Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/0b7b8dd0-1700-3f19-8113-188fd49f8853.roa
File:                     0b7b8dd0-1700-3f19-8113-188fd49f8853.roa (raw, json)
Hash identifier:          w5a7eo90xE8lM/KX37HCcFjnumwmKMO8kuqwt5klb0o=
Subject key identifier:   4A:AF:F2:36:45:68:26:8F:39:C9:2E:6F:74:5C:4E:72:0E:30:5B:54
Certificate issuer:       /CN=032e8926-c746-4280-80e0-13ca2b25ac7c
Certificate serial:       010D0C9F4328583E605593B102B3D9464F05A480
Authority key identifier: 35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/0b7b8dd0-1700-3f19-8113-188fd49f8853.roa
Signing time:             Sun 26 Jun 2022 12:00:00 +0000
ROA not before:           Sun 26 Jun 2022 12:00:00 +0000
ROA not after:            Tue 27 Jun 2023 04:00:00 +0000
asID:                     29802
IP address blocks:        199.48.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:60:55:93:b1:02:b3:d9:46:4f:05:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032e8926-c746-4280-80e0-13ca2b25ac7c
        Validity
            Not Before: Jun 26 12:00:00 2022 GMT
            Not After : Jun 27 04:00:00 2023 GMT
        Subject: CN=933dd1f5-be68-4162-a5b0-7798a3fb14d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:7f:52:07:e6:8a:cb:ac:e3:11:da:fd:70:
                    dc:e2:fe:9d:b5:c9:47:14:83:71:09:f8:5f:45:c8:
                    f8:7e:b7:09:6c:00:fc:59:6e:07:68:26:3c:e0:4b:
                    ad:52:e9:95:29:36:66:d8:46:20:db:81:2d:38:ae:
                    40:44:e9:38:bc:2f:3f:4a:43:a1:8d:bc:00:5d:7b:
                    fa:d7:46:e5:a8:93:76:84:e4:32:81:55:34:79:f0:
                    79:db:c6:50:2e:e0:cc:16:e6:61:36:04:c8:d7:29:
                    6d:ed:bb:91:a7:b4:40:06:d0:27:6a:4c:c2:9f:35:
                    29:98:05:cc:53:3e:a6:d6:84:b5:4e:a3:71:77:25:
                    af:55:62:f6:d7:f2:68:95:d1:2e:2e:52:4c:01:01:
                    62:43:db:a4:3d:4a:2b:d9:69:da:ab:aa:16:8d:90:
                    36:cb:ee:05:16:4c:8a:34:b7:89:63:d7:e3:8a:74:
                    66:39:5a:d5:c9:0c:4f:40:14:bc:27:1e:30:3b:b8:
                    d8:58:df:46:1a:02:f3:ec:59:ec:d9:18:23:66:cc:
                    06:69:b9:a0:a0:03:2f:71:42:33:00:e2:37:5a:f5:
                    9d:9f:70:07:50:5b:ba:33:b1:02:2a:c2:12:ce:96:
                    78:03:ce:ea:39:8c:28:81:65:de:eb:d7:8c:d2:b9:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AF:F2:36:45:68:26:8F:39:C9:2E:6F:74:5C:4E:72:0E:30:5B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/0b7b8dd0-1700-3f19-8113-188fd49f8853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/032e8926-c746-4280-80e0-13ca2b25ac7c.crl

            X509v3 Authority Key Identifier:
                keyid:35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:2d:46:8f:d6:0a:56:aa:a7:cf:76:25:f0:11:b9:96:17:
         16:92:80:6b:a6:e4:67:68:da:4d:7a:cd:b9:ff:a5:4a:95:66:
         e2:e2:bc:93:5f:75:76:76:f6:90:23:41:e1:bc:02:84:cc:42:
         a8:f5:b5:13:89:71:7c:24:b0:29:c2:21:b1:5b:f0:82:c3:12:
         08:8e:08:64:c5:47:4f:49:26:86:42:98:49:74:c8:86:46:b3:
         96:bf:4c:6a:1c:47:78:94:41:41:33:53:c8:f5:ae:4c:38:d5:
         93:ed:e8:42:52:64:71:4d:0f:01:6a:83:f8:cb:6c:4c:13:b4:
         dd:86:6b:09:cf:1d:7d:d1:9f:0e:20:28:95:ed:2a:67:6f:06:
         ff:e6:66:fa:5c:d4:e2:63:41:a8:5f:48:13:51:4b:b5:92:49:
         32:6b:0a:a1:50:f0:ec:d0:e2:a8:ed:43:e1:01:dd:b9:cb:18:
         9a:d9:b0:22:c0:2b:8f:06:35:18:87:3b:d3:16:f9:83:18:a2:
         e4:a6:57:02:06:30:0f:4e:99:17:a1:d4:c8:69:f6:83:85:06:
         35:64:d2:e1:a3:1c:ae:ab:25:20:37:44:37:8a:a1:09:e0:ef:
         55:68:96:e6:54:55:ce:b5:70:af:c4:d2:19:27:44:92:ab:ad:
         82:a6:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----