Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          lc56EbYrYCu0k24jddgOGtIvtDXQbB+RPdFZS+nOymg=
Subject key identifier:   66:04:26:F1:4D:D3:99:F3:FB:46:C7:35:FE:F5:19:4C:76:64:9B:44
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       5188A86ABB16E0BC0D25077EB6A05D582936540C
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:15:40 +0000
ROA not before:           Wed 21 Dec 2022 16:10:40 +0000
ROA not after:            Wed 20 Dec 2023 16:15:40 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:88:a8:6a:bb:16:e0:bc:0d:25:07:7e:b6:a0:5d:58:29:36:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:10:40 2022 GMT
            Not After : Dec 20 16:15:40 2023 GMT
        Subject: CN=660426F14DD399F3FB46C735FEF5194C76649B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:fe:d7:83:af:46:83:3e:a1:80:a0:dc:42:
                    58:f2:8f:fa:ab:b4:d7:46:a6:3c:53:67:ce:dc:89:
                    1c:eb:41:d9:37:d6:f0:7a:16:93:d9:1c:f0:61:a7:
                    4f:de:80:80:96:49:3d:0b:9b:6d:ce:a0:8f:c9:8a:
                    de:d6:45:3d:36:72:1a:f2:00:6d:2a:03:1a:29:66:
                    fe:a1:49:0a:23:17:98:4d:75:02:91:52:37:3a:c3:
                    dd:f8:4a:b2:0b:29:fa:7c:c1:df:a5:c4:84:9c:94:
                    01:6a:0f:69:93:67:ca:17:2d:4e:0d:6e:f5:c0:4b:
                    47:04:78:d0:c9:10:1e:2c:53:30:00:1f:03:f5:f9:
                    47:25:47:18:37:1f:e6:c2:d1:83:fb:37:6e:63:f8:
                    b7:6d:71:d4:61:d6:a9:7e:93:15:42:10:b0:92:33:
                    4f:11:e7:84:e9:c2:dc:63:d0:14:4f:7b:35:4a:a9:
                    ab:ac:98:8e:a1:14:97:a8:a3:2a:cb:a0:87:bb:19:
                    48:d4:8d:66:36:e4:93:0a:c9:2d:27:ef:b4:0a:c9:
                    bd:0b:05:51:21:47:ff:5c:5b:9f:bd:e8:23:57:f3:
                    29:77:33:44:df:13:1e:19:01:a2:54:34:03:8f:b2:
                    b0:06:19:a6:57:b1:1c:f9:b6:3a:99:57:03:56:4f:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:04:26:F1:4D:D3:99:F3:FB:46:C7:35:FE:F5:19:4C:76:64:9B:44
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:0a:ab:79:ca:fc:08:81:40:b1:75:f6:53:bf:e1:df:a9:
         d5:7d:78:3b:bc:9d:28:52:3e:65:00:21:42:0d:89:1e:00:26:
         65:f9:ae:df:0b:a3:7e:4f:f9:1d:20:57:4a:e9:d4:6c:6b:06:
         a2:6f:ea:fa:46:a1:85:c1:ce:78:57:d0:aa:f3:14:00:4a:34:
         3e:64:34:e1:bf:ef:34:07:41:20:9c:db:08:ef:be:21:c3:73:
         a1:87:f9:ac:21:24:73:7d:f3:1b:d3:54:24:dc:12:ea:9e:49:
         da:9d:5e:41:05:84:fd:d3:09:94:dc:8e:8f:77:ad:e8:c8:17:
         05:14:a0:6a:69:ff:60:0a:04:78:11:cf:8b:91:14:db:3a:fa:
         63:9d:75:45:cc:09:4a:2e:83:54:5f:16:b4:cb:3c:c9:b6:a1:
         24:d4:a9:1d:f4:c2:96:a4:dc:01:f9:2c:c8:db:b4:d1:11:7b:
         79:50:f7:5d:7f:f0:9a:3f:8e:96:6c:e7:ef:b7:de:c8:59:8e:
         60:59:da:64:a6:d4:ec:2e:fc:e6:0d:8d:9f:d5:b6:33:e6:d5:
         7c:46:4e:d2:7b:05:39:01:f4:49:d4:1d:b9:3e:f4:46:fb:79:
         30:2a:bb:2f:63:55:bf:64:9f:f2:6e:b3:5d:f6:84:ed:cc:10:
         6e:84:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----