Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          lQf0KqCgwQ2Ra6gBt3m58MSLfH/fYRcUgNzj7Bu/18E=
Subject key identifier:   49:10:0E:81:B7:C4:A6:CE:1B:66:06:53:ED:8F:54:59:8F:4E:CB:00
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       46278EBC13DFC552337EBD96EDF231DA94C3265A
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:22:27 +0000
ROA not before:           Thu 13 Jan 2022 19:17:27 +0000
ROA not after:            Thu 12 Jan 2023 19:22:27 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:27:8e:bc:13:df:c5:52:33:7e:bd:96:ed:f2:31:da:94:c3:26:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 19:17:27 2022 GMT
            Not After : Jan 12 19:22:27 2023 GMT
        Subject: CN=49100E81B7C4A6CE1B660653ED8F54598F4ECB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:b9:d9:eb:4b:0a:4b:07:d5:ba:bf:35:f2:
                    7a:52:d2:c4:56:4b:cc:99:d4:ca:f2:14:02:21:19:
                    e3:01:de:30:d6:a8:0d:e0:55:60:1a:9b:0c:eb:30:
                    fb:7a:01:4f:66:ea:bb:e5:d5:3b:a6:50:f8:61:60:
                    90:39:f7:f7:68:15:ee:f7:e4:e0:52:3c:7e:53:45:
                    04:9c:e1:07:14:db:94:ab:80:00:fb:3d:89:ce:e5:
                    e1:50:f0:7e:3a:f4:ca:9c:37:d6:fe:90:83:8b:b3:
                    da:64:5a:e7:d1:da:c9:be:b9:13:5e:03:2a:53:b9:
                    8c:21:22:4a:a8:87:03:63:63:9b:1b:c2:83:f7:e6:
                    d9:c8:87:69:e8:07:65:9a:0c:47:ea:9c:a7:e0:04:
                    8a:a3:8a:a8:11:10:fa:6f:89:04:56:22:b4:c8:cf:
                    47:49:cd:f6:d2:34:1d:6f:71:40:34:8a:ad:c1:4b:
                    11:3a:6c:0c:d9:fd:58:26:46:66:c8:c3:16:98:24:
                    19:e3:38:40:c0:f1:55:34:fb:d3:99:c6:31:d0:f6:
                    c2:b7:4d:1c:77:d0:dd:68:c3:65:81:21:b2:57:df:
                    20:53:bf:eb:cf:10:a9:e6:3e:e2:a4:29:15:db:98:
                    d4:f2:2d:73:37:9d:4e:e1:cd:03:56:fa:ab:a6:c0:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:0E:81:B7:C4:A6:CE:1B:66:06:53:ED:8F:54:59:8F:4E:CB:00
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:d9:cb:43:fd:fe:df:f1:00:17:46:b7:63:87:4a:cb:4f:95:
         ec:c8:b4:81:73:30:4e:fe:cc:5a:e4:1b:e2:ac:c1:b2:cb:aa:
         5a:73:10:3e:d9:0c:9a:8e:07:c5:86:08:6d:bb:e0:42:79:94:
         5d:34:17:8b:96:fe:83:54:8b:f7:77:3b:5e:c1:01:2f:a2:fc:
         6f:43:99:7e:fe:fe:94:da:92:7e:eb:5f:c0:e8:d2:ec:fb:36:
         22:65:44:6a:6e:bc:b8:2b:90:9d:86:5e:07:49:5b:5d:e6:d0:
         3a:99:d0:0f:6a:12:20:01:43:58:5c:20:5b:56:bf:49:f7:d6:
         0d:70:d9:11:d6:e1:0e:58:be:ef:b8:71:11:ae:af:d2:7b:a2:
         6f:72:80:2e:3b:1f:cf:ae:29:1c:b2:42:0a:3a:0f:ae:97:0b:
         ac:78:98:52:73:a0:ec:6f:14:d6:f8:b3:52:38:38:98:e6:3e:
         ac:f8:55:57:de:6b:12:a3:d9:70:10:9b:1d:62:60:ba:f1:3d:
         91:2b:99:11:81:7a:a7:ff:12:6d:0a:c0:13:ff:63:a8:43:49:
         41:08:63:ee:f7:68:37:9d:0b:06:6c:d6:bf:de:ba:f9:2e:81:
         7f:c0:a4:32:21:99:25:d9:b5:cb:84:9e:2f:ad:12:78:13:fd:
         0e:a8:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----