Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          KcuR61irQez6UqfCCjlsNuxtuO5Xtgcf0VUELL5Ym58=
Subject key identifier:   50:E4:8B:E1:99:E7:3A:33:0F:18:76:F1:4F:B1:5B:5A:2E:DC:28:B4
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       5404EE92C5E40940BB45A05ACEBD083285048799
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:13:37 +0000
ROA not before:           Tue 24 May 2022 21:08:37 +0000
ROA not after:            Tue 23 May 2023 21:13:37 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:04:ee:92:c5:e4:09:40:bb:45:a0:5a:ce:bd:08:32:85:04:87:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:08:37 2022 GMT
            Not After : May 23 21:13:37 2023 GMT
        Subject: CN=50E48BE199E73A330F1876F14FB15B5A2EDC28B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:cc:3b:c1:d1:32:02:f6:4b:16:f8:95:2b:
                    f4:41:48:d2:33:3b:6f:e7:36:ec:e6:da:7d:be:78:
                    05:da:50:e6:57:c0:d8:d4:50:0d:59:dc:5d:71:e2:
                    36:94:a7:16:2f:3c:5e:e6:72:04:43:10:55:5b:6b:
                    3f:0b:2a:7c:bd:c1:c2:31:80:74:03:bf:12:d6:f5:
                    a6:97:da:57:2b:1f:1c:14:60:09:4c:08:9b:01:53:
                    bf:c6:2a:a0:e8:89:1e:dc:8e:0f:dc:91:e7:5b:3b:
                    4c:01:b0:b0:29:d5:83:56:d7:85:27:fa:89:3e:e3:
                    47:2a:ef:89:cf:6e:f3:ce:60:2a:44:6b:26:60:a2:
                    84:fb:0e:5e:14:fe:f1:91:4b:3f:a0:cc:0f:67:ae:
                    48:04:2f:72:74:68:dd:3d:6f:b3:8c:2a:4a:ee:8a:
                    4f:3e:4c:a6:ec:28:e4:ac:90:c9:7b:10:b3:b7:f0:
                    3a:12:1a:74:d3:2a:88:3f:88:a7:39:1a:b9:f7:46:
                    70:ae:db:a1:33:7e:53:db:e9:ee:e2:6d:8b:ba:07:
                    cb:78:eb:f9:18:bb:6b:69:03:7d:79:8d:34:26:22:
                    55:78:62:46:4a:0d:dc:28:27:f8:94:fa:fd:27:1c:
                    27:c3:17:f3:f1:e0:f5:42:76:d8:7c:9f:8d:cd:5f:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:8B:E1:99:E7:3A:33:0F:18:76:F1:4F:B1:5B:5A:2E:DC:28:B4
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:24:18:63:3b:04:44:ea:d3:fe:17:23:e8:2e:85:e8:07:
         ed:b6:40:55:c4:d4:7d:3d:44:e8:8c:d2:3b:8a:8b:a5:12:98:
         8e:70:18:40:32:9a:9b:73:c9:8d:5d:2b:5d:46:9d:d4:79:84:
         9b:fc:fb:62:d5:5f:52:b0:dd:a2:9e:de:83:85:6c:99:16:f3:
         85:d8:49:16:98:0e:39:28:77:8e:67:62:a7:94:23:f6:b3:38:
         f9:60:fe:35:c8:4d:eb:25:ab:f2:0d:6c:27:76:eb:09:0e:5b:
         69:30:b9:7d:7f:38:ed:39:eb:d7:6b:42:ac:f2:c5:96:dc:03:
         99:95:10:d4:37:26:e5:26:25:f0:15:e6:ac:2e:13:d0:50:c1:
         f1:82:e5:01:10:92:ff:1e:9c:96:6a:ac:64:4b:83:74:3e:ea:
         b5:ee:40:be:87:50:de:6a:1e:2e:95:3a:8f:6b:e3:9f:17:1d:
         7c:69:ad:aa:1b:1b:e5:ec:8b:d1:5c:88:2f:2e:94:fa:5d:7e:
         74:86:de:b0:1e:2e:65:a1:d3:e6:a8:c3:a9:e3:3d:cd:21:3b:
         c8:ea:93:87:69:d8:3c:91:e7:5a:7a:5b:86:42:41:c6:76:60:
         f7:98:18:a8:f5:54:c3:96:c7:52:a2:e6:4e:90:c5:00:ad:30:
         89:84:91:0c
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUVATuksXkCUC7RaBazr0IMoUEh5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmYzZDNmZTEyYTZiNjdjM2YwZTJiNTJl
ZDU0ZGY2NTM0NDIzOWMzYzQwHhcNMjIwNTI0MjEwODM3WhcNMjMwNTIzMjExMzM3
WjAzMTEwLwYDVQQDEyg1MEU0OEJFMTk5RTczQTMzMEYxODc2RjE0RkIxNUI1QTJF
REMyOEI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIbMO8HRMgL2
Sxb4lSv0QUjSMztv5zbs5tp9vngF2lDmV8DY1FANWdxdceI2lKcWLzxe5nIEQxBV
W2s/Cyp8vcHCMYB0A78S1vWml9pXKx8cFGAJTAibAVO/xiqg6Ike3I4P3JHnWztM
AbCwKdWDVteFJ/qJPuNHKu+Jz27zzmAqRGsmYKKE+w5eFP7xkUs/oMwPZ65IBC9y
dGjdPW+zjCpK7opPPkym7CjkrJDJexCzt/A6Ehp00yqIP4inORq590ZwrtuhM35T
2+nu4m2LugfLeOv5GLtraQN9eY00JiJVeGJGSg3cKCf4lPr9Jxwnwxfz8eD1QnbY
fJ+NzV/5kwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFDki+GZ5zozDxh28U+xW1ou
3Ci0MB8GA1UdIwQYMBaAFMv6ZHYKtyB1SxpJsqQTPIR0N/r6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgwZjdlYTE0ZTAwNjNhLzAv
Q0JGQTY0NzYwQUI3MjA3NTRCMUE0OUIyQTQxMzNDODQ3NDM3RkFGQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzIwOWEzYWFlLWZkZjMtNDYyNi04OTNjLWQ0ZGJiYjYwN2RiYy9mY2Iy
MGY1OTY2ZjNkM2ZlMTJhNmI2N2MzZjBlMmI1MmVkNTRkZjY1MzQ0MjM5YzNjNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MGY3
ZWExNGUwMDYzYS8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJkwDQYJKoZIhvcN
AQELBQADggEBAELBJBhjOwRE6tP+FyPoLoXoB+22QFXE1H09ROiM0juKi6USmI5w
GEAymptzyY1dK11GndR5hJv8+2LVX1Kw3aKe3oOFbJkW84XYSRaYDjkod45nYqeU
I/azOPlg/jXITeslq/INbCd26wkOW2kwuX1/OO0569drQqzyxZbcA5mVENQ3JuUm
JfAV5qwuE9BQwfGC5QEQkv8enJZqrGRLg3Q+6rXuQL6HUN5qHi6VOo9r458XHXxp
raobG+Xsi9FciC8ulPpdfnSG3rAeLmWh0+aow6njPc0hO8jqk4dp2DyR51p6W4ZC
QcZ2YPeYGKj1VMOWx1Ki5k6QxQCtMImEkQw=
-----END CERTIFICATE-----