Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          4OQK3hkxbfgzGM7onlpmTAS9XkkUAGfdmw2epioydoQ=
Subject key identifier:   FD:32:96:78:E4:6C:55:B7:6E:F7:E9:6B:F1:25:55:F8:55:46:78:68
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       669F3C7D3CE36ACA6BC75711305F211FE33D79C1
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:58 +0000
ROA not before:           Mon 25 Apr 2022 15:06:58 +0000
ROA not after:            Mon 24 Apr 2023 15:11:58 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9f:3c:7d:3c:e3:6a:ca:6b:c7:57:11:30:5f:21:1f:e3:3d:79:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:58 2022 GMT
            Not After : Apr 24 15:11:58 2023 GMT
        Subject: CN=FD329678E46C55B76EF7E96BF12555F855467868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:4f:b4:33:ce:53:fe:b4:4c:19:92:87:57:
                    0f:1d:db:53:0b:bf:6a:33:60:b5:34:73:6d:dc:50:
                    da:dd:da:d9:15:de:89:4f:8a:52:68:54:8d:cb:1c:
                    79:f7:29:6f:cd:9c:52:a6:41:d8:c3:1b:66:e4:e4:
                    79:fa:0e:3e:b1:cb:8f:4a:fe:de:87:33:3e:4e:01:
                    e6:6d:cb:ca:68:1d:a1:77:bf:39:40:17:0f:31:2e:
                    60:91:78:b0:78:f1:ad:d9:38:97:4f:1d:e9:2b:eb:
                    26:85:df:52:f3:b6:67:37:06:cc:43:df:8a:70:79:
                    07:2e:60:56:17:9d:9d:d8:e7:95:d9:bb:bd:4b:19:
                    72:c2:f2:3d:c6:30:71:92:22:fb:a4:55:65:c3:2b:
                    f8:ed:5f:ab:7a:4a:75:7a:fb:5b:39:6a:c9:fe:09:
                    f2:b8:dd:04:dd:46:4b:5c:22:3a:12:e0:7a:f7:56:
                    8b:b8:a4:5f:24:0a:24:85:4f:bc:03:66:94:5b:b3:
                    d5:00:9b:c1:8a:f4:78:a0:b2:a0:e9:36:20:0f:95:
                    ac:66:92:fd:79:cc:fc:27:63:c1:ab:9f:12:32:b0:
                    a8:b5:93:65:84:8d:ab:a9:b1:fd:dc:81:e3:96:12:
                    f7:44:50:d8:a7:b2:cc:30:95:e3:ed:0d:41:92:cf:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:32:96:78:E4:6C:55:B7:6E:F7:E9:6B:F1:25:55:F8:55:46:78:68
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:bf:2a:7e:9f:2d:b5:42:ac:83:31:62:53:81:60:5d:97:cd:
         b0:1e:84:45:8f:72:dc:76:79:da:d1:de:f3:69:c7:09:97:1e:
         eb:1e:6c:85:60:d2:62:af:6c:78:c8:8d:ab:a1:1c:2e:cd:6c:
         cd:99:24:5d:69:ba:0d:bd:cb:cd:0f:99:e1:54:97:e2:8b:51:
         d1:fb:e8:ee:43:90:97:0e:1a:d7:b6:6a:ed:33:9c:94:f4:a1:
         57:a8:10:da:81:52:c1:29:93:09:01:f4:f7:ec:e4:b2:21:fa:
         41:d1:b0:08:99:f3:8b:4a:fe:c5:d7:b4:37:6c:a5:c9:85:5a:
         b1:a6:7e:a0:04:24:94:6d:85:2e:d6:d4:68:2c:30:32:12:f7:
         81:64:f0:d0:28:40:ca:9e:12:ef:f3:f2:d2:11:6f:6f:a8:a1:
         53:14:cc:0e:81:01:cc:75:81:17:65:61:90:55:02:39:5a:73:
         b5:63:ec:a1:e4:f2:4e:dd:54:3d:09:54:44:2a:0d:39:5a:76:
         b7:1e:68:01:a2:5c:3d:f7:59:5f:6a:3f:e3:91:18:f8:44:fa:
         80:14:6b:1d:b1:1f:ae:2a:e0:96:8a:6b:af:41:1c:cd:92:d4:
         5b:4b:69:25:c9:70:4a:51:5a:fb:f1:1b:ba:ba:13:2b:e2:1b:
         84:ee:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----