Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          4FPPFP8GGyWgE9F9dGOygg4rOicvsNtrRryCUTAwAwg=
Subject key identifier:   FF:52:6D:C8:CF:10:BF:F2:E7:24:4B:93:1C:BF:1A:F7:BF:C7:BD:34
Certificate issuer:       /CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
Certificate serial:       61FFFFBC8DC1305289959828FAE50B7B0574E11E
Authority key identifier: A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Thu 15 Sep 2022 18:58:12 +0000
ROA not before:           Thu 15 Sep 2022 18:53:12 +0000
ROA not after:            Thu 14 Sep 2023 18:58:12 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ff:ff:bc:8d:c1:30:52:89:95:98:28:fa:e5:0b:7b:05:74:e1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
        Validity
            Not Before: Sep 15 18:53:12 2022 GMT
            Not After : Sep 14 18:58:12 2023 GMT
        Subject: CN=FF526DC8CF10BFF2E7244B931CBF1AF7BFC7BD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:8f:b2:2c:47:91:47:93:3f:40:0a:83:92:
                    4b:07:a6:8d:42:18:02:dc:b0:41:1c:78:ad:c4:fc:
                    6d:ad:61:ca:f1:7e:8b:4f:e0:af:17:d8:50:6d:c0:
                    e3:04:fc:5b:2f:c8:38:e7:e4:90:f9:bd:0c:55:6e:
                    23:bb:b1:25:f3:cf:4a:c5:0f:d2:b1:6a:f0:80:69:
                    5a:34:24:2d:71:66:d5:21:2c:39:ff:d6:9b:87:93:
                    b2:49:0c:d6:60:b0:a5:a4:32:45:74:af:ff:cc:8b:
                    ba:ef:f0:8a:41:d6:41:b0:2c:b1:df:22:27:25:48:
                    97:ca:7a:94:df:68:43:98:b0:ab:91:b4:2d:f4:ff:
                    66:3e:48:99:72:29:0d:d0:94:fc:1b:b4:7d:1e:12:
                    bf:e6:64:d9:43:b5:6b:6a:89:0f:b9:c0:0a:cd:36:
                    09:90:a9:42:dd:be:27:88:07:4b:0e:70:c4:1a:03:
                    f7:c1:c3:e3:d7:b7:a5:d7:be:92:09:fd:39:99:3c:
                    ca:6d:7d:9c:8d:e1:aa:2b:b7:52:fc:47:0a:93:ef:
                    48:f5:bb:51:29:5b:45:db:ca:c3:67:9c:10:90:7e:
                    68:22:44:e8:c6:3d:a0:fc:99:14:8c:05:54:57:aa:
                    e9:66:38:72:d3:58:1b:81:77:c7:f0:b3:db:55:94:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:52:6D:C8:CF:10:BF:F2:E7:24:4B:93:1C:BF:1A:F7:BF:C7:BD:34
            X509v3 Authority Key Identifier:
                keyid:A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/A439C91415E8CD468DB2508B0176AE2D53312EF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:72:3e:b8:da:f8:29:dc:7f:ee:ba:a1:9a:f1:c8:71:11:33:
         ad:86:f4:fc:f7:27:60:a3:3b:db:c7:00:e1:18:7b:fc:ac:2c:
         31:d0:ce:7c:12:bd:d5:63:84:88:72:87:70:02:f4:27:7d:c5:
         d0:7c:1c:f7:52:a2:84:f2:dd:8e:90:f0:d7:b2:83:06:d6:01:
         00:65:a0:6f:d8:39:07:7b:98:27:b1:cc:1b:1b:72:ad:91:18:
         a7:b3:52:8f:4e:37:2e:1b:ac:9f:f9:a3:28:d7:c1:f0:cc:f9:
         f2:ec:0f:b7:5b:07:3d:33:9b:42:a3:0a:37:55:e6:38:c2:82:
         ec:a4:78:9d:4c:34:74:4b:d7:4e:96:0a:2f:11:6d:a5:e1:55:
         59:62:4f:0f:cf:11:d5:1a:43:d4:6b:0a:c0:03:12:50:bc:59:
         7c:15:aa:d5:97:a2:e1:88:2c:a6:7d:db:00:e9:bd:c0:ad:83:
         a7:6b:77:63:b0:57:97:bd:c6:b2:65:9e:e6:63:75:84:3f:ca:
         f1:8c:27:b7:dc:b6:17:ba:c5:df:b9:06:db:1c:ac:6a:e5:ba:
         6e:9a:03:51:07:08:ec:e8:8f:e1:f1:e0:5e:d6:ff:c0:c9:b9:
         23:fa:5a:bb:67:ee:01:4d:6f:27:aa:85:72:ae:16:c7:8a:a1:
         c8:98:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----