Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          ckOVXCgrBYIlhcFi1GpGW5SSYXnERn/Np+9/aZGkvdQ=
Subject key identifier:   4C:A9:63:9C:05:84:6B:34:6C:1C:52:75:13:76:AA:51:F2:B7:FE:EE
Certificate issuer:       /CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
Certificate serial:       531E671B9013EDBC09D82CF04CEE58522AEB570A
Authority key identifier: 7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 23 May 2022 15:17:18 +0000
ROA not before:           Mon 23 May 2022 15:12:18 +0000
ROA not after:            Mon 22 May 2023 15:17:18 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:67:1b:90:13:ed:bc:09:d8:2c:f0:4c:ee:58:52:2a:eb:57:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
        Validity
            Not Before: May 23 15:12:18 2022 GMT
            Not After : May 22 15:17:18 2023 GMT
        Subject: CN=4CA9639C05846B346C1C52751376AA51F2B7FEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:b6:23:27:37:b4:78:f6:ae:f6:72:39:cd:
                    f1:2f:37:7b:bd:6c:a0:c8:77:4e:51:80:50:d8:00:
                    d4:b3:32:99:f2:2a:34:b3:4a:54:43:f8:b3:10:27:
                    a0:da:2e:93:64:e0:79:61:24:e1:d5:a5:12:9b:c5:
                    52:58:11:89:c1:74:72:51:5a:6c:4a:59:92:eb:c1:
                    a2:6c:d1:51:de:6b:32:f1:b5:37:0f:1f:b7:27:1b:
                    2b:fb:c4:dc:43:41:6c:f8:b5:01:b5:36:ac:1f:f5:
                    91:c5:f4:2f:fa:6f:e5:72:00:39:d6:d5:7a:5b:75:
                    60:52:33:ad:1c:fd:b1:34:50:06:54:ae:c3:a1:34:
                    2d:33:68:e0:81:0d:b4:87:36:23:3f:84:3f:76:98:
                    1a:fa:6d:1e:cb:aa:ac:71:81:46:f3:40:17:2c:35:
                    72:8d:41:32:b8:ff:65:b0:ab:8a:97:ca:7c:cd:9f:
                    df:35:6f:b2:0d:c1:1d:2a:a7:b5:fe:62:6e:bd:f7:
                    f3:cc:11:03:a9:9b:e5:03:83:d0:db:28:13:d2:fa:
                    33:f5:37:7c:dd:fd:13:87:cb:2e:a8:ba:da:87:a6:
                    cf:04:c0:af:41:51:fd:7c:47:d1:4b:dc:2f:ef:9e:
                    52:1a:02:9c:ae:dc:8b:fb:ba:8c:7b:e1:35:45:65:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:63:9C:05:84:6B:34:6C:1C:52:75:13:76:AA:51:F2:B7:FE:EE
            X509v3 Authority Key Identifier:
                keyid:7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:12:2f:a4:9e:b5:44:b8:3c:37:93:bc:3b:2f:8d:5e:ab:
         5f:c6:3b:c3:71:73:36:0f:b2:a6:36:3d:5f:ab:e5:2e:fe:19:
         a7:a5:78:72:45:c3:6f:4e:85:39:0c:d5:03:75:35:d6:27:ef:
         87:f9:1b:81:c0:30:49:01:3f:c9:69:5c:4d:c3:8b:35:3e:3b:
         61:9f:ea:50:99:75:5e:c5:a8:5c:ea:81:63:6c:ee:8d:89:42:
         1f:fc:d8:e9:04:69:55:e7:03:9f:e5:a5:b7:33:06:de:5b:e9:
         9f:ad:0d:e9:be:29:01:fd:43:1d:5e:c2:fa:1f:c8:15:bb:b6:
         5e:8a:60:d8:a1:f5:38:7b:ad:ff:f9:8b:99:07:70:16:77:14:
         2c:fd:0c:ac:e2:07:45:e0:7f:9d:23:cf:32:84:da:90:58:6c:
         ed:64:d7:06:7f:9a:5b:f9:ac:8b:c0:ba:e1:b7:5f:52:a1:f4:
         96:79:ad:6c:6c:01:26:c7:69:72:e4:b5:3c:72:29:79:12:01:
         31:5f:56:f8:43:2b:50:ba:e4:92:bc:08:c5:f6:89:e8:4c:54:
         69:02:ff:06:75:cd:92:de:d8:41:e4:ca:32:ec:4a:b7:f7:8d:
         9b:e9:52:ad:32:9a:90:56:50:94:78:9f:8f:31:e5:4a:ba:c7:
         ae:de:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----