Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          X8UVfcTJZIozrybSnIoLu04W9pI1PJ2wVuKvFGL0flk=
Subject key identifier:   35:6D:3F:6B:E8:31:7F:03:1A:B8:D5:52:02:FB:97:D7:22:E4:DA:16
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       27B5ADF7007ABD1EAD8348187D634AE11EA65824
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:03:01 +0000
ROA not before:           Tue 31 May 2022 13:58:01 +0000
ROA not after:            Tue 30 May 2023 14:03:01 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:ad:f7:00:7a:bd:1e:ad:83:48:18:7d:63:4a:e1:1e:a6:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 13:58:01 2022 GMT
            Not After : May 30 14:03:01 2023 GMT
        Subject: CN=356D3F6BE8317F031AB8D55202FB97D722E4DA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:dc:df:11:ac:7b:9a:fd:47:e3:5f:21:d9:18:
                    45:4e:6e:dd:8b:f7:33:8b:66:3f:22:64:43:de:bd:
                    67:a5:86:09:0a:ef:b6:bf:bf:79:21:7e:fb:f0:ac:
                    7b:ce:d3:75:51:88:75:dd:42:c4:21:11:dc:0f:22:
                    d4:04:fc:91:ca:88:05:fa:84:03:5f:9a:07:ac:bc:
                    77:7d:43:f1:cf:02:42:bf:86:86:0c:d6:97:41:ea:
                    00:97:14:59:9d:7c:12:e5:93:66:ae:2a:3e:ea:03:
                    3a:ef:7f:ff:cb:38:29:64:21:26:86:20:0b:2f:13:
                    0a:a4:59:e4:43:5f:5e:ca:5a:68:cc:46:ae:cd:e5:
                    82:bb:e4:6a:92:8a:62:5a:5b:17:f9:1b:5f:4b:fc:
                    77:43:08:de:44:05:0f:9f:f1:46:63:1b:c6:21:cc:
                    83:cd:74:e4:7a:cc:6f:d0:28:53:cb:85:73:86:34:
                    87:20:1e:fd:3f:d9:58:59:49:e3:a5:8c:8b:18:19:
                    b9:a5:7f:9f:86:d2:f2:2c:d0:53:51:45:5b:1d:f8:
                    ed:0d:00:80:d8:78:4e:97:9b:75:31:df:60:94:b4:
                    15:c2:35:fb:c5:56:f8:6e:75:a0:4d:0c:b0:1f:0b:
                    fb:5f:48:a5:3d:24:8e:a5:f4:71:2a:a8:98:48:6d:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:3F:6B:E8:31:7F:03:1A:B8:D5:52:02:FB:97:D7:22:E4:DA:16
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:75:76:09:f2:c5:ff:ba:d1:ad:3d:4c:37:36:c5:57:6a:29:
         fa:7c:80:f4:cf:20:7d:51:ec:a0:ec:bd:08:08:6d:1e:7a:86:
         bf:60:b9:87:3e:9c:48:b2:8b:9f:5e:a8:d0:94:93:03:f9:96:
         ea:19:6e:17:c4:0d:69:27:12:5c:73:4d:83:5d:29:48:ea:bf:
         ec:11:44:cc:b8:8d:3a:9d:23:4a:1a:c9:71:e3:7f:36:fd:c0:
         ba:93:e8:42:3c:97:aa:0c:27:c6:40:9e:0c:87:ab:4f:4d:79:
         5f:84:b0:09:59:ac:ab:2f:e7:d9:36:8f:e8:0e:21:db:a7:d7:
         47:75:ba:ea:81:52:69:d8:ab:21:b5:dc:1e:37:78:52:dd:ee:
         70:8f:d2:9e:29:b2:17:0a:77:09:7b:60:a8:ec:6b:90:56:cd:
         6b:f4:9c:ba:a1:2c:49:3d:bf:c0:00:f0:ab:63:22:3d:99:ff:
         3f:c1:fe:04:73:a3:47:13:04:6b:3c:0e:8d:65:50:44:3d:11:
         e4:51:b8:ef:82:42:d1:34:d7:54:f1:2f:23:00:7a:ec:c8:91:
         c4:d1:f3:83:d3:bf:f3:06:28:66:f5:10:80:47:26:8c:da:f2:
         aa:22:9d:c5:ec:d2:31:0c:85:e6:03:b3:0e:19:1f:56:6a:95:
         25:6b:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----