80:94:7b:77:
         5f:69:bd:3e:d1:0d:f2:9d:63:a6:d2:90:e9:2e:2d:01:06:cb:
         77:e6:60:96:ce:57:13:4b:35:a5:07:db:ca:80:d2:83:c5:01:
         67:08:b8:51:87:5d:4b:20:a6:40:a7:04:af:6b:5f:26:fd:7a:
         5b:b7:cd:89:8d:d8:2d:65:95:b2:68:8a:7d:4a:e7:22:18:84:
         cb:7d:b6:8c:06:08:b4:aa:89:b0:8e:3a:8d:f8:b0:d1:7c:b6:
         f6:72:10:c1:f2:85:8f:a1:ad:57:1b:62:2e:ad:3a:54:fd:24:
         5a:09:78:66:48:f4:03:c9:07:3f:b2:e4:ef:99:10:c7:43:36:
         5b:ef:9e:6e:94:eb:57:4b:70:ba:85:79:45:51:3b:75:1c:d1:
         86:b0:05:01:fb:ba:28:30:0f:63:a6:68:98:cf:4f:41:7f:b1:
         a5:29:6a:3d:bb:e8:cf:f4:97:ad:cc:19:c2:fe:30:4d:3e:ac:
         d6:e2:63:01:42:7e:82:fa:a8:fb:06:22:b7:ac:0c:ab:a7:5a:
         b1:08:56:1f:04:53:15:db:74:d3:60:b4:35:09:f3:8d:45:b8:
         70:aa:c4:83:5d:84:cb:d4:af:c3:c0:cc:3c:f7:72:2d:02:e7:
         bb:20:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----