Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          8/1vUnnBZJH/lmbuDlXufvrJ2GpynCQVpCjPOuZD7z4=
Subject key identifier:   FE:60:C3:FA:1F:82:AA:2D:C7:DE:76:2D:86:93:A9:9E:C0:B4:61:63
Certificate issuer:       /CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
Certificate serial:       3756D0DEEAB0BBC06A75CF03C713D47D90A1BD75
Authority key identifier: A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time:             Thu 15 Sep 2022 18:58:09 +0000
ROA not before:           Thu 15 Sep 2022 18:53:09 +0000
ROA not after:            Thu 14 Sep 2023 18:58:09 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:56:d0:de:ea:b0:bb:c0:6a:75:cf:03:c7:13:d4:7d:90:a1:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
        Validity
            Not Before: Sep 15 18:53:09 2022 GMT
            Not After : Sep 14 18:58:09 2023 GMT
        Subject: CN=FE60C3FA1F82AA2DC7DE762D8693A99EC0B46163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:79:0a:a1:92:7c:9e:f8:bf:72:7c:80:e3:
                    06:0c:a0:50:c7:1e:5d:e8:9e:6d:e6:cd:02:e2:db:
                    07:6a:6b:70:67:77:36:21:aa:21:a4:2a:52:05:70:
                    33:85:b2:c3:61:ba:bd:15:01:a3:20:9f:dc:de:77:
                    70:1e:85:dd:2d:e0:1f:f6:bd:3f:df:25:b5:43:33:
                    ba:8e:a7:78:f6:82:53:6e:90:81:13:7e:41:68:84:
                    28:55:03:2e:47:4a:62:7e:1c:8f:c1:7f:61:e7:b5:
                    34:cd:76:97:12:09:72:9c:ae:63:ef:6c:8a:10:7d:
                    eb:63:bb:2d:ea:8e:49:ec:0e:6d:d5:ef:93:8e:0e:
                    b1:a0:b2:1f:2a:c5:d8:6a:f0:bb:15:c3:66:bb:de:
                    59:7e:67:07:a2:36:60:dc:c6:3a:78:ad:72:22:9b:
                    89:8d:a9:2f:fc:5e:a0:aa:d7:2f:d4:b4:61:c2:a4:
                    2c:1d:e1:fb:d1:09:46:5b:40:7e:7f:ae:7e:d3:1e:
                    44:8b:01:48:ab:e8:28:60:bb:c6:d7:bd:25:3c:64:
                    82:db:d4:1c:f7:f4:33:c8:7a:51:73:a3:9c:ee:c6:
                    75:d1:fb:fd:d4:5f:14:a8:a8:b9:51:03:7c:f1:9a:
                    4e:72:1d:60:05:95:04:99:63:89:74:74:92:69:72:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:C3:FA:1F:82:AA:2D:C7:DE:76:2D:86:93:A9:9E:C0:B4:61:63
            X509v3 Authority Key Identifier:
                keyid:A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/A439C91415E8CD468DB2508B0176AE2D53312EF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:84:67:cb:ab:29:4e:f4:7c:89:23:02:cb:e2:fc:89:98:85:
         d4:3b:f2:6b:f3:50:42:6c:c1:b7:36:0c:b9:6b:f8:b2:7c:e9:
         96:79:f3:50:51:09:7c:3b:73:bd:b2:52:a5:7c:8d:ce:fe:23:
         c6:8e:50:b8:8a:cd:cf:6c:5c:db:86:c6:59:c7:1d:93:4c:f6:
         f5:90:23:17:49:0f:94:85:48:c2:76:d4:81:c5:4e:79:cd:10:
         44:c1:44:d2:96:f1:77:94:68:7a:9d:24:93:4c:85:9e:42:87:
         97:bf:9c:20:48:04:a0:47:51:1a:9d:41:85:79:f6:a1:7a:e9:
         a1:f2:aa:25:b3:d0:22:68:04:4a:2c:46:ae:a6:1f:43:0b:d2:
         bf:4e:f4:24:6c:0c:03:1d:da:bb:02:52:43:03:18:87:b3:c1:
         a1:79:fe:0c:d3:f6:5a:d2:97:a7:e5:9a:d4:c9:31:91:b5:79:
         09:cf:5e:6c:da:1b:f1:e7:8d:7e:70:05:5f:a2:74:c5:95:af:
         a1:08:46:ab:ab:95:0e:de:ff:9c:69:06:b0:33:46:78:4b:11:
         5a:da:93:74:54:89:3e:fd:17:9d:e6:a9:64:44:e0:08:e4:e3:
         0b:21:d8:fa:cd:ab:f7:2a:21:60:b8:f9:e6:41:4a:67:83:c9:
         f2:05:a1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----