Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          RqxEZewWxZHqJAtemZIQZlbmNoiBD570wcto3yLzJKo=
Subject key identifier:   12:57:4C:8B:43:2A:67:FF:97:BD:D7:F2:6B:DD:D8:E5:EF:20:E2:86
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       7E82101FD9B8B932F129E011604006B8047EF12E
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:15:58 +0000
ROA not before:           Wed 21 Dec 2022 16:10:58 +0000
ROA not after:            Wed 20 Dec 2023 16:15:58 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:10:1f:d9:b8:b9:32:f1:29:e0:11:60:40:06:b8:04:7e:f1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:10:58 2022 GMT
            Not After : Dec 20 16:15:58 2023 GMT
        Subject: CN=12574C8B432A67FF97BDD7F26BDDD8E5EF20E286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:ea:92:25:e8:4e:09:8e:a0:31:65:54:a7:
                    ad:31:e8:2a:62:a6:d2:a2:00:75:c1:b2:7c:9f:fe:
                    0d:f5:aa:df:b0:ef:65:03:6a:19:9c:3e:e0:14:89:
                    2c:3f:27:b6:a0:85:d5:3b:cb:5b:84:22:c4:4d:a2:
                    50:b1:a9:4e:06:d5:19:3b:4b:d2:be:ed:0a:14:7e:
                    bc:77:19:49:0c:c8:59:20:8f:80:c6:1e:5c:99:f4:
                    56:9e:98:14:13:bf:3d:b8:9b:5d:32:24:d8:9f:3f:
                    36:b4:da:91:ab:a9:6a:b6:0a:6d:34:48:15:dd:39:
                    1d:41:9f:a8:9a:ce:0f:bc:b1:ca:8c:2d:c8:c1:c1:
                    b9:74:4e:98:af:91:87:de:14:79:e6:be:9c:9b:1a:
                    bc:7d:d5:a8:96:41:ab:46:50:cb:35:e7:59:3b:dc:
                    cb:2e:e6:ea:74:c4:a3:22:10:29:cc:8d:1c:91:6b:
                    f1:3c:5d:c0:c0:36:33:ce:33:36:0d:dc:ab:c1:fa:
                    b1:23:83:91:68:e0:4c:3d:b9:68:46:2b:a5:ac:f8:
                    f0:19:a3:cb:35:2b:95:e6:fa:e3:75:0e:8e:f5:9b:
                    0e:27:45:09:ea:62:86:10:4a:cc:52:1e:b7:0d:51:
                    01:de:31:be:0b:5b:7f:56:ee:ee:91:5a:57:8f:e3:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:4C:8B:43:2A:67:FF:97:BD:D7:F2:6B:DD:D8:E5:EF:20:E2:86
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:81:30:94:f5:0e:8a:7e:41:d7:b7:fb:cf:c1:5d:2d:25:
         97:01:2e:a0:a3:1c:84:c0:6c:80:cf:76:3c:89:58:b4:74:3c:
         6f:4c:00:cb:b5:37:94:87:35:2b:b3:28:60:ed:57:92:00:7f:
         a8:8c:86:af:ae:ba:12:a4:73:13:ce:51:f2:15:6a:e7:2a:fc:
         4d:2e:b0:1d:a2:f2:d0:73:e3:69:c8:98:67:16:00:5b:c9:a6:
         6a:3a:17:b1:0a:bf:f4:9f:b7:0f:9d:0f:62:0b:d3:f6:58:4d:
         05:80:d1:4b:87:29:3d:cf:9d:1f:b2:66:70:61:85:64:67:6e:
         7d:cb:7e:02:67:d7:e9:e4:96:35:95:fe:bc:e7:6b:2c:b6:4c:
         51:3b:7d:64:a8:da:6a:24:15:f5:01:d3:4b:d9:d3:8e:77:a6:
         09:bf:6d:c3:7e:af:8a:c8:73:b7:ac:d8:2c:e2:2f:d3:c1:fe:
         47:f6:db:71:b3:25:79:c5:e0:a2:fe:75:88:29:9b:78:4c:04:
         41:e9:80:ae:36:2b:5d:6d:b1:9f:d4:e5:36:30:b0:2c:f1:97:
         18:75:3b:7b:99:d7:42:c4:fb:87:77:e0:78:23:be:4d:5b:66:
         6b:58:d2:59:f0:59:74:4f:31:e5:73:de:24:a8:b0:fc:44:9f:
         1c:40:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----