Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          KKPujn1C2IfTT3d3TYBLpGTMuYktARaDDd5eFuQdE/Y=
Subject key identifier:   F1:0E:49:17:B3:44:93:82:5C:0A:6D:93:53:AC:06:3C:78:13:61:5B
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       250C0A5C4B78DF106B7BB7BEB238FB3D7D52482C
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:03:10 +0000
ROA not before:           Tue 31 May 2022 13:58:10 +0000
ROA not after:            Tue 30 May 2023 14:03:10 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:0a:5c:4b:78:df:10:6b:7b:b7:be:b2:38:fb:3d:7d:52:48:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 13:58:10 2022 GMT
            Not After : May 30 14:03:10 2023 GMT
        Subject: CN=F10E4917B34493825C0A6D9353AC063C7813615B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:ff:52:e0:1e:25:65:60:b8:45:72:58:d2:
                    4f:2b:bd:84:65:72:b3:01:43:4e:ff:d8:a6:21:55:
                    c7:1e:5d:21:c3:ae:4a:d1:df:16:20:6a:73:94:f5:
                    db:93:13:ac:4b:2a:18:06:3e:7d:8f:7b:05:6d:ba:
                    8b:ad:7c:1a:06:8d:66:bb:eb:20:53:b1:46:cd:9f:
                    60:f6:d3:97:23:d0:38:a6:c7:54:f9:a8:16:82:de:
                    07:a5:86:7f:bd:9c:93:dc:23:29:5d:65:b6:7a:ab:
                    d9:2d:6f:ca:88:64:8c:ae:5b:0b:05:a6:31:f6:48:
                    8a:61:d4:a6:36:15:ea:36:57:b6:e6:e4:be:33:df:
                    a8:85:dc:32:e5:94:c3:d0:d5:75:35:d5:08:2f:df:
                    92:51:42:ee:2c:0b:92:e5:0f:c9:12:de:c4:4d:28:
                    47:6e:2f:12:20:b0:d2:40:a9:b5:e7:32:4d:09:cc:
                    b3:78:42:50:af:ac:32:ee:cb:cd:27:eb:44:f7:e7:
                    80:41:e1:88:4d:15:d4:ee:40:5f:4a:ca:d5:20:0f:
                    55:fe:a8:31:f7:80:84:28:db:db:c4:22:72:56:35:
                    3d:08:68:c7:a7:66:e7:c6:2d:ad:09:a2:8f:97:89:
                    93:54:e4:d8:6a:fb:2b:b7:f0:99:ec:c0:85:2e:ec:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0E:49:17:B3:44:93:82:5C:0A:6D:93:53:AC:06:3C:78:13:61:5B
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:00:fa:12:92:ce:2b:b5:ae:75:a6:9a:be:23:b5:ce:c5:69:
         3d:e4:9e:7d:87:a3:13:bd:2d:70:48:bc:b8:2d:74:fb:c6:2e:
         9c:9d:2c:21:5b:4b:7b:d0:bb:6e:e7:cc:a8:07:95:03:a0:ac:
         d1:a7:6a:d5:ff:94:35:88:30:43:06:fe:3f:a9:0f:7b:1a:62:
         55:40:17:9d:8b:fa:3d:b1:88:17:2c:db:c9:2d:41:b2:3c:e2:
         db:d2:fd:f5:f4:96:ff:01:c0:16:9d:6c:96:02:11:f8:c9:a1:
         cd:04:db:77:72:5e:73:44:71:f3:97:c7:b7:06:92:1c:79:0e:
         21:f8:be:b8:e0:59:2e:77:13:93:05:dc:6b:29:3d:12:4f:51:
         af:04:81:bd:ec:b1:1d:bc:4c:3c:95:bc:89:67:c5:46:8a:f8:
         a3:2d:2c:a7:6e:fe:b1:46:b0:4e:a5:a2:d1:1e:79:b0:b2:cb:
         ae:ae:6b:d0:eb:2e:c1:c6:4b:6e:7f:a8:ad:c3:8a:34:b7:47:
         0f:ad:f8:10:f9:da:53:22:61:3d:ae:38:f6:1d:04:87:79:9e:
         e4:b9:3d:32:10:3a:da:fc:e1:45:be:72:80:c2:83:7e:dc:8b:
         2a:3e:fc:36:ec:2c:9d:44:d9:66:72:ee:75:3c:1c:56:17:b5:
         94:56:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----