Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/a4dedc56-6e8f-3598-a790-fcef64d576c9.roa
File:                     a4dedc56-6e8f-3598-a790-fcef64d576c9.roa (raw, json)
Hash identifier:          SrNsW0JApeT+BKLVVo/SxWHDjNDYjytAknTHn1eOw0s=
Subject key identifier:   A6:09:AA:84:2A:DF:6C:0D:F6:1E:6F:AE:2B:DE:35:07:D8:78:A8:E0
Certificate issuer:       /CN=032e8926-c746-4280-80e0-13ca2b25ac7c
Certificate serial:       010D0C9F4328584267036423AB91C022F39882C0
Authority key identifier: 35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/a4dedc56-6e8f-3598-a790-fcef64d576c9.roa
Signing time:             Sat 01 Jul 2023 13:00:18 +0000
ROA not before:           Sat 01 Jul 2023 13:00:18 +0000
ROA not after:            Fri 29 Sep 2023 13:00:18 +0000
asID:                     7029
IP address blocks:        199.48.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:67:03:64:23:ab:91:c0:22:f3:98:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032e8926-c746-4280-80e0-13ca2b25ac7c
        Validity
            Not Before: Jul  1 13:00:18 2023 GMT
            Not After : Sep 29 13:00:18 2023 GMT
        Subject: CN=405acb21-0d7f-48be-a7b0-a2b9cafdf5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:93:54:0e:86:f3:94:a2:a9:ba:30:f8:73:
                    bd:a7:d2:1f:10:30:71:d0:0b:1f:e6:54:0c:fb:2b:
                    2c:20:f6:cc:88:ce:a0:5b:c4:5d:3e:06:18:d1:b7:
                    a8:8c:90:77:a3:f6:b4:29:37:64:a3:4d:4b:42:6f:
                    ab:01:9b:11:ea:ed:91:39:da:9b:45:75:b1:11:b8:
                    d2:59:25:bc:8b:a9:21:65:b4:4a:f1:47:7d:7c:68:
                    a7:af:9b:99:60:44:f8:6a:eb:5b:a8:63:57:53:41:
                    e8:f7:e5:40:b0:b1:27:c5:aa:48:30:b9:4b:4c:53:
                    44:83:1a:6b:31:0a:a1:85:2b:8d:5a:1c:25:72:5d:
                    2f:ef:ec:53:70:44:5f:09:e6:24:43:0f:f8:cc:89:
                    95:fb:b4:db:ce:1a:46:af:f4:3b:2a:51:a9:5c:77:
                    06:e0:52:ad:22:bc:9a:e8:9c:fc:a1:63:2e:ec:e7:
                    f7:ef:63:d6:4e:8e:89:61:ac:58:55:e5:ff:bd:af:
                    6e:17:33:ab:62:ad:c3:2a:53:31:56:20:55:af:c2:
                    24:90:56:3d:8d:7b:27:a2:13:a3:b3:c9:e9:30:50:
                    88:cb:af:03:1c:cb:9f:61:93:e0:21:4a:42:29:25:
                    c9:98:7b:4d:fc:5e:b0:16:41:51:1b:51:7d:e7:4e:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:09:AA:84:2A:DF:6C:0D:F6:1E:6F:AE:2B:DE:35:07:D8:78:A8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/a4dedc56-6e8f-3598-a790-fcef64d576c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/032e8926-c746-4280-80e0-13ca2b25ac7c.crl

            X509v3 Authority Key Identifier:
                keyid:35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:eb:8d:15:a2:80:92:61:b2:52:35:eb:23:0a:03:df:95:
         41:35:79:fd:7f:07:fa:5b:4e:e3:8f:9c:4d:d6:eb:6b:de:33:
         19:e5:de:e7:8a:ae:8d:3c:19:df:c0:3e:a1:56:98:1a:b1:5d:
         42:52:7a:cb:68:5a:47:90:26:34:10:4e:2a:db:00:09:06:62:
         29:cb:88:3c:99:83:16:2d:52:47:1b:ba:c5:98:4e:63:32:83:
         9a:83:19:2a:6b:38:2e:e3:d6:8a:34:0b:00:96:26:35:39:29:
         e0:72:b7:55:5f:69:05:a9:13:ce:a3:24:83:4d:96:b6:c4:85:
         c7:a1:01:71:39:ed:80:6b:6b:13:6d:0e:d9:06:3f:34:14:99:
         24:fa:a0:e2:3e:1a:d8:bf:01:32:da:35:a1:8a:74:d1:23:07:
         61:40:5f:48:4b:b7:32:5e:45:22:b6:b5:1f:fb:ad:0a:23:cc:
         85:73:fe:5e:4a:2e:a8:98:c6:9a:77:13:fe:1b:1f:29:cc:86:
         37:9d:ff:85:58:fa:a2:8b:64:72:90:49:79:64:f1:b8:47:76:
         53:f7:14:ce:46:73:0d:97:18:bc:f4:91:ac:6d:a7:89:46:e7:
         d6:36:b6:0a:6b:96:3b:63:c1:c3:92:88:32:91:79:f8:6f:32:
         e3:89:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----