Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37392e302f32342d3234203d3e203534363133.roa
File:                     3133342e3139352e37392e302f32342d3234203d3e203534363133.roa (raw, json)
Hash identifier:          9EGkcA3ij31oYma2gV/i7FeUMpAFTyPKzXZKZnOGCiA=
Subject key identifier:   DD:09:58:00:B3:A1:8B:0B:A4:92:33:79:5A:F2:92:00:04:87:0D:BF
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       67190134B0C2C14E0096E155E47A32D233A6DA33
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37392e302f32342d3234203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:15:58 +0000
ROA not before:           Tue 18 Oct 2022 18:10:58 +0000
ROA not after:            Tue 17 Oct 2023 18:15:58 +0000
asID:                     54613
IP address blocks:        134.195.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:19:01:34:b0:c2:c1:4e:00:96:e1:55:e4:7a:32:d2:33:a6:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:10:58 2022 GMT
            Not After : Oct 17 18:15:58 2023 GMT
        Subject: CN=DD095800B3A18B0BA49233795AF2920004870DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:54:72:63:20:e5:3b:57:01:8b:54:30:09:
                    47:c8:0f:6c:cd:39:a6:5d:97:3c:a4:c8:6f:d9:1c:
                    91:e3:56:f2:5c:36:1b:8a:70:69:81:0d:b0:b5:33:
                    5b:90:72:8f:45:88:51:97:4e:92:44:86:87:3d:6e:
                    c8:a0:46:de:8a:30:11:b3:d8:98:ec:60:18:55:ff:
                    76:3e:eb:63:c0:f6:04:a1:0f:d6:34:17:a8:cb:82:
                    c8:fe:20:cd:5f:b5:09:57:bd:f0:26:16:4f:33:a8:
                    b5:1d:0a:c0:08:b9:df:b4:c3:f1:2f:5d:53:0e:53:
                    24:9d:27:d4:0a:ae:ad:49:48:ba:ea:50:76:c1:f6:
                    52:1b:17:b3:28:22:db:b7:49:e2:e7:40:03:5b:9a:
                    70:6e:91:eb:f1:69:a6:2d:aa:ff:ff:ac:be:3e:e2:
                    f2:1b:5f:d8:0c:63:a2:45:ca:59:2f:a6:f0:47:ac:
                    7e:06:2a:bc:80:02:09:ec:7b:30:ed:4e:ab:41:52:
                    99:0b:1a:ca:7e:8d:ba:ca:6e:e9:7c:58:10:e4:eb:
                    58:5d:2e:b6:b5:87:f2:b6:11:55:ee:a7:85:45:e1:
                    89:83:2e:4a:74:9b:8d:bc:25:e5:1d:00:5c:84:d8:
                    aa:6a:2a:56:2f:2b:25:6f:ef:b6:ea:b3:f5:d4:f2:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:09:58:00:B3:A1:8B:0B:A4:92:33:79:5A:F2:92:00:04:87:0D:BF
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37392e302f32342d3234203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:12:49:84:96:41:10:4b:a9:6f:18:ec:06:52:da:78:04:
         7d:39:3d:bf:9a:35:e9:c9:36:31:5c:ed:2e:6c:a2:c9:8c:6f:
         d2:80:e7:47:83:e4:57:dd:29:4a:71:14:49:27:32:65:3c:b3:
         47:00:a8:f4:24:52:01:7b:7f:c9:75:02:f8:58:5d:0b:c1:80:
         81:d1:3c:d9:07:b9:9e:7b:6d:99:59:ab:73:88:c1:11:58:34:
         80:30:5f:c0:09:6c:ad:9c:b1:02:88:8d:67:dc:c8:f6:b9:03:
         e5:b2:39:5f:df:5c:44:ac:0c:14:93:86:83:8c:c4:67:23:ea:
         c8:a0:2a:ef:6c:60:49:47:44:b7:26:a5:5c:50:3d:a0:af:0f:
         01:ad:5a:57:da:0d:11:81:42:41:e9:84:3c:cb:ff:b1:b7:bd:
         b0:af:4d:15:33:49:6e:26:6d:21:7e:8b:00:05:9f:a7:2c:ae:
         25:c7:9d:0a:1a:1b:57:58:54:28:7e:ac:db:66:50:cf:b1:b5:
         8c:d9:03:ce:48:1a:d5:72:b2:85:fb:db:7c:18:d4:c2:a6:60:
         1f:d1:b9:81:35:e6:67:0d:b4:9f:16:51:86:92:31:d6:f5:75:
         75:a4:79:ab:f3:bf:70:76:c5:94:f6:ff:ba:25:a7:1e:87:d1:
         8d:68:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----