Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          uOip5THClWqilN80HxQUflFsbLFqhykGcEBApyS+K1Y=
Subject key identifier:   5C:8D:B3:71:BC:DE:54:1C:C5:B9:5A:EA:37:5D:42:83:AB:20:DE:39
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       79426507999BE5952DF525BE5B58E76CC09F7D39
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:44 +0000
ROA not before:           Mon 25 Apr 2022 15:06:44 +0000
ROA not after:            Mon 24 Apr 2023 15:11:44 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:42:65:07:99:9b:e5:95:2d:f5:25:be:5b:58:e7:6c:c0:9f:7d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:44 2022 GMT
            Not After : Apr 24 15:11:44 2023 GMT
        Subject: CN=5C8DB371BCDE541CC5B95AEA375D4283AB20DE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:81:a4:86:ce:81:de:90:5e:07:ea:24:90:
                    7c:05:f5:06:8c:15:ad:8a:a8:b6:b1:84:75:09:24:
                    43:f5:65:ed:f8:e7:78:c6:27:7d:eb:b0:9c:c0:99:
                    8d:e1:00:f3:b7:33:9e:77:95:f6:ac:92:da:f6:0a:
                    61:a8:20:29:25:f4:97:f5:e1:2d:7c:fe:e3:44:b0:
                    88:b3:15:dc:06:e9:bc:4e:65:e6:4e:07:db:18:70:
                    bd:f2:6c:5f:be:e0:ac:7e:a9:01:dd:f7:2d:40:fe:
                    3b:63:0d:dc:fc:bd:00:7f:65:7a:4e:74:48:a6:28:
                    ef:ff:1b:ff:fe:8f:4b:9b:f8:ce:51:a4:f5:23:3e:
                    58:ff:66:b4:22:8a:51:97:48:f7:4d:ad:3f:6e:c8:
                    ff:06:c8:cd:2f:8a:61:b2:eb:43:2c:36:28:a5:a0:
                    f5:8a:40:ea:e9:6c:3a:97:78:3f:0f:01:c7:de:3b:
                    4c:26:af:10:8b:8c:fc:cd:35:b7:98:17:c3:47:13:
                    f6:5e:e3:fc:a3:d9:5a:fa:8b:72:7b:13:d7:5f:d7:
                    ee:04:d1:cf:75:a2:8f:0a:b4:dd:70:37:5b:a8:42:
                    cc:6c:57:c1:17:86:78:d8:08:63:93:8f:a0:1f:50:
                    5f:0a:b0:1d:49:04:f0:88:0a:4f:06:73:5f:30:75:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:B3:71:BC:DE:54:1C:C5:B9:5A:EA:37:5D:42:83:AB:20:DE:39
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:d1:43:2c:39:fc:e5:68:d6:fd:f5:0f:75:a7:e6:ff:d3:
         e7:ec:38:63:f7:0a:24:12:de:df:fa:ea:81:e4:f6:35:a9:ae:
         27:aa:1b:96:f9:3d:12:98:ac:3e:6b:29:b3:32:48:2d:1b:b3:
         97:f0:2c:57:64:9c:b3:83:80:93:1b:4d:da:fd:25:6a:de:1f:
         4c:5f:d7:69:97:dc:4d:e0:1a:c7:48:4e:14:51:c8:52:35:15:
         af:54:f0:5b:59:3a:7e:82:0b:5b:cd:6f:af:54:cd:bb:3a:18:
         6f:13:26:78:5f:18:dd:f6:44:b7:46:3e:f9:8b:0e:2f:0e:a7:
         b4:ac:54:46:16:37:75:ac:3d:bc:72:ab:e2:73:4c:4b:8d:88:
         f4:25:a7:c4:06:3d:db:ea:e5:17:66:b2:96:9b:e4:45:b3:f1:
         7c:35:07:d6:c3:37:97:a5:65:8d:d5:e4:04:3a:ae:fd:5b:ab:
         6b:2f:f5:81:f1:7b:c6:c7:ce:bb:e0:0a:23:5e:10:29:c1:8b:
         6c:1d:82:9c:75:80:ae:55:2c:77:1c:15:cf:70:ad:ca:7c:ad:
         b6:f6:95:4b:0c:0f:b5:9d:dc:f9:91:3e:40:81:18:4a:7a:77:
         23:0d:d4:57:a3:41:33:2d:60:b8:70:67:b3:f7:58:7a:61:61:
         93:e6:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----