Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier:          oGyo+l9wjw9ZqTRamAFO2n5jfJu0rsmY0S1zlLyPddg=
Subject key identifier:   8A:78:B6:48:BE:EC:7D:98:1C:94:FB:55:F9:66:A1:D7:EE:81:8B:F5
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       0BF5872E8E85A7EF803A440DA420474260478197
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:16:32 +0000
ROA not before:           Wed 21 Dec 2022 16:11:32 +0000
ROA not after:            Wed 20 Dec 2023 16:16:32 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:87:2e:8e:85:a7:ef:80:3a:44:0d:a4:20:47:42:60:47:81:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:11:32 2022 GMT
            Not After : Dec 20 16:16:32 2023 GMT
        Subject: CN=8A78B648BEEC7D981C94FB55F966A1D7EE818BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:36:7a:41:4d:56:91:16:3b:3e:48:ca:cf:
                    fa:39:e4:5d:24:51:bc:a9:3d:e2:e1:4a:f3:23:0c:
                    45:9a:70:b8:1d:6c:e8:88:08:96:9b:e5:d7:d4:6b:
                    c8:55:63:39:69:62:6a:60:68:e0:20:db:c4:e2:5c:
                    70:54:4c:07:e4:d0:4d:e7:a9:97:7b:d3:f3:73:9a:
                    f8:a6:56:c9:b2:cb:ae:d2:b5:d3:1e:1a:d5:d2:d6:
                    44:2c:e8:34:57:f6:b7:53:4e:a4:af:27:aa:6d:ba:
                    f4:fc:6d:0c:d3:80:6d:c7:df:a6:3a:44:17:14:1b:
                    97:2d:8d:5f:33:98:37:16:2b:cf:b4:e8:48:4f:92:
                    71:71:54:0b:02:b2:ab:e0:c8:ab:6f:07:08:75:a6:
                    19:35:e8:3c:9b:c9:11:c7:5a:78:8f:77:63:6a:ba:
                    66:f7:cb:5c:4e:27:1b:33:fb:c1:71:f2:45:e8:d7:
                    3b:36:53:2d:ac:5c:18:23:6a:9a:8f:70:ef:8d:12:
                    67:d3:5f:f5:f7:bd:42:77:23:5e:d2:ad:87:9d:aa:
                    9b:08:61:14:38:c1:11:8f:5f:99:14:9b:c8:36:d4:
                    aa:2f:11:e6:80:93:92:44:46:22:e5:23:c9:fa:88:
                    67:cd:53:d4:c6:e0:e2:34:7e:70:e1:2b:da:54:7a:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:B6:48:BE:EC:7D:98:1C:94:FB:55:F9:66:A1:D7:EE:81:8B:F5
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:43:3a:02:b0:6b:8b:5a:d5:80:56:3d:dc:27:93:6c:51:
         cb:9f:e1:c4:7f:74:13:6b:d9:0c:db:9d:6e:a9:b1:9a:c6:ed:
         b9:39:a4:5b:3a:2b:9c:93:cc:b0:97:74:72:2e:e7:fe:5e:f5:
         f6:e2:9c:b8:a3:83:3c:f2:fb:bd:a0:33:7b:e8:85:1c:bf:55:
         fc:7c:c6:60:77:fc:fb:5d:90:80:33:66:2f:42:39:39:29:4c:
         e0:00:18:95:88:0a:b3:66:7d:df:21:10:52:55:df:00:04:da:
         ca:02:1c:1b:5b:e6:a5:ca:c0:b3:d3:20:3a:6f:ce:dc:52:ae:
         88:e7:f4:a5:df:6d:3b:ea:ad:bc:28:ab:0b:64:86:1e:d6:67:
         06:d6:fa:9a:8d:0e:00:3a:d7:e6:33:f2:10:d1:ca:88:b3:05:
         7e:cf:0d:84:d6:d2:a0:89:4f:b2:51:62:ac:8e:57:fd:e9:5d:
         bf:5c:8d:ec:c1:4b:f7:53:40:9f:48:df:d5:e9:2b:21:be:8f:
         76:ba:48:ae:50:d2:52:17:2b:0f:d4:f6:88:4d:f9:78:27:91:
         ba:c1:9d:db:d4:18:c5:81:f4:36:79:0b:a2:01:c2:1f:5f:6b:
         7c:cd:2d:11:aa:c4:6c:b5:e5:04:e1:c4:07:a3:a1:62:76:03:
         58:75:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----