Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier:          Iq47VCtjFnHKBrEZnJZcLiWvLJw0kPu+m3disSZxX6A=
Subject key identifier:   A6:CF:BB:0B:71:D2:E2:BE:55:46:F8:8D:4B:37:FB:A3:87:BC:B8:DF
Certificate issuer:       /CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
Certificate serial:       79357C8520567ECAC2A813FB4C24E51397657ECB
Authority key identifier: A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time:             Thu 15 Sep 2022 18:57:30 +0000
ROA not before:           Thu 15 Sep 2022 18:52:30 +0000
ROA not after:            Thu 14 Sep 2023 18:57:30 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:7c:85:20:56:7e:ca:c2:a8:13:fb:4c:24:e5:13:97:65:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
        Validity
            Not Before: Sep 15 18:52:30 2022 GMT
            Not After : Sep 14 18:57:30 2023 GMT
        Subject: CN=A6CFBB0B71D2E2BE5546F88D4B37FBA387BCB8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:7c:37:27:c1:5a:78:17:db:c7:bf:e8:f5:
                    fc:cc:3e:77:54:39:1c:7b:46:d8:4a:f6:88:78:23:
                    31:e0:ab:dd:42:aa:dd:9c:01:68:41:7a:8f:c2:86:
                    18:cc:63:f5:aa:0b:d2:0f:34:55:ff:be:85:75:b3:
                    37:cb:10:e3:7f:1b:1f:c9:7e:b3:fa:71:23:07:ed:
                    04:02:0a:7d:bf:3c:5d:12:cd:20:6f:80:3a:0d:87:
                    5b:bf:a6:b8:59:95:64:01:21:94:84:21:2a:08:c5:
                    74:77:08:e6:65:77:f3:43:70:23:cb:76:95:54:03:
                    b9:13:f4:68:05:f8:9e:0c:e9:4d:aa:87:54:01:b1:
                    3d:6f:3a:07:4c:5b:df:4a:a0:15:7e:89:8a:35:6f:
                    54:b5:ef:02:ee:23:1e:55:59:54:92:0d:f2:e1:08:
                    42:bd:ae:08:b2:1d:f3:38:42:54:cd:0e:5f:d5:f9:
                    e4:0e:5e:fe:55:52:43:23:f1:db:0a:34:a2:21:c9:
                    1e:50:2b:f2:b8:0c:d8:2d:88:cd:c4:d7:10:08:53:
                    61:6e:d2:ea:4e:bc:aa:de:89:50:7e:80:a7:c4:9d:
                    e1:e4:d3:a3:bb:d5:6d:b1:b7:6a:79:13:66:a5:19:
                    95:8b:2a:da:d1:bf:fc:66:b9:1a:c7:f7:1f:af:3e:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:BB:0B:71:D2:E2:BE:55:46:F8:8D:4B:37:FB:A3:87:BC:B8:DF
            X509v3 Authority Key Identifier:
                keyid:A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/A439C91415E8CD468DB2508B0176AE2D53312EF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:16:d1:eb:3e:a0:65:15:d2:76:01:87:27:c2:b1:27:ab:
         f4:10:8c:11:ce:cd:2b:60:f9:ed:68:6d:3f:91:35:52:fc:9f:
         1f:6b:6f:e8:34:64:13:3e:54:15:fd:b7:e9:df:a9:8b:be:cf:
         c8:19:1c:dc:e1:cd:c1:e7:e2:90:4b:00:8b:eb:a8:29:ed:03:
         8a:e7:4e:19:c0:83:c9:ae:31:54:30:b7:ab:a5:fa:85:3b:25:
         a4:7d:7d:a8:28:dc:94:db:62:63:47:16:f2:a3:a8:67:4a:eb:
         b1:32:c3:ee:cd:ef:ba:13:44:57:e1:38:5b:8c:4f:01:21:60:
         2d:c8:ec:de:fa:f5:4b:55:47:92:c5:bc:db:2b:e4:e8:76:dd:
         5e:e5:86:34:1a:8b:03:cc:87:85:52:e3:4c:23:c2:d1:5e:e2:
         7f:e7:be:fc:91:8a:8a:27:fb:c2:36:8b:b8:aa:aa:7b:85:5a:
         86:c2:f4:fa:bd:86:49:51:f8:8f:23:d2:04:d8:b8:25:d9:63:
         b8:c1:9a:c7:57:7c:93:81:be:17:9a:0c:d8:9e:e6:a2:18:b6:
         99:99:e8:a7:c8:52:07:c3:42:7b:a4:4a:9c:4d:aa:02:2a:8c:
         be:8d:61:68:a7:4e:39:09:f1:e5:4a:e8:14:78:d9:e7:26:b7:
         f6:59:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----