Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa
File:                     3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier:          Wc8SjFLw+HvKYRHObmz6HuUvD6++O/mQANkd2uI8aI8=
Subject key identifier:   B4:47:6B:F5:10:5F:C1:46:2E:F3:78:28:56:7D:78:AC:35:C1:D9:3D
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       1614A33786649BB81A427789E0F78C10E81707BF
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa
Signing time:             Fri 09 Dec 2022 16:08:19 +0000
ROA not before:           Fri 09 Dec 2022 16:03:19 +0000
ROA not after:            Fri 08 Dec 2023 16:08:19 +0000
asID:                     396998
IP address blocks:        204.10.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:14:a3:37:86:64:9b:b8:1a:42:77:89:e0:f7:8c:10:e8:17:07:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:03:19 2022 GMT
            Not After : Dec  8 16:08:19 2023 GMT
        Subject: CN=B4476BF5105FC1462EF37828567D78AC35C1D93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:47:ba:2b:5a:cb:24:a2:36:7c:2f:d3:63:
                    b1:b9:25:bc:c0:2c:a7:29:fd:67:bb:ef:6f:5b:8a:
                    67:86:51:3f:bb:50:34:22:51:bb:29:d1:29:dd:51:
                    76:c0:af:7c:52:57:81:34:32:ee:85:5c:98:2c:1a:
                    90:36:43:b5:c7:08:20:8d:cb:64:f0:4e:70:95:0c:
                    ef:b8:fb:27:83:f8:e2:d4:9a:3d:02:06:5d:19:cd:
                    cd:c5:e0:15:e5:e8:db:ae:af:5a:c6:66:40:56:98:
                    a2:ae:ca:69:10:88:61:2b:3b:57:f9:46:9c:79:94:
                    3a:8a:1e:6a:16:b3:3f:dd:d4:3f:75:81:57:04:9e:
                    e3:75:b7:dc:ec:81:50:ee:1a:30:5f:bf:f9:1a:c6:
                    81:d0:45:f9:6d:35:78:b7:81:8b:ce:7c:47:ea:ef:
                    af:96:1a:7e:98:1b:4f:87:71:d7:fa:96:1f:ed:66:
                    aa:aa:45:fc:b1:79:51:68:f7:1d:d1:77:2e:62:b0:
                    e9:40:a5:91:0c:2d:5a:9c:80:c5:f4:59:7d:94:1d:
                    73:85:1f:36:c9:0f:b7:6e:90:c9:fc:d9:9f:ac:8b:
                    ff:04:ca:f2:b8:5e:41:4f:7b:c1:02:4e:6f:0b:12:
                    fa:1f:01:69:aa:5d:d0:16:d8:ed:fb:95:57:fb:cb:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:47:6B:F5:10:5F:C1:46:2E:F3:78:28:56:7D:78:AC:35:C1:D9:3D
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e20333936393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d8:d8:05:0b:26:f8:ad:b7:74:90:6a:e7:5c:fb:90:a6:06:
         14:a3:4a:ab:2e:fc:14:53:99:c3:5a:72:58:d4:6a:5a:bb:40:
         d9:22:e8:90:40:f0:d7:a4:23:f8:a5:07:a7:48:a7:40:a9:b7:
         73:dc:0f:3c:e5:6c:40:5a:93:3c:a2:e0:eb:ac:71:f5:70:cb:
         d8:3f:8f:e3:de:5d:6b:df:ed:f8:2d:8e:73:2a:50:5e:16:93:
         08:22:8a:01:c8:f9:8a:ec:10:5c:67:35:1f:4a:17:65:aa:d5:
         0c:71:84:26:b9:54:52:9b:a0:47:1c:b8:13:84:48:38:84:24:
         23:71:2f:1d:3b:be:fd:33:41:c9:5a:2a:6f:9c:cf:3f:54:8a:
         7a:7c:92:b0:16:67:c5:d5:f2:c5:12:34:b5:8b:18:88:5d:57:
         dd:f1:bf:a3:48:6d:45:e8:14:df:78:06:6f:66:cd:4a:2d:07:
         2f:85:79:1c:df:4f:1c:83:cb:49:82:bc:c2:25:a1:5c:c7:d3:
         8a:e9:5f:3d:ef:45:a5:3f:53:78:b9:fa:5e:3a:b4:17:5f:0a:
         4b:ea:22:69:15:9a:82:00:91:8d:31:fe:75:28:81:81:3d:53:
         63:03:b4:e1:f7:0c:c5:bc:95:a4:37:0a:b6:e3:a3:96:e0:19:
         1c:6f:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----