Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          T2N3QWu0zBG+tQWItkRifnPahqrEK5nShgP2TFg0sME=
Subject key identifier:   BB:C6:6B:97:23:DB:1B:EF:17:BA:3B:A9:F8:10:32:43:E8:10:C7:E7
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       3EC00077BD955619B4C4DBBA73D6644737C23E36
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:43:23 +0000
ROA not before:           Wed 11 May 2022 17:38:23 +0000
ROA not after:            Wed 10 May 2023 17:43:23 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c0:00:77:bd:95:56:19:b4:c4:db:ba:73:d6:64:47:37:c2:3e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:38:23 2022 GMT
            Not After : May 10 17:43:23 2023 GMT
        Subject: CN=BBC66B9723DB1BEF17BA3BA9F8103243E810C7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:50:a0:75:b5:2b:f1:b0:41:42:2d:6f:6f:
                    f1:32:3d:8d:81:c7:4b:2e:a7:68:66:79:d3:0f:63:
                    5d:3d:1e:ec:53:45:f5:10:02:5c:5e:7b:9a:2a:12:
                    bf:eb:2e:5f:99:9e:12:e5:22:9a:16:b1:31:22:86:
                    4e:6e:93:98:53:52:bc:fe:00:05:1c:cd:40:d5:1d:
                    13:34:e1:8a:fc:34:da:4e:b3:aa:d7:d4:24:b7:d3:
                    66:9c:b9:43:19:91:df:4d:67:e6:d7:2e:a5:f0:11:
                    73:8c:54:24:04:6f:7d:e3:20:e3:22:f2:02:80:c8:
                    e5:d8:25:3d:76:51:93:56:0e:be:4e:91:a9:63:20:
                    74:96:5e:e3:3c:19:d1:91:ef:e2:aa:1f:72:59:27:
                    9c:ec:8c:88:89:11:2e:33:b3:f7:8b:f8:6d:7d:5b:
                    fe:8a:96:72:39:23:2e:00:6c:6d:06:c6:c5:6c:ae:
                    ea:f4:ab:eb:29:94:67:64:a0:40:fd:f6:bd:3f:3d:
                    92:ad:0b:0d:66:5b:dd:2f:50:82:4a:eb:6e:c0:10:
                    5d:e8:a4:50:99:9d:06:4e:bb:3c:43:f9:86:3e:07:
                    47:48:9f:a6:bf:28:10:a3:28:99:1d:bc:ab:43:a5:
                    18:80:99:41:e6:64:bb:a1:23:82:9c:02:1c:02:69:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:6B:97:23:DB:1B:EF:17:BA:3B:A9:F8:10:32:43:E8:10:C7:E7
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:a1:45:24:04:fc:d8:72:82:ca:82:66:53:16:8e:7e:ec:
         2b:4c:1f:84:67:1d:6f:c8:37:aa:22:84:93:7f:43:54:e6:a0:
         43:9a:30:40:be:8e:7d:fa:8b:03:28:ae:69:27:e6:6b:35:6d:
         f0:63:27:2a:61:11:95:4d:4b:47:99:10:54:2d:fb:11:97:d1:
         2b:8c:76:ef:0b:88:ef:0a:b8:fb:d8:59:2b:29:08:e0:d7:52:
         31:90:43:59:03:af:51:97:01:c2:c4:8f:ba:0d:5f:dc:0f:03:
         ae:1a:c3:f8:e6:72:c1:56:cd:a3:82:c7:d0:83:69:8d:1f:ec:
         1d:00:d5:02:78:2c:bf:53:b3:75:57:49:09:ea:64:09:33:03:
         7e:51:94:e9:f6:63:d3:3d:31:98:d1:74:b2:8e:53:b8:fd:25:
         9b:56:35:84:c0:f4:c0:bd:c5:37:c6:56:4f:b0:28:7c:ce:ca:
         cd:34:79:b0:a7:20:e4:2e:d0:50:ec:49:34:55:7c:04:97:32:
         f1:83:7f:b9:3a:c6:35:4a:9e:e1:bb:49:97:d6:94:80:ed:60:
         56:c5:cc:0d:f7:f9:4a:8a:9e:23:46:d0:e3:09:35:3a:3a:56:
         60:78:2a:04:1b:66:aa:a6:a3:f8:da:14:ac:ad:eb:15:77:20:
         dd:13:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----