Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e2031323339.roa
File:                     3139392e34382e3138322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          NS7tynmUtgvY6LiiKEUFWNAWZCs31gLo24XH+/vMOgY=
Subject key identifier:   3C:55:84:A3:9E:D9:B3:8B:7D:B3:D8:1C:84:E4:DD:71:B8:3E:D5:2F
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       4950B4124E5F4BDBB9E475E5422BEAD319161D6A
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 18 Sep 2023 16:54:08 +0000
ROA not before:           Mon 18 Sep 2023 16:49:08 +0000
ROA not after:            Mon 16 Sep 2024 16:54:08 +0000
asID:                     1239
IP address blocks:        199.48.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:50:b4:12:4e:5f:4b:db:b9:e4:75:e5:42:2b:ea:d3:19:16:1d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Sep 18 16:49:08 2023 GMT
            Not After : Sep 16 16:54:08 2024 GMT
        Subject: CN=3C5584A39ED9B38B7DB3D81C84E4DD71B83ED52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:f7:9a:95:08:71:e1:a7:af:e3:0d:8f:4b:
                    4d:8a:fa:5a:31:fd:87:4c:ba:45:91:d5:37:37:40:
                    69:b8:7d:e7:ab:51:96:a5:98:f1:27:14:1c:c6:0b:
                    1c:4b:b1:9c:ad:f4:4e:37:4a:38:89:72:e2:3d:68:
                    fe:2f:6a:b5:89:59:9d:88:0b:7c:19:a8:30:09:47:
                    c4:57:2d:ce:9a:16:13:a4:72:e6:c0:0d:ea:60:b2:
                    be:b9:03:f3:cb:2d:90:4f:7d:d4:d2:6b:8d:0e:8a:
                    0b:f2:83:f7:06:d3:99:57:5a:df:f5:2f:c0:f0:a8:
                    15:a3:aa:a7:ed:56:47:6f:0e:cf:7c:61:77:f5:9f:
                    1b:ba:d9:a9:eb:9a:ea:1e:8e:f4:22:6d:63:a0:33:
                    83:22:78:e6:75:ba:83:ac:09:05:75:53:b4:a8:3c:
                    a5:66:8c:94:97:10:74:e5:c5:5b:7b:4a:c7:53:b9:
                    c3:28:70:20:29:d8:61:42:87:26:e1:e9:87:fd:e1:
                    a4:48:7f:68:d4:49:be:9f:2c:12:b0:1d:22:22:00:
                    f7:6c:b7:b6:a9:b6:29:78:8a:05:6d:1e:8e:ec:3e:
                    e8:89:12:19:e2:f2:45:81:b1:a6:94:b2:60:f6:43:
                    95:2e:20:09:97:49:88:18:59:9b:04:e2:39:a4:10:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:55:84:A3:9E:D9:B3:8B:7D:B3:D8:1C:84:E4:DD:71:B8:3E:D5:2F
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:da:ea:dd:a8:e6:46:5f:b9:75:47:a8:43:b4:e7:28:e8:ef:
         54:f7:4e:ec:61:ed:39:fa:7c:6e:15:d4:54:89:14:a2:30:c0:
         41:9e:b4:0e:5b:74:3a:fc:82:09:4b:9c:e9:4f:c4:9d:b5:17:
         c6:d1:14:ef:fb:d7:59:bb:65:a2:ca:9c:c6:1c:e6:10:5e:44:
         bb:24:3b:e6:20:d5:0e:a4:25:bf:9e:08:db:5a:8a:ce:8d:cc:
         50:27:da:04:26:1f:75:c4:ff:ed:f8:be:3a:6b:38:62:10:72:
         90:f9:2d:ba:ef:76:4f:fc:0d:84:3f:46:9f:01:34:a0:59:cb:
         23:a5:24:83:a7:f0:c7:16:61:c3:fc:b6:99:5c:2b:32:e5:af:
         00:53:d5:16:9a:fc:9a:fd:4a:0d:f5:a8:80:0f:62:94:70:a1:
         10:d3:2e:ef:71:e8:d3:ee:1b:d1:4f:8d:ab:51:cf:83:33:c4:
         0c:9f:bb:52:1a:52:5a:80:92:73:7c:07:ca:24:b7:03:0e:21:
         c7:80:73:a9:9a:fb:b7:01:d5:fc:a7:0d:bd:b9:d0:72:f4:ad:
         85:5e:cb:37:f4:2a:59:ab:fc:cc:ed:6c:28:a2:62:54:f0:76:
         67:b4:19:d7:32:7c:7f:7e:b6:24:68:3f:d7:a8:b5:34:31:b4:
         de:bf:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----