Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          eCwkRCN41YLsthVbLULHVxT8nFs+3h+LCkdX8/1ytqg=
Subject key identifier:   14:0C:44:37:A8:15:FC:AC:70:83:1D:71:CC:03:0C:7C:EF:25:92:D4
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       509041491717D6F97C1C66F1857B026F2685696A
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:22:24 +0000
ROA not before:           Thu 13 Jan 2022 19:17:24 +0000
ROA not after:            Thu 12 Jan 2023 19:22:24 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:90:41:49:17:17:d6:f9:7c:1c:66:f1:85:7b:02:6f:26:85:69:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 19:17:24 2022 GMT
            Not After : Jan 12 19:22:24 2023 GMT
        Subject: CN=140C4437A815FCAC70831D71CC030C7CEF2592D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:b8:eb:cb:8b:9d:fd:ae:87:6c:30:d3:99:
                    b1:06:b9:ea:4b:2f:7a:00:83:75:a6:f1:17:2c:7b:
                    d7:5c:12:2b:1f:05:9a:1e:0b:de:7b:86:4f:ec:35:
                    d3:00:ee:ed:f3:b2:0e:20:21:29:f7:b0:d0:90:55:
                    02:91:71:34:43:ef:03:2e:4c:21:df:5a:c8:b9:40:
                    0e:43:53:91:34:59:81:f3:e9:cd:7b:1f:47:82:4a:
                    ec:a5:f1:41:4a:56:c3:05:78:0f:85:f3:e0:ce:cf:
                    04:0b:8d:99:2c:3a:0b:f9:18:1a:3b:27:47:f3:01:
                    ed:38:75:5e:89:34:32:2b:b3:7e:21:fc:61:b1:86:
                    ef:b4:ad:e1:e2:e4:7a:54:48:d4:85:8c:80:23:1f:
                    85:e9:fc:1f:85:ae:95:e1:ef:86:3c:56:f0:9f:44:
                    13:3b:af:c4:9a:be:0f:00:0e:d2:5c:86:23:b3:3d:
                    58:a7:73:40:9b:d6:61:f7:ba:5e:86:6e:78:6c:e4:
                    36:11:2c:fc:57:c4:d1:43:50:17:90:7e:5a:66:c3:
                    46:a0:08:bd:63:4f:35:3b:6e:5c:ae:a0:ee:ff:eb:
                    bb:5f:37:ef:f5:fe:1c:45:b9:fe:b4:b2:cc:0e:dd:
                    f8:f5:38:e0:3c:6c:3e:f0:f9:59:14:de:fb:4a:f1:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0C:44:37:A8:15:FC:AC:70:83:1D:71:CC:03:0C:7C:EF:25:92:D4
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:19:c6:d2:3f:d8:06:b7:7f:92:6e:a7:d3:d4:02:d6:3a:71:
         07:2c:dc:fc:44:84:fb:b3:75:bc:6a:b6:72:7b:97:5c:a6:ce:
         c8:14:8f:3f:ad:aa:7f:55:62:1a:b7:9f:f3:9f:51:25:0d:5e:
         23:fc:1b:a4:0a:db:7e:da:93:6d:a4:78:e9:57:50:8c:07:e3:
         b2:5e:b1:62:5e:20:a3:6b:e7:ef:32:f0:6c:31:a0:ae:5b:ff:
         47:2c:df:0d:27:62:15:54:20:53:b1:73:b5:df:d7:75:6d:a7:
         01:e9:42:68:5d:92:7d:58:6d:f8:53:59:51:e6:4f:c4:b1:3d:
         72:2d:38:a1:60:97:0b:d4:32:0f:55:a6:7e:ae:f9:ad:f3:cc:
         cc:ed:5c:17:7e:37:a5:02:13:dc:6d:5a:c0:5b:44:b9:51:52:
         08:ea:a0:d1:d2:a0:8f:84:87:b5:56:a0:af:7f:52:c0:c1:36:
         20:ad:b4:ee:8e:15:15:b1:8b:96:1d:cf:fb:11:76:93:94:36:
         87:1a:c7:ea:a5:9e:e7:f8:26:55:8b:3a:db:d7:34:ec:29:9e:
         9e:99:e3:cd:4e:99:3b:1f:a7:f9:34:23:b2:6f:33:d7:78:e8:
         10:28:9e:f9:e8:6e:50:5a:4c:e0:53:07:42:86:18:fa:ca:3f:
         f6:83:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----