Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          KoGJ7baeIleU0fTeWv8VYtwyMv5wR9w95oZhh7skzXw=
Subject key identifier:   1C:A8:74:CB:0C:74:FE:A4:74:1A:00:04:0D:20:41:1C:DE:F3:F3:FD
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       1446CA0E0783B2F3146F6C4D96F8734D3AFFC5BD
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:02:56 +0000
ROA not before:           Tue 31 May 2022 13:57:56 +0000
ROA not after:            Tue 30 May 2023 14:02:56 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:46:ca:0e:07:83:b2:f3:14:6f:6c:4d:96:f8:73:4d:3a:ff:c5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 13:57:56 2022 GMT
            Not After : May 30 14:02:56 2023 GMT
        Subject: CN=1CA874CB0C74FEA4741A00040D20411CDEF3F3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:cb:6f:c3:5d:2e:63:71:04:86:58:7e:52:
                    12:87:61:2a:21:2d:05:47:b3:a7:92:b1:d2:79:c5:
                    90:24:39:51:3a:05:29:25:09:b6:cd:7e:98:63:c0:
                    8f:5b:d3:46:33:96:d9:34:f5:6c:42:96:b0:15:d5:
                    a5:9a:48:43:a4:84:eb:41:c7:fc:7b:53:4c:24:05:
                    14:4c:b8:87:11:51:89:b4:41:fb:65:7e:a7:4b:35:
                    97:ef:a4:c1:4c:e7:33:b2:b6:98:73:29:66:8c:6e:
                    a6:d2:84:94:35:a3:8f:d8:63:98:1a:d8:8f:1c:9c:
                    3f:31:ef:a6:97:e7:9d:52:3c:63:11:65:b6:68:ba:
                    7f:5a:25:1b:26:ef:2b:b5:57:86:dd:58:f5:7f:9e:
                    a4:a5:56:1e:57:6a:ba:54:dc:03:d7:c0:09:b7:0a:
                    f7:ca:bc:7a:a3:0d:04:81:d3:0c:16:31:87:20:2d:
                    33:a3:0e:44:e3:9a:34:eb:04:4f:86:20:d0:54:fa:
                    b2:0a:cc:18:c0:29:4e:e5:ac:e5:d0:3f:3b:66:6b:
                    43:bd:03:0e:10:2a:72:b9:45:8b:a3:4b:3a:bb:cc:
                    25:90:b5:a8:12:c8:98:11:88:ee:27:60:ba:79:b7:
                    10:93:f6:00:a1:db:05:7d:be:ec:d4:8e:ae:eb:f7:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:74:CB:0C:74:FE:A4:74:1A:00:04:0D:20:41:1C:DE:F3:F3:FD
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:00:f9:60:50:67:82:9e:83:75:12:67:d8:84:17:ce:6c:d7:
         07:f1:bf:77:c5:04:eb:54:55:dc:21:9a:ce:b2:9d:33:d9:97:
         4f:8f:15:b7:f6:06:50:21:32:b7:76:40:9a:3f:53:7a:75:5c:
         e3:a1:1e:6a:54:f3:28:7a:83:de:ce:79:af:cc:8f:b2:98:cc:
         59:2e:05:3a:b3:58:97:45:91:6f:19:13:fc:66:43:26:79:5a:
         17:5f:bf:51:bc:e8:f8:6f:40:05:d9:ea:e9:c4:84:12:41:2e:
         24:ea:bd:19:9e:94:29:dc:07:da:2b:01:67:9d:d5:77:06:6c:
         46:af:b1:ef:e3:df:43:8b:0f:1f:6e:28:16:b5:61:d1:7a:e2:
         77:ba:b3:9c:52:ca:85:16:e1:7c:70:6b:29:cc:8a:84:38:a5:
         1e:4f:11:b3:41:e0:a5:c8:6a:87:bc:96:0a:9e:fe:2e:87:39:
         9a:f1:10:99:c7:d9:70:2d:ad:6d:c6:11:f3:ca:3f:c0:15:0b:
         70:f2:41:c9:31:88:84:35:9d:59:ef:0e:b7:be:cf:25:9b:6e:
         ed:d5:f7:fd:93:b6:2f:2b:79:7e:eb:23:66:5d:71:c9:7b:00:
         19:22:7e:8d:c3:5e:ec:1c:d9:32:37:36:13:a0:db:f0:76:3b:
         09:c9:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----