Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          hbClHA5xZpuNTlWCkyz9tTVCo5odW4NZWadC5nWMHfg=
Subject key identifier:   8B:4E:67:3C:39:D0:EA:B4:BB:76:EB:30:34:B4:08:CB:59:95:95:CC
Certificate issuer:       /CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
Certificate serial:       7712926B538F0B30113598222537E5C938102D5D
Authority key identifier: 7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 23 May 2022 15:17:15 +0000
ROA not before:           Mon 23 May 2022 15:12:15 +0000
ROA not after:            Mon 22 May 2023 15:17:15 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:92:6b:53:8f:0b:30:11:35:98:22:25:37:e5:c9:38:10:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
        Validity
            Not Before: May 23 15:12:15 2022 GMT
            Not After : May 22 15:17:15 2023 GMT
        Subject: CN=8B4E673C39D0EAB4BB76EB3034B408CB599595CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a9:ae:a3:fc:60:cd:11:9b:eb:59:55:45:
                    a0:ae:3e:2c:03:71:9a:8d:de:1b:4f:7f:4f:c7:2a:
                    ac:86:cf:bd:ca:9f:31:64:a2:b4:f2:6c:1a:bf:51:
                    d7:17:78:ce:f9:02:a6:25:b0:18:33:d2:42:b6:39:
                    6e:c7:c8:a0:02:26:47:fc:2e:77:d9:46:fd:0c:49:
                    61:ba:23:2b:a8:69:75:d6:01:11:15:71:73:8a:9d:
                    3c:b7:25:1a:fa:28:21:bb:66:cd:9a:3e:58:d7:24:
                    a5:d6:b0:00:f6:a7:54:ee:a7:5f:99:91:87:ad:fb:
                    69:71:d3:f5:94:5d:7d:8f:3a:45:b5:51:2d:b8:94:
                    0b:5b:6f:ea:57:3f:30:12:88:97:c1:e9:eb:bc:1c:
                    56:34:e9:1b:83:c7:fe:8d:80:1e:3d:c2:b4:bd:50:
                    35:68:aa:f9:27:72:7a:07:64:11:ea:62:91:dc:33:
                    d5:9c:c8:6f:49:ab:ab:6c:e2:5f:cb:72:5b:85:06:
                    d9:f5:b9:71:d4:53:c8:e8:3b:c5:b9:35:55:17:bf:
                    26:6f:e1:60:d4:a2:dd:8d:eb:af:f4:62:f2:e4:96:
                    9e:56:85:a3:86:fd:3c:97:d9:bb:eb:32:cb:86:cd:
                    2f:9b:5e:81:97:d7:35:08:95:39:dd:d5:ba:08:2b:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:67:3C:39:D0:EA:B4:BB:76:EB:30:34:B4:08:CB:59:95:95:CC
            X509v3 Authority Key Identifier:
                keyid:7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:c8:ad:d9:6a:ac:40:40:28:a6:9d:41:1c:08:3d:fe:96:
         1c:7f:1d:8d:9b:f3:10:1b:f8:02:58:91:5f:d0:c6:18:be:f4:
         56:29:91:9e:7b:3a:67:dc:3b:80:2b:ce:ba:37:76:82:dd:f6:
         af:8d:6b:d9:44:f4:87:53:10:81:13:64:e6:b2:31:53:51:87:
         67:84:bb:6b:0b:3e:41:94:e0:61:d3:39:4d:7d:01:35:56:fe:
         6b:2d:c2:75:0e:f6:d6:73:db:69:d3:07:72:f1:bd:c5:b8:2f:
         96:7e:d9:bf:48:4f:e9:a8:70:7e:0b:bb:07:6a:6f:6b:50:f9:
         71:f4:72:cc:93:5b:4c:e8:be:8f:bc:d8:ff:63:e3:04:12:80:
         93:99:f9:e0:6d:44:af:b0:de:0a:99:fe:b0:a5:12:00:10:d9:
         1c:e0:dc:4b:c4:63:81:9d:6f:ff:6e:8f:b4:ad:2a:26:34:30:
         3d:d3:8d:aa:85:ed:e7:03:35:27:b2:a1:df:48:f5:20:59:9c:
         b9:85:ac:b8:d5:e7:46:b7:db:58:9e:f0:0e:ff:11:db:bd:27:
         49:e5:d8:c2:ff:23:78:6a:62:58:99:ad:d5:05:cc:fb:c7:8d:
         a9:a4:1d:92:a4:76:33:3b:7e:93:48:cc:6a:ee:94:cf:f4:8e:
         1b:3f:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----