Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          tKyrftdm3H/TfyPKcntYnLrOZUBwuxyjTtNgfqyNkWI=
Subject key identifier:   12:59:C8:5B:04:EA:88:CA:E4:33:35:B3:E4:D1:C6:D7:56:11:00:C8
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       39203ED3586C42BFC3C254F2EBACC55539B36979
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:43:08 +0000
ROA not before:           Wed 11 May 2022 17:38:08 +0000
ROA not after:            Wed 10 May 2023 17:43:08 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:3e:d3:58:6c:42:bf:c3:c2:54:f2:eb:ac:c5:55:39:b3:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:38:08 2022 GMT
            Not After : May 10 17:43:08 2023 GMT
        Subject: CN=1259C85B04EA88CAE43335B3E4D1C6D7561100C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:83:b1:5c:96:ed:e1:bc:cb:ad:cf:91:9b:
                    b4:d0:cf:54:c3:0d:11:b1:ed:4a:47:86:db:7c:dd:
                    ad:9b:4a:bb:6b:48:50:fc:6d:58:ba:22:15:d0:ad:
                    07:cd:09:43:1f:f4:c9:2d:2f:7d:d9:e6:ed:53:46:
                    e3:03:c1:62:c0:32:f3:73:b3:7d:a0:9a:fc:0e:80:
                    5b:1c:1d:c5:59:6d:dd:64:ca:d3:62:03:31:93:3b:
                    17:1a:1c:ea:7a:e0:57:8a:6c:d3:9f:33:09:a3:36:
                    cc:eb:a1:f6:1e:20:7a:8c:b3:0c:17:37:fc:4c:1a:
                    e5:8b:04:a8:2f:28:c2:53:88:fb:ce:64:9b:2d:7f:
                    1a:2f:0f:66:64:e7:f1:c8:65:18:5a:e9:b3:74:93:
                    2f:bf:56:e4:35:d0:d3:f0:5a:88:7a:a2:41:4d:2f:
                    82:4d:16:70:0b:ec:c2:ee:d9:0f:a4:91:95:17:d5:
                    0b:d2:eb:ab:3c:60:75:06:4f:48:9d:93:f8:63:b2:
                    b5:30:3d:93:79:3d:a6:8e:0c:4f:37:bf:f6:4e:56:
                    42:36:f2:ea:df:e1:f0:e5:74:84:8a:c6:71:f3:ce:
                    ee:73:f8:8e:ea:9a:39:fd:32:23:84:2d:f4:d3:d4:
                    11:ae:9c:59:ec:17:e1:cd:f9:93:30:b8:8b:7c:f8:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:C8:5B:04:EA:88:CA:E4:33:35:B3:E4:D1:C6:D7:56:11:00:C8
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:32:fc:a7:59:db:85:5c:35:39:a2:21:d9:00:6d:7f:5d:ad:
         7b:00:63:a4:e1:02:bd:b3:3a:65:6f:ff:a3:99:92:6b:fb:22:
         25:7d:2f:e8:4c:5c:0d:24:30:80:ca:d5:a4:08:3a:23:51:ab:
         11:4b:1c:ae:3a:22:d9:51:9d:64:be:d4:c7:ed:85:7c:b7:0a:
         47:de:4d:0b:28:2b:35:2b:0a:62:90:3c:2f:8d:de:c9:fe:40:
         41:dd:66:9d:9d:f8:01:1e:74:fd:84:03:ff:58:8a:29:ee:df:
         cc:cc:a4:de:40:fb:3d:c9:89:94:4c:f7:87:7c:03:5c:d4:28:
         81:a9:16:a2:95:d0:bd:44:b6:39:c3:d1:c1:6e:7d:51:80:9a:
         03:de:fa:60:f2:f8:fc:9c:58:98:2e:04:2b:59:fb:00:3a:86:
         dc:64:f3:e2:d9:19:a6:b5:9e:01:a5:fb:c7:0c:5e:e9:ce:9e:
         ba:82:f5:cf:4a:90:09:78:39:3c:3f:82:03:72:d1:cb:b3:62:
         bc:39:ae:e9:82:7e:b8:ba:1b:3c:4a:a6:65:38:38:31:a3:54:
         2d:29:fb:80:48:fc:3d:cc:5e:37:04:5e:0e:fc:59:db:f8:b3:
         64:e8:45:29:fa:95:1b:13:71:03:10:6f:e4:24:af:fa:f9:e4:
         b1:08:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----