Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/5d7d4b18-a8e5-33dc-9529-1d47ef9cc058.roa
File:                     5d7d4b18-a8e5-33dc-9529-1d47ef9cc058.roa (raw, json)
Hash identifier:          /mdlHucVRhI8IC6ejyR+iIJq8PBxG9AEF1ZgJ0HW92Q=
Subject key identifier:   34:5D:DD:19:F8:6A:13:70:4D:A7:5B:9C:98:59:CD:96:A4:ED:A8:0B
Certificate issuer:       /CN=032e8926-c746-4280-80e0-13ca2b25ac7c
Certificate serial:       010D0C9F43285841E46D64C984BB806DA05CD980
Authority key identifier: 35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/5d7d4b18-a8e5-33dc-9529-1d47ef9cc058.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 17 Jul 2023 13:59:55 +0000
asID:                     210439
IP address blocks:        199.48.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:64:c9:84:bb:80:6d:a0:5c:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032e8926-c746-4280-80e0-13ca2b25ac7c
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 17 13:59:55 2023 GMT
        Subject: CN=3598230c-dcf9-4182-9a77-4af1cd838f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:00:e2:53:c9:f7:4d:14:8e:e8:a5:c7:56:
                    fa:db:6c:68:c9:84:5f:92:43:c8:bd:59:0b:4f:d2:
                    2e:d8:19:54:f0:35:06:02:49:c2:e8:be:9f:7e:0e:
                    f4:a2:67:3c:68:23:1b:0f:69:04:84:b2:f2:89:35:
                    9d:c8:48:6d:cf:0b:12:ba:94:cd:49:0c:bd:c1:4c:
                    a0:a4:a3:cf:8d:25:68:55:40:0e:7a:a4:ee:36:aa:
                    0a:13:4e:7d:b5:e3:90:8c:5b:89:41:a8:c4:10:ca:
                    36:49:e1:8c:28:7f:32:33:37:8b:e5:34:b3:2f:2b:
                    0c:88:01:09:d5:80:54:d5:a1:06:8b:9e:ca:4e:09:
                    a5:28:16:12:85:d3:66:52:6c:fc:23:09:a5:e2:25:
                    60:ef:37:32:ec:ad:97:ae:53:6b:28:86:10:eb:4c:
                    5f:30:ec:c4:a9:c6:22:48:ef:34:98:4a:aa:0f:65:
                    38:47:04:d2:dd:10:f6:23:12:29:e8:cd:9b:81:6b:
                    df:1d:48:70:7d:fd:ae:9c:4f:f8:a9:9b:92:ef:2e:
                    f6:be:08:5f:ec:df:d1:9d:91:47:37:b3:b7:da:47:
                    7d:d1:a6:e3:ee:09:9a:30:dc:c0:7b:c1:a1:c9:c8:
                    eb:22:08:e1:b3:c3:ef:da:cf:23:4e:eb:ef:e8:70:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:DD:19:F8:6A:13:70:4D:A7:5B:9C:98:59:CD:96:A4:ED:A8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/5d7d4b18-a8e5-33dc-9529-1d47ef9cc058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/032e8926-c746-4280-80e0-13ca2b25ac7c.crl

            X509v3 Authority Key Identifier:
                keyid:35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:15:05:21:86:69:a1:1a:f9:d6:f0:02:20:0d:98:ae:56:
         2a:3e:fd:a3:f2:1b:5c:eb:c7:5b:03:9c:46:01:18:2b:94:ff:
         c7:37:9d:29:02:40:26:b8:a2:ff:89:4d:35:9a:21:03:4c:5a:
         47:d5:22:f7:bb:81:88:95:60:a3:5c:34:92:7a:c5:2f:36:ca:
         2a:d8:7c:6e:fa:07:39:ed:12:0a:be:86:1f:48:ef:2f:1b:11:
         bf:4d:f8:5a:24:19:76:ef:df:5f:85:59:7c:86:78:e9:5a:d9:
         66:a9:ac:ef:1b:e2:33:f7:f1:38:f8:23:88:5f:bd:a9:54:6c:
         ac:af:89:c2:c6:45:9f:76:ff:e8:2f:71:16:3b:d4:2c:3c:bd:
         4a:d0:7b:11:2e:c1:d8:c6:96:1d:20:0d:ea:a4:6d:4e:6b:74:
         92:71:14:03:14:d8:2a:ff:bb:77:aa:cb:76:4d:5f:a0:5e:30:
         73:0b:5c:b7:74:99:49:04:ed:a6:2b:bb:bb:16:91:b6:42:24:
         5a:22:24:00:5d:d3:71:b1:05:a8:35:72:3b:17:a1:36:4e:b4:
         8a:38:60:b6:cf:67:0c:9f:bc:02:4f:cd:6b:3d:a4:29:13:35:
         24:1b:46:7f:26:b3:ad:42:1f:1b:a2:4e:e2:6b:8f:c2:98:de:
         94:02:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----