Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137392e302f32342d3234203d3e203631333137.roa
File:                     3139392e34382e3137392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          H9WD7rOA2hooYBvA+jyN6zyly+tGQIIDJksOXC1JbEY=
Subject key identifier:   35:9E:40:6B:68:42:C0:E6:00:6A:8C:04:6A:D2:BF:97:7D:0B:97:C4
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       557EAF4AA586F64318CEEF298DC4EE3F8DD69E16
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 27 Jul 2023 18:48:44 +0000
ROA not before:           Thu 27 Jul 2023 18:43:44 +0000
ROA not after:            Thu 25 Jul 2024 18:48:44 +0000
asID:                     61317
IP address blocks:        199.48.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7e:af:4a:a5:86:f6:43:18:ce:ef:29:8d:c4:ee:3f:8d:d6:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:44 2023 GMT
            Not After : Jul 25 18:48:44 2024 GMT
        Subject: CN=359E406B6842C0E6006A8C046AD2BF977D0B97C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:fc:70:c8:35:cc:58:67:bd:fb:4f:1c:ef:
                    7f:08:9c:aa:bc:01:5c:ab:69:39:2a:0c:51:4b:86:
                    e3:1a:bb:67:bf:3c:1f:57:77:f8:5a:77:03:bb:81:
                    61:b3:bd:c7:bc:fc:70:dd:cf:20:8d:c6:a1:8c:c8:
                    88:60:55:88:61:21:27:db:32:a5:63:fb:48:e5:57:
                    ac:63:73:e7:d7:48:8e:98:07:39:07:6e:d9:d8:96:
                    21:91:b8:77:08:e4:a4:b3:35:b8:5f:8f:91:cb:81:
                    9f:88:85:58:3f:db:76:0f:85:44:e4:f4:85:c7:77:
                    3c:1d:a7:81:b1:20:12:cc:9d:32:7c:4b:1b:58:c1:
                    13:f2:69:66:d6:96:30:ac:16:6c:91:b0:16:cb:e2:
                    78:ed:f3:72:5f:57:d2:97:91:3e:21:9b:a6:5e:4d:
                    ac:e7:6e:5e:a4:2d:fe:18:06:e6:1e:06:1d:49:80:
                    db:57:d9:2f:b6:1c:59:86:1c:c9:c0:bc:98:ee:a2:
                    e0:c6:a9:29:32:04:09:c5:f6:0d:7a:bd:71:7a:59:
                    52:b9:c3:a9:9c:47:83:83:de:22:2c:24:3e:7f:fb:
                    e2:33:5d:f8:e8:d8:9d:78:38:11:9d:f2:a4:74:e1:
                    4c:e8:e0:87:35:ad:1f:93:14:d5:38:31:29:f0:b8:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:40:6B:68:42:C0:E6:00:6A:8C:04:6A:D2:BF:97:7D:0B:97:C4
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:ff:2a:f2:32:c6:ea:cd:00:da:c8:52:20:49:f4:f8:ce:
         0c:2f:f0:26:a6:d1:eb:05:e6:6a:88:25:13:22:8a:72:2f:3c:
         33:33:a5:7f:54:67:cd:5a:b4:2f:c8:9d:29:46:59:70:f1:65:
         30:46:ed:82:d5:c9:d5:89:fa:75:f4:1a:42:29:60:68:82:d3:
         04:08:dc:40:30:3d:e7:a7:df:ac:85:0c:90:54:a5:0b:31:3e:
         b7:3b:19:c9:a3:7b:24:36:ae:ad:7e:86:bb:41:21:71:6b:9a:
         d8:14:c6:d7:c3:3d:fd:c1:ac:46:02:e9:5c:81:df:4e:ec:91:
         62:a8:aa:5a:81:37:bd:a9:87:1d:36:1c:27:24:22:5c:40:3b:
         fa:cf:2a:cc:db:43:a4:e2:92:7d:45:0e:2b:dc:02:ec:0b:61:
         0e:46:cc:bd:eb:18:0b:50:52:8a:a1:5a:a1:c7:1f:35:8e:51:
         66:d1:ee:9a:a7:18:d2:4f:2e:4a:a3:5d:a4:92:0b:1f:58:4a:
         e4:a4:d4:f7:61:d2:4c:13:48:60:d5:c5:77:0a:bc:a5:65:05:
         af:eb:bf:a4:43:5c:45:f2:48:e3:e9:c8:ec:32:a9:9f:8a:64:
         48:bb:cd:36:2e:42:23:64:75:88:f5:66:11:ab:5e:24:cd:0d:
         24:2e:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----