Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          u0MpPgsO5ZZ2LAGjPIN5xXhDj8XL2SPOuncEaKmeJ0o=
Subject key identifier:   00:1F:EE:37:8B:3D:85:11:49:D0:AC:DC:01:E8:6F:3A:E7:AF:3C:E3
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       15CC3548F0B0742D5A9E9572D0F9DEC0B44BE4DF
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:13:34 +0000
ROA not before:           Tue 24 May 2022 21:08:34 +0000
ROA not after:            Tue 23 May 2023 21:13:34 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cc:35:48:f0:b0:74:2d:5a:9e:95:72:d0:f9:de:c0:b4:4b:e4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:08:34 2022 GMT
            Not After : May 23 21:13:34 2023 GMT
        Subject: CN=001FEE378B3D851149D0ACDC01E86F3AE7AF3CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:bb:92:6f:a5:ed:e4:58:71:05:79:fd:21:
                    ef:b5:e7:16:07:cd:2a:27:8f:aa:13:e9:83:b2:8f:
                    7a:76:7a:3f:4d:3f:0c:27:58:75:d5:94:4e:64:89:
                    35:9e:37:e2:48:6e:7c:8d:6c:83:a3:ff:3e:a5:68:
                    57:d5:c8:45:71:57:8c:26:d1:2d:88:96:3e:5c:55:
                    fe:ec:14:32:fa:4c:83:35:38:89:db:38:78:91:d3:
                    2a:0e:f3:2a:6c:47:8e:51:7e:d7:1a:b6:37:75:6a:
                    05:7c:37:ba:79:68:54:56:82:a3:71:59:10:68:e3:
                    45:6a:d2:47:5c:4d:03:1d:3f:8d:f1:c1:3f:6f:d4:
                    aa:18:62:9e:18:ee:04:5a:f0:d9:d7:b5:ed:1e:72:
                    0b:04:6b:27:de:bc:04:bf:7e:d1:97:f9:61:b4:3b:
                    7b:74:51:de:67:6c:68:d0:c3:d3:ec:e3:53:96:b3:
                    f8:c5:67:99:14:d0:9f:91:76:19:15:ca:a7:fb:45:
                    b0:64:9a:bd:f5:04:37:00:ea:87:46:77:ff:33:9f:
                    38:b9:cd:18:f3:67:bd:aa:a5:4c:a7:12:ed:4b:1b:
                    1c:9d:d7:c8:32:ab:e6:5a:78:d0:5a:57:73:db:07:
                    cf:ad:89:0c:8d:83:20:6f:5b:6e:ea:4a:87:52:2d:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:EE:37:8B:3D:85:11:49:D0:AC:DC:01:E8:6F:3A:E7:AF:3C:E3
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:7b:47:32:95:87:64:be:49:34:40:c9:b6:e3:9e:be:70:
         42:9f:64:c1:c1:84:d5:72:34:bd:59:33:d6:2a:7e:75:1e:7f:
         fa:78:91:0d:6d:ba:35:17:f4:15:2f:cb:f9:78:07:6b:09:59:
         0c:99:59:c2:47:ee:e4:ce:21:fd:5f:1c:73:20:3e:25:be:42:
         d8:32:46:7a:be:2a:d1:9f:e2:bb:3f:d2:41:3b:48:0c:88:c8:
         a3:77:a1:11:27:55:56:17:8c:e8:a0:10:bd:4e:27:2f:d3:5b:
         8b:44:b7:3e:24:b6:66:d6:4c:e5:7f:d5:0f:d3:da:09:51:15:
         57:12:17:3c:63:40:28:20:72:be:42:c4:cb:91:fc:e3:8f:cf:
         3e:f5:bf:81:1f:47:f3:52:d9:7b:93:da:a4:94:67:fb:50:fb:
         ce:a0:38:83:08:41:13:e4:d7:74:1e:f3:ee:70:f6:47:26:34:
         91:29:3f:f0:9b:33:3a:41:93:51:11:22:fa:39:81:f3:73:7d:
         d7:32:ee:79:d6:2f:e7:42:96:ca:4c:75:18:7e:13:8a:a9:2f:
         68:2e:5d:55:d5:31:6b:fa:01:1a:0b:f9:d9:7b:cb:1c:93:89:
         6b:e8:25:0f:2b:73:9a:5b:66:ad:17:f1:50:a4:e8:18:13:e3:
         04:2d:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----