Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3234382e302f32332d3233203d3e2030.roa
File:                     34352e34312e3234382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          2W6tFpkFBcfggr3D9gnIm5tCJ2l6ACU5mM7ORE/grmo=
Subject key identifier:   08:74:C1:8B:C7:A3:F4:53:32:31:42:C7:00:0C:4E:55:DB:EF:B8:DE
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       78D225B6FA61E484330E4EFBA7614126A5552687
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3234382e302f32332d3233203d3e2030.roa
Signing time:             Fri 21 Oct 2022 16:14:16 +0000
ROA not before:           Fri 21 Oct 2022 16:09:16 +0000
ROA not after:            Fri 20 Oct 2023 16:14:16 +0000
asID:                     0
IP address blocks:        45.41.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d2:25:b6:fa:61:e4:84:33:0e:4e:fb:a7:61:41:26:a5:55:26:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 21 16:09:16 2022 GMT
            Not After : Oct 20 16:14:16 2023 GMT
        Subject: CN=0874C18BC7A3F453323142C7000C4E55DBEFB8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:75:07:3a:f0:7e:9a:2b:22:b8:26:f5:e5:
                    ea:d2:ba:f7:e9:19:61:6e:7e:54:ee:00:13:f2:ae:
                    a2:ea:11:df:74:55:57:f7:25:ab:fc:f4:64:50:5c:
                    61:3d:61:dc:e4:4c:7b:a3:56:a2:4e:91:7f:a8:69:
                    a7:d5:74:cb:23:72:9b:a2:b9:2e:c3:5c:9e:1d:c0:
                    13:fc:87:49:30:4b:49:63:cc:b1:f5:01:32:64:f6:
                    58:fd:9e:fd:c6:65:4f:59:05:f0:43:de:b4:ea:71:
                    98:52:b9:32:10:46:86:38:0a:06:33:1e:eb:58:38:
                    f9:96:11:a1:18:4e:38:5a:ee:f3:63:b9:24:4d:14:
                    5f:6b:67:55:31:23:83:04:e4:c1:8a:0a:28:f1:de:
                    01:d5:5c:a7:79:3b:74:ff:d4:9d:d9:d8:c8:0f:67:
                    00:96:4b:b5:b6:1a:c9:fd:40:d3:0b:c6:21:ab:72:
                    fd:b1:dd:c1:5b:f8:99:93:4c:20:29:57:16:96:a1:
                    3d:c2:36:d5:b8:0a:9e:38:d9:bd:b5:5d:f4:ff:d3:
                    cd:d0:df:58:d2:ab:cb:3e:d3:e2:43:29:65:c9:11:
                    14:5b:2b:6f:16:92:e9:4d:66:d1:ce:2f:93:90:28:
                    d1:54:85:a0:f9:d0:11:41:5e:a5:fe:26:20:19:a6:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:C1:8B:C7:A3:F4:53:32:31:42:C7:00:0C:4E:55:DB:EF:B8:DE
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3234382e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:47:2f:d3:20:9b:2f:83:2d:83:de:4a:c3:00:e3:7f:ed:
         57:74:3d:0b:6c:c3:d7:6f:c4:e7:e5:eb:56:3f:b4:cf:e3:64:
         e6:3a:b9:33:27:eb:66:3c:0b:d7:57:93:c2:04:ce:de:df:a3:
         e9:f0:67:d5:ad:6f:57:bc:22:b3:a0:d1:60:55:88:97:6a:8d:
         b1:57:7b:7f:26:96:2c:10:06:4d:79:c5:9d:f5:46:b8:84:7b:
         93:b2:e6:5e:51:1e:7c:72:2a:65:43:d3:67:97:7f:9b:f6:e3:
         1b:ed:6c:28:b5:6a:9b:ce:d9:0b:cc:29:57:27:65:07:d2:ce:
         62:cb:43:99:80:f5:12:19:2b:92:cd:93:8b:1a:58:6a:b1:ea:
         11:b2:ba:15:50:a3:2e:bf:15:89:ed:a8:a9:28:aa:c6:2c:c2:
         ed:52:2f:7f:bc:dd:35:84:46:1a:7c:73:6f:cc:03:b2:8e:43:
         1a:96:2d:f4:4e:0e:18:5d:72:ce:2b:92:54:d1:02:20:95:55:
         c2:a7:d8:59:82:64:3a:06:5f:f9:65:0d:ec:e8:6e:e0:67:e8:
         41:54:1e:4b:7f:34:68:e7:b7:db:1a:29:3b:8c:0c:11:99:4d:
         fd:c4:18:f5:31:d2:88:25:33:aa:37:83:2f:5b:d7:22:1d:87:
         6e:57:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----