Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier:          Cgghl3rcoxdiVr62mY5P3DYZhmpA8sa6ckxilAqEhts=
Subject key identifier:   D0:4F:33:C9:CD:4C:48:3B:7C:2C:8E:02:76:DE:AF:18:06:93:C9:FA
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       623208867BA70C5B598B1210F43C712BC32347E1
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:43:02 +0000
ROA not before:           Wed 11 May 2022 17:38:02 +0000
ROA not after:            Wed 10 May 2023 17:43:02 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:08:86:7b:a7:0c:5b:59:8b:12:10:f4:3c:71:2b:c3:23:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:38:02 2022 GMT
            Not After : May 10 17:43:02 2023 GMT
        Subject: CN=D04F33C9CD4C483B7C2C8E0276DEAF180693C9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:a1:57:ce:09:9b:f5:7d:42:eb:1a:d5:25:
                    06:df:6e:3b:39:90:8e:b5:92:ae:20:99:97:e6:77:
                    19:a1:92:9a:da:29:aa:61:86:04:7a:33:bd:4d:1b:
                    e8:63:cb:4e:16:b6:54:b6:5a:11:2e:1c:aa:c8:a9:
                    7c:09:06:5b:3a:f5:7f:eb:61:2c:28:96:8b:f6:82:
                    d9:51:60:f7:f3:0b:4e:a4:17:83:f3:53:93:17:74:
                    41:c8:e0:a3:22:04:46:03:77:45:e3:20:e7:e5:44:
                    eb:20:b1:54:bb:37:9e:b1:06:6a:12:e5:db:d4:7a:
                    1b:a2:44:1e:13:6c:d0:92:c1:19:5c:a8:ce:d0:b1:
                    87:c5:2d:f0:59:c5:08:ae:c1:25:28:84:37:f2:d8:
                    13:0f:14:ea:96:f3:36:b7:cd:e9:56:54:b0:23:e0:
                    59:72:0c:c3:e0:8c:58:68:20:de:1e:82:e3:c2:73:
                    f3:0d:99:b2:51:ed:c0:65:f9:1e:db:75:58:9c:b6:
                    80:8f:f0:2e:cf:24:f9:51:03:ad:79:20:cc:cf:ca:
                    45:f4:45:98:63:97:08:11:8e:dd:a3:0e:ce:7f:da:
                    1f:0d:72:64:2b:35:43:98:69:e2:54:59:eb:e8:ef:
                    37:fa:2e:3f:9f:a3:66:3e:ff:e4:19:51:2b:f5:60:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:33:C9:CD:4C:48:3B:7C:2C:8E:02:76:DE:AF:18:06:93:C9:FA
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:bf:df:97:f6:82:86:17:82:57:10:f9:09:d1:9e:90:0c:
         46:4b:62:b1:32:ae:18:dc:36:24:d5:81:53:e8:ef:ee:a5:f3:
         de:9a:50:76:d4:98:bb:18:a0:f8:49:d8:bd:ec:f7:98:ce:d2:
         f3:8e:52:84:b3:a7:b6:82:21:10:f3:94:8f:d5:08:12:5d:23:
         40:d9:ba:f5:be:87:8a:1b:8d:b3:3c:17:0d:98:24:8f:00:e1:
         a2:a8:e5:7b:55:2d:4d:c8:01:fa:9f:62:50:73:3d:1e:0d:cf:
         c6:06:85:ec:14:dc:5e:36:49:df:cc:6f:ad:01:ee:78:9d:71:
         44:5d:c7:83:77:84:11:ee:ee:60:c8:65:25:c6:89:be:8d:34:
         e2:ee:42:10:96:da:d7:1a:2d:0a:6c:93:4e:f8:7b:4c:9f:58:
         39:26:9d:8e:20:de:9f:ee:ec:bc:2e:53:8d:70:51:c9:1f:b7:
         83:d7:17:75:2a:16:04:19:dc:2e:63:3b:ce:83:5e:c6:56:cb:
         d1:37:4b:00:57:83:90:6f:55:d2:dd:38:23:f5:a2:bc:ce:fe:
         58:f3:99:d9:d3:40:b9:9f:7e:db:98:f4:ce:79:96:fe:de:51:
         cc:7e:c3:03:97:80:43:97:d6:97:2a:09:00:b2:11:56:2d:9f:
         8a:64:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----