Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          +OAUyhc6PWWWp3mvJMQItGA0/rH+jNG4Bl/8470QHnQ=
Subject key identifier:   D2:0B:CD:DD:F2:A1:21:B7:64:FE:C2:CC:0A:4A:62:19:87:CF:F8:1E
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       4382A83D2D5F3571D40023220D200E89A87C5D99
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:49 +0000
ROA not before:           Mon 25 Apr 2022 15:06:49 +0000
ROA not after:            Mon 24 Apr 2023 15:11:49 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:a8:3d:2d:5f:35:71:d4:00:23:22:0d:20:0e:89:a8:7c:5d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:49 2022 GMT
            Not After : Apr 24 15:11:49 2023 GMT
        Subject: CN=D20BCDDDF2A121B764FEC2CC0A4A621987CFF81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:65:03:22:16:52:e4:ec:c7:ab:1c:7e:4d:
                    71:94:84:d7:91:4d:a2:1b:60:67:3e:4f:50:8c:bd:
                    26:bb:4e:0a:05:8f:a7:a9:51:26:ca:a7:72:d1:c2:
                    91:89:7e:ea:71:2f:fc:2a:7c:d6:0e:a3:3c:f9:9c:
                    da:b7:8d:d5:1d:d5:a7:ef:45:47:f4:36:f1:f2:40:
                    d9:62:a2:f1:68:7f:c9:a1:5d:b8:9e:40:53:7a:38:
                    0e:71:28:9f:fa:f8:d0:e7:29:96:1f:61:a6:ac:b8:
                    6c:dc:00:01:93:e9:3f:8a:28:3c:0a:5f:c8:79:36:
                    55:da:f2:f0:13:3e:7b:54:07:0b:4d:12:92:ad:e3:
                    34:d4:1f:12:e3:d5:24:32:fe:e5:80:8c:c1:85:53:
                    9c:2c:b9:65:c5:0c:ed:3f:13:be:d0:88:41:8f:2c:
                    e3:39:ed:24:86:c7:86:8a:87:5d:c2:84:3b:89:ec:
                    51:a9:ff:2b:04:9d:6c:0d:f1:0b:52:6e:2f:36:3c:
                    a5:19:da:41:56:d9:e4:7b:fb:df:13:e2:7f:5a:89:
                    7f:a0:3a:dd:31:b0:2a:90:6d:0d:30:a0:15:11:33:
                    24:d5:81:38:00:1c:1b:2c:d8:59:51:3c:ab:d8:d6:
                    db:79:1a:68:eb:16:5f:47:35:e5:21:8b:f8:32:62:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:CD:DD:F2:A1:21:B7:64:FE:C2:CC:0A:4A:62:19:87:CF:F8:1E
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4e:86:9d:2b:05:c4:0f:5b:03:b8:0c:fa:6a:a8:fc:e2:d1:
         32:58:e6:e7:a2:e9:ba:91:df:87:11:dc:3f:b6:b1:0e:cc:8d:
         bc:80:ca:41:be:83:4c:35:b6:b8:44:48:45:f8:d8:10:90:f8:
         f1:07:90:ab:a4:d8:c0:5c:95:e4:6a:bb:f8:5a:02:41:41:f8:
         62:e3:98:51:b5:f6:0b:37:43:80:1d:75:97:5b:43:0c:4c:99:
         c3:ce:55:8b:10:d5:2a:ce:57:35:7f:9d:75:6d:b3:d9:47:f7:
         a9:aa:0b:55:eb:ca:ac:45:86:39:08:e5:15:ae:fb:69:cf:27:
         3f:07:e0:52:7c:3f:7e:69:37:9f:36:06:14:d4:02:ca:08:c7:
         3d:c0:2c:c8:5b:13:8b:98:5b:94:d6:2a:9b:f0:ac:27:77:8f:
         9f:b0:57:b8:cc:a9:7b:10:2a:1e:59:7f:97:7d:a1:4b:59:fa:
         93:c3:33:8b:a6:84:b2:aa:93:39:41:37:34:3b:f6:44:a4:38:
         0e:10:9e:45:bf:cc:ee:4c:e1:73:7b:80:6b:38:fe:e6:2b:79:
         2c:1b:7b:ee:f7:69:68:e8:f6:a5:12:58:cd:6f:0c:12:41:c7:
         31:a5:81:ac:72:6e:39:03:c7:e2:37:ef:ad:12:8c:cf:26:b6:
         12:5a:36:fc
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUQ4KoPS1fNXHUACMiDSAOiah8XZkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmNmNmE3NWZjYTVkMTk5YzdkOTQ4OWY4
ZDI0ZjcxM2U4N2QxMTJkNjUwHhcNMjIwNDI1MTUwNjQ5WhcNMjMwNDI0MTUxMTQ5
WjAzMTEwLwYDVQQDEyhEMjBCQ0REREYyQTEyMUI3NjRGRUMyQ0MwQTRBNjIxOTg3
Q0ZGODFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM9lAyIWUuTs
x6scfk1xlITXkU2iG2BnPk9QjL0mu04KBY+nqVEmyqdy0cKRiX7qcS/8KnzWDqM8
+Zzat43VHdWn70VH9Dbx8kDZYqLxaH/JoV24nkBTejgOcSif+vjQ5ymWH2GmrLhs
3AABk+k/iig8Cl/IeTZV2vLwEz57VAcLTRKSreM01B8S49UkMv7lgIzBhVOcLLll
xQztPxO+0IhBjyzjOe0khseGioddwoQ7iexRqf8rBJ1sDfELUm4vNjylGdpBVtnk
e/vfE+J/Wol/oDrdMbAqkG0NMKAVETMk1YE4ABwbLNhZUTyr2NbbeRpo6xZfRzXl
IYv4MmIJpQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFNILzd3yoSG3ZP7CzApKYhmH
z/geMB8GA1UdIwQYMBaAFLpT46jGogU+6ANP6u9Y/lH+9Ld1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODA0NzY1N2UwMTgwNjE0MjdhNjAwZTg0LzAv
QkE1M0UzQThDNkEyMDUzRUU4MDM0RkVBRUY1OEZFNTFGRUY0Qjc3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzkzZTNjYmJhLWI2NGEtNGY4Ni1iMDZmLTljZDM4MTNlOWJkZS9mY2Iy
MGY1OTY2Y2Y2YTc1ZmNhNWQxOTljN2Q5NDg5ZjhkMjRmNzEzZTg3ZDExMmQ2NS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwNDc2NTdlMDE4MDYx
NDI3YTYwMGU4NC8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJkwDQYJKoZIhvcN
AQELBQADggEBAK5Ohp0rBcQPWwO4DPpqqPzi0TJY5uei6bqR34cR3D+2sQ7MjbyA
ykG+g0w1trhESEX42BCQ+PEHkKuk2MBcleRqu/haAkFB+GLjmFG19gs3Q4AddZdb
QwxMmcPOVYsQ1SrOVzV/nXVts9lH96mqC1XryqxFhjkI5RWu+2nPJz8H4FJ8P35p
N582BhTUAsoIxz3ALMhbE4uYW5TWKpvwrCd3j5+wV7jMqXsQKh5Zf5d9oUtZ+pPD
M4umhLKqkzlBNzQ79kSkOA4QnkW/zO5M4XN7gGs4/uYreSwbe+73aWjo9qUSWM1v
DBJBxzGlgaxybjkDx+I3760SjM8mthJaNvw=
-----END CERTIFICATE-----