Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          EMsvc2+jK7TmRPjUesm5yIgIV/F+y+s5pSLuDZedsB8=
Subject key identifier:   72:58:B2:E1:18:CD:44:A8:B2:27:D6:4A:84:14:EC:F3:F9:8C:4A:2D
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       2E1656877283210CF82733EF05C8F65E87E43451
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:43:34 +0000
ROA not before:           Wed 11 May 2022 17:38:34 +0000
ROA not after:            Wed 10 May 2023 17:43:34 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:56:87:72:83:21:0c:f8:27:33:ef:05:c8:f6:5e:87:e4:34:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:38:34 2022 GMT
            Not After : May 10 17:43:34 2023 GMT
        Subject: CN=7258B2E118CD44A8B227D64A8414ECF3F98C4A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:d7:8b:a7:81:cf:d1:b1:2f:f1:eb:31:a2:
                    1b:67:49:77:23:8b:ea:94:32:49:3f:c3:22:e9:a7:
                    2b:fe:72:99:62:05:d3:dc:78:1c:bc:c2:01:c3:24:
                    b6:c5:15:09:11:59:ea:f4:78:aa:2c:60:24:b1:7b:
                    fd:75:9f:06:9f:89:67:8b:60:cd:34:53:f9:cf:11:
                    b2:48:e3:5c:f4:a1:23:1f:30:12:36:3e:18:d6:21:
                    2a:0b:6b:eb:b7:71:95:6f:78:46:d7:a1:aa:ea:cc:
                    38:0a:e9:d0:88:5f:e8:7a:be:23:fc:dc:4b:12:9d:
                    3f:11:66:5b:6d:83:20:96:85:05:5e:97:d2:99:33:
                    85:cb:bf:bc:45:57:f2:b1:3a:b9:2f:44:5d:cb:6e:
                    d4:66:95:86:ca:fa:41:0e:89:a6:97:7c:b4:03:c9:
                    52:e1:9c:96:e7:fc:b9:8a:ad:a5:3d:01:b8:2f:f1:
                    32:f5:f7:e5:76:c9:f0:86:fe:86:31:ee:44:ec:b3:
                    de:7c:8f:4a:a2:4b:6d:e7:1d:3b:2e:68:27:8d:a3:
                    c8:e9:3a:c7:83:dd:fb:e8:71:0e:e4:15:ac:69:2e:
                    ff:4c:ff:75:02:96:6a:9d:b8:af:95:99:e5:86:10:
                    5c:e8:83:9c:4b:71:fe:6a:9c:20:6d:70:60:76:0b:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:58:B2:E1:18:CD:44:A8:B2:27:D6:4A:84:14:EC:F3:F9:8C:4A:2D
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:23:55:70:97:59:f7:14:83:e6:bd:a3:80:ce:55:2d:4f:
         c5:c0:46:1d:cc:ec:75:67:42:00:ae:8b:c4:43:e9:57:49:d0:
         32:23:08:5c:5c:7a:7c:a4:13:38:1b:6c:8a:70:50:26:10:3b:
         0c:82:38:41:80:65:c0:42:f1:fc:dd:b1:b4:54:e1:60:59:b1:
         76:5d:af:03:18:5c:7e:cd:26:38:a2:2f:20:e2:b0:b6:dd:36:
         0a:66:3a:38:9e:f7:0a:4a:fd:5c:ac:11:5a:88:d6:c1:f2:a3:
         78:f3:97:61:f3:de:9d:46:d3:cf:0a:47:63:fe:15:96:f2:87:
         55:29:d6:73:0c:b2:10:ec:c0:3f:ed:b8:d9:d6:9a:ec:5f:2f:
         19:63:9e:d2:07:6a:24:1c:6c:94:c1:0e:2b:17:7c:f8:26:47:
         d6:de:53:11:7c:29:2a:c3:d7:59:e5:61:59:97:74:38:72:b2:
         97:bf:57:f3:bf:0b:28:1a:26:0f:f5:1e:c6:bb:40:4d:0a:14:
         ca:27:8e:64:23:13:96:85:6e:70:1c:13:06:74:42:20:67:99:
         e4:2e:b7:a7:22:f6:0b:1f:cb:82:69:10:c3:69:f1:7d:c5:b5:
         f3:92:4e:9d:a2:97:0b:52:45:43:51:e1:6f:ac:1f:f5:90:84:
         ba:76:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----