Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137382e302f32332d3233203d3e203534363133.roa
File:                     36382e36392e3137382e302f32332d3233203d3e203534363133.roa (raw, json)
Hash identifier:          JG060jOwlGAc9dq1Mi6YOUoJPArk0sHb6aiDBehENAE=
Subject key identifier:   46:4E:4F:09:3B:36:DA:B8:72:9F:DE:09:03:AB:63:17:E1:E6:4B:B0
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       3B585128D00A497F24E0C1C8DB51F70BDC6B50B3
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137382e302f32332d3233203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:15:30 +0000
ROA not before:           Tue 18 Oct 2022 18:10:30 +0000
ROA not after:            Tue 17 Oct 2023 18:15:30 +0000
asID:                     54613
IP address blocks:        68.69.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:58:51:28:d0:0a:49:7f:24:e0:c1:c8:db:51:f7:0b:dc:6b:50:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:10:30 2022 GMT
            Not After : Oct 17 18:15:30 2023 GMT
        Subject: CN=464E4F093B36DAB8729FDE0903AB6317E1E64BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:10:fe:11:0e:86:0c:22:49:43:5b:2d:6f:
                    cb:0b:9c:53:db:34:46:85:f6:0c:b4:59:b9:35:45:
                    36:94:63:78:ca:e4:8b:a7:36:86:4e:4f:16:94:02:
                    27:1c:6b:26:dc:5c:b0:e1:a8:5a:73:21:9a:a9:7a:
                    5b:f5:2c:3c:a5:dc:17:13:9a:f9:f3:41:48:76:8c:
                    1a:ac:58:59:09:40:19:54:ed:d6:1c:56:11:2e:78:
                    3a:47:9b:15:cf:25:8f:de:83:e6:c0:0a:71:fe:df:
                    c5:10:6c:34:29:6c:de:13:aa:a9:ae:db:1f:ed:97:
                    e1:21:bf:4a:ad:a0:31:48:48:1a:3b:ac:a9:dc:82:
                    05:63:13:77:d7:be:0b:da:f5:4a:30:8e:24:cc:38:
                    e6:2c:ce:f4:93:71:7f:8e:f3:6b:4e:04:0d:25:4c:
                    f8:f1:4e:31:05:5b:0d:cf:b5:ca:05:8d:65:83:bb:
                    fb:94:7e:a7:17:a3:ca:8d:bc:50:f6:66:95:c3:12:
                    40:29:67:c7:6d:84:b4:4b:9d:27:d3:8a:73:43:c5:
                    aa:10:eb:49:08:fc:82:a0:8f:6b:89:36:3e:da:fc:
                    bf:94:bd:18:11:5d:e7:48:72:04:d7:99:0f:8b:db:
                    5b:8d:36:bc:27:c6:da:77:b8:da:76:bf:39:1d:11:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4E:4F:09:3B:36:DA:B8:72:9F:DE:09:03:AB:63:17:E1:E6:4B:B0
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137382e302f32332d3233203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:a2:b5:56:30:75:0c:de:04:9d:e2:bf:1f:a6:97:a9:3f:
         b3:b0:31:91:30:c9:51:13:ef:9d:32:32:fc:70:dd:56:90:64:
         21:d9:5c:ae:16:6c:d1:21:64:49:d5:d2:12:28:ba:31:9f:cd:
         ff:ac:d6:61:1c:e1:4f:28:b2:6e:fc:2a:78:a6:46:97:12:0c:
         cb:5d:6a:c0:b7:59:7c:dc:6a:5d:fa:fb:66:91:95:fc:d0:f3:
         26:85:34:3a:c6:91:f6:f2:bd:21:0d:30:b3:3c:69:b7:b5:eb:
         72:90:95:77:a9:7c:04:79:07:f0:18:f1:d7:38:4c:5d:e6:5d:
         e3:55:46:c7:8f:51:d2:42:11:34:04:40:40:f7:0b:7d:dc:82:
         2a:fd:47:dd:28:af:2f:7d:f2:e3:2f:d1:c1:79:8c:56:1c:90:
         15:16:57:2b:41:b8:d8:44:ad:e6:19:e1:38:a7:4b:ee:9e:c5:
         56:95:67:2b:85:0e:b0:0e:60:59:af:df:1d:0c:5d:2c:b4:47:
         f0:a8:d0:52:da:49:df:84:1c:71:15:db:6f:6e:ac:0a:8b:1c:
         69:56:26:df:bd:25:f7:f9:b0:97:fc:ea:62:bd:c4:38:b5:60:
         23:6a:20:ca:8a:ff:5c:0d:e7:67:d4:9a:cb:84:3f:25:71:2a:
         79:33:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----