Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/edbd62b0-a329-315b-a2cb-83417303d158.roa
File:                     edbd62b0-a329-315b-a2cb-83417303d158.roa (raw, json)
Hash identifier:          RrCaohDv20oupXdbmd0H9pAt66/F2wYVoTxjucXzc1s=
Subject key identifier:   B5:5E:B4:40:87:6B:26:15:96:1A:51:CC:A7:21:F2:D0:EC:1F:E9:BF
Certificate issuer:       /CN=032e8926-c746-4280-80e0-13ca2b25ac7c
Certificate serial:       010D0C9F432858426703638F2322C9B53C110100
Authority key identifier: 35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/edbd62b0-a329-315b-a2cb-83417303d158.roa
Signing time:             Sat 01 Jul 2023 13:00:18 +0000
ROA not before:           Sat 01 Jul 2023 13:00:18 +0000
ROA not after:            Fri 29 Sep 2023 13:00:18 +0000
asID:                     398465
IP address blocks:        199.48.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:67:03:63:8f:23:22:c9:b5:3c:11:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032e8926-c746-4280-80e0-13ca2b25ac7c
        Validity
            Not Before: Jul  1 13:00:18 2023 GMT
            Not After : Sep 29 13:00:18 2023 GMT
        Subject: CN=59744290-9072-416e-b8d7-3c93b380a390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:0a:dd:e0:59:09:c6:e2:96:61:59:82:69:
                    86:14:3c:f0:d9:60:d9:a1:b7:01:70:5d:62:8b:cf:
                    96:21:42:09:44:e2:46:45:c5:41:63:da:06:28:fb:
                    1d:d3:71:54:71:86:03:44:01:2e:07:b4:3b:e9:5c:
                    36:64:09:bd:14:00:e7:45:5d:62:41:d2:04:41:30:
                    6a:0c:89:56:ec:2b:64:30:34:08:5a:2a:99:3d:f2:
                    f1:d0:49:fb:eb:c9:d9:84:a7:0d:80:83:8d:83:b8:
                    d5:34:c0:22:d8:d5:92:f7:f9:84:3e:0c:92:c7:2d:
                    b5:b8:24:4d:86:91:f0:e1:c2:8d:98:c6:10:b8:ae:
                    e8:d4:9c:34:85:0f:80:bd:a9:03:14:ef:61:78:a2:
                    22:f8:9b:82:68:e3:65:dd:36:1c:f8:11:85:86:5f:
                    21:17:8a:2a:83:40:f8:13:07:bc:c0:2d:db:73:e0:
                    86:31:0a:dd:f6:74:76:a5:fb:e6:9b:4d:72:92:4d:
                    53:d5:69:f8:c0:cd:cf:57:c4:01:60:90:74:af:6e:
                    ad:ea:2c:eb:2e:33:06:9f:eb:17:df:39:85:9f:fe:
                    16:bb:32:85:65:0c:7b:52:30:77:02:a3:a2:9b:3e:
                    af:03:cc:1d:fa:3d:fb:1f:02:3b:ac:3e:99:53:db:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:B4:40:87:6B:26:15:96:1A:51:CC:A7:21:F2:D0:EC:1F:E9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/edbd62b0-a329-315b-a2cb-83417303d158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c/032e8926-c746-4280-80e0-13ca2b25ac7c.crl

            X509v3 Authority Key Identifier:
                keyid:35:8B:92:E4:46:F3:FA:E7:44:BA:1A:C8:6C:29:56:81:FB:39:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/032e8926-c746-4280-80e0-13ca2b25ac7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:21:63:06:a9:a2:4c:d3:7f:c9:b3:46:1f:12:a6:64:d4:
         e4:94:f0:13:ce:54:86:5c:73:6c:e5:b7:cc:c1:ff:32:18:89:
         46:41:7c:bc:d6:68:05:68:0d:ce:15:7f:4b:0e:86:8c:55:38:
         94:48:25:20:28:16:9d:62:36:40:9a:28:07:05:9e:ca:21:dd:
         17:17:9d:03:25:88:6b:47:73:8e:73:ac:aa:84:91:12:14:5e:
         5a:a2:ab:f9:d2:1f:95:63:b9:d7:70:62:d1:b4:6c:4c:cf:fd:
         b2:ee:1a:91:5e:96:23:8e:eb:7c:3d:04:b7:c4:0e:86:02:d6:
         fb:97:2a:8f:d0:8f:30:c7:2b:8f:19:4b:33:3a:94:4d:7a:35:
         fe:ca:11:96:b5:e4:78:a8:d3:3e:33:a9:62:78:ab:c3:43:49:
         d6:68:a3:54:62:7e:98:30:90:ce:cd:65:85:fa:91:13:fb:4c:
         5a:f1:26:aa:0d:b2:d7:2d:29:a8:f6:31:0a:66:73:54:18:f0:
         c9:54:e6:56:63:5e:2e:e0:f0:dd:2c:42:ba:1e:5c:47:d7:bb:
         db:00:62:12:c7:4e:59:85:18:23:24:9f:57:d2:73:c2:fb:7c:
         e3:55:ac:b8:91:a0:4b:22:70:57:8e:ed:7f:75:09:a3:28:7c:
         32:8f:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----