Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          poosgT9mdc62FVpF5haDD/uOUvlmCT+y7j8GveYLUr4=
Subject key identifier:   8C:89:4F:81:67:05:3E:99:3F:6E:D7:FD:6F:6D:72:E8:E4:31:33:75
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       45DA82DF5C0CCD263684B1AF001D26D9FCFE1ADD
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:50:35 +0000
ROA not before:           Wed 01 Jun 2022 18:45:35 +0000
ROA not after:            Wed 31 May 2023 18:50:35 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:da:82:df:5c:0c:cd:26:36:84:b1:af:00:1d:26:d9:fc:fe:1a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:45:35 2022 GMT
            Not After : May 31 18:50:35 2023 GMT
        Subject: CN=8C894F8167053E993F6ED7FD6F6D72E8E4313375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:ab:d7:30:bf:bc:fa:38:48:3b:de:79:17:
                    2c:96:0a:03:77:c2:0e:ed:46:11:ab:6c:23:10:61:
                    c6:6d:b8:df:e1:dd:45:e7:a8:3b:2b:3a:b1:1e:83:
                    92:f5:8e:d6:f6:c2:05:a4:26:77:da:83:5c:bb:5c:
                    e4:fa:db:48:27:b4:f1:3c:06:9e:fb:92:49:00:15:
                    49:8d:27:42:bc:fa:bd:b3:20:6f:fa:02:0f:89:2a:
                    cc:6c:88:d2:d3:69:50:cd:5f:07:7f:bf:f6:c2:db:
                    a5:01:1f:06:14:f9:b1:87:ad:89:87:43:0e:d3:d2:
                    6c:93:27:68:89:d2:87:d6:55:ce:7b:93:ee:42:29:
                    38:d9:12:c2:bb:d3:dc:48:7f:3c:70:3a:fc:0d:4d:
                    a2:d3:09:9a:2c:ca:c6:0a:d8:cf:83:02:c1:8e:c1:
                    55:3b:b0:91:d9:c5:03:3b:e0:90:f4:44:7e:2a:50:
                    74:48:b0:7f:ac:77:10:98:08:2d:27:3d:78:ae:85:
                    d0:80:db:5c:13:7a:44:0c:fe:63:b6:89:80:5c:69:
                    87:42:2f:55:6e:d1:e3:c6:89:0b:6a:9f:f7:40:74:
                    98:e8:a1:97:3f:c5:a5:ac:03:e2:68:28:3e:21:6f:
                    50:97:cd:3d:37:55:e4:95:99:99:c6:4d:04:8f:7d:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:4F:81:67:05:3E:99:3F:6E:D7:FD:6F:6D:72:E8:E4:31:33:75
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:7a:3e:5f:88:69:fa:8a:84:4c:43:4d:35:64:a7:cc:f1:
         c1:c5:fa:56:56:dc:a2:19:15:81:e2:57:8c:52:d9:84:1e:a3:
         87:89:76:61:97:9d:7b:0f:56:36:f8:ad:d0:2e:b2:72:da:56:
         4c:42:04:52:58:a8:6a:68:c7:0c:db:e1:42:ec:25:40:55:21:
         4c:ab:3e:cd:11:92:77:32:08:8e:13:ec:09:8e:67:a4:c0:d2:
         d1:e7:55:27:ca:2b:fe:64:46:c2:d5:41:21:86:70:98:4d:6e:
         69:0c:79:92:e8:2d:f2:23:81:a7:ae:4c:51:39:4f:08:72:84:
         5f:92:47:00:1a:76:e0:7c:39:96:94:cf:d1:b7:55:c1:fe:8e:
         cf:09:30:0e:e2:4e:20:06:17:68:8e:01:fe:22:fe:03:45:7f:
         f5:2f:c2:f9:90:ec:13:11:25:60:2f:cd:45:0b:75:76:1f:77:
         55:7e:ee:11:28:30:ee:eb:c7:93:81:30:39:3e:2d:5c:d2:72:
         d4:03:5b:2f:81:41:7c:0c:55:43:5c:95:aa:e9:20:f9:6d:5c:
         9c:8b:c9:af:5f:65:5e:63:67:ae:f4:dc:3a:d7:fe:2e:74:6c:
         f9:b0:66:a9:7e:e4:a2:f6:f8:c0:85:0f:85:d0:6c:74:10:ca:
         56:38:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----