Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/3230352e3139362e39382e302f32342d3234203d3e203236333430.roa
File:                     3230352e3139362e39382e302f32342d3234203d3e203236333430.roa (raw, json)
Hash identifier:          97Udox0x/uwEqbE7ViQGD7v0ZclbNYje5TIrZksb8pg=
Subject key identifier:   5C:49:57:EE:D3:F2:8B:4E:B7:20:B9:B5:11:0E:B5:62:CA:4B:E6:EC
Certificate issuer:       /CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
Certificate serial:       2785D5B98D3D78D81C285ABB28BC1E19CAF9FEFF
Authority key identifier: 37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/3230352e3139362e39382e302f32342d3234203d3e203236333430.roa
Signing time:             Fri 24 Feb 2023 15:17:20 +0000
ROA not before:           Fri 24 Feb 2023 15:12:20 +0000
ROA not after:            Fri 23 Feb 2024 15:17:20 +0000
asID:                     26340
IP address blocks:        205.196.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:85:d5:b9:8d:3d:78:d8:1c:28:5a:bb:28:bc:1e:19:ca:f9:fe:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
        Validity
            Not Before: Feb 24 15:12:20 2023 GMT
            Not After : Feb 23 15:17:20 2024 GMT
        Subject: CN=5C4957EED3F28B4EB720B9B5110EB562CA4BE6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:2b:e3:7d:ca:61:29:8f:b4:5d:a0:15:64:
                    2b:7c:11:ca:e5:35:49:2b:ce:52:e0:e8:a6:07:e3:
                    dc:99:45:dd:6b:7e:01:07:94:18:69:0a:ef:8e:ea:
                    3a:ba:bb:ab:14:5f:6e:62:b4:28:05:61:4e:4d:fc:
                    13:20:67:6a:c4:8f:3e:0f:f4:d1:a8:49:88:04:44:
                    a3:24:19:6f:07:e7:9b:55:45:08:cc:d0:62:e1:70:
                    61:a8:57:bb:5b:46:45:b5:6c:ec:13:2e:16:c8:a2:
                    e1:6c:70:c2:c6:59:46:3a:8b:64:e3:81:ec:ca:2a:
                    e5:5a:31:94:ee:76:82:17:3e:7a:27:01:d5:c5:d6:
                    5f:20:f3:8d:34:64:58:d1:61:f5:e3:b0:f9:ed:30:
                    a0:a6:e3:3f:ef:6f:8b:bf:fd:bf:cc:c8:e4:44:bb:
                    0c:63:76:a1:e7:2a:03:48:92:53:cf:be:47:dc:36:
                    1a:3f:b6:0c:48:1c:0b:65:e7:94:df:7c:33:71:58:
                    8b:d6:29:c8:ff:7d:ca:63:e8:f5:b8:20:35:f4:6a:
                    07:23:bb:14:95:14:56:b3:b4:7a:4e:0e:55:af:d8:
                    4d:de:4f:41:fe:b1:1e:2f:06:8f:93:e9:64:a0:bd:
                    84:8d:11:02:06:f7:30:ec:d2:07:b6:48:9a:3d:5c:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:49:57:EE:D3:F2:8B:4E:B7:20:B9:B5:11:0E:B5:62:CA:4B:E6:EC
            X509v3 Authority Key Identifier:
                keyid:37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/3230352e3139362e39382e302f32342d3234203d3e203236333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:ce:1b:65:1d:7e:90:a9:51:49:83:ed:e2:29:71:85:27:
         5f:6c:85:72:2c:2f:df:8f:5e:8e:f6:ec:b4:97:e3:ef:7e:24:
         cc:85:b7:40:1d:44:59:3d:22:ff:50:1e:83:ce:5f:1f:ed:1d:
         da:8b:54:ed:1e:9c:90:4b:ff:e5:7a:a8:f0:24:33:a6:b2:02:
         81:e9:36:c1:0c:10:56:fc:d9:b0:b2:eb:26:3c:3d:81:6a:66:
         93:54:76:66:7f:10:eb:61:08:02:9e:af:28:1f:ba:a0:e5:ed:
         72:5e:3d:ad:11:65:26:89:26:eb:3a:42:f2:04:46:a0:3d:ff:
         81:aa:79:f2:ee:be:f2:5f:18:65:b9:e7:84:cc:ed:05:c7:ea:
         97:54:94:70:e1:3b:34:52:ff:60:4a:24:41:51:69:bd:12:f7:
         01:9b:e7:9f:66:ae:e6:a4:0d:a0:a9:a7:33:16:e6:7f:c9:3a:
         22:3f:d3:a7:fe:8b:31:a9:06:fa:0b:46:9b:78:96:0a:15:6d:
         5f:47:03:78:ac:61:ee:e9:13:16:03:0a:e3:5b:48:0a:e2:f2:
         0e:e9:86:74:ac:23:70:84:e1:0f:04:45:5c:f5:cb:d6:fb:d7:
         42:1d:6c:bf:b1:d4:26:da:79:68:1b:3b:23:13:a9:80:f1:98:
         e7:b0:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----