Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          pyXVVjIM7shWqjRwOpioQ5KQFTsFMafrMRRZ4ATUDpc=
Subject key identifier:   82:2B:A1:81:13:B3:73:62:03:28:8E:E8:F7:0F:73:DA:E5:C4:DE:01
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       331682DEC619680FA61B210C80BDCA7A9F72E44B
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
Signing time:             Mon 11 Jul 2022 10:35:27 +0000
ROA not before:           Mon 11 Jul 2022 10:30:27 +0000
ROA not after:            Mon 10 Jul 2023 10:35:27 +0000
asID:                     49981
IP address blocks:        192.109.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:82:de:c6:19:68:0f:a6:1b:21:0c:80:bd:ca:7a:9f:72:e4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:27 2022 GMT
            Not After : Jul 10 10:35:27 2023 GMT
        Subject: CN=822BA18113B3736203288EE8F70F73DAE5C4DE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:de:72:fd:0d:c6:d9:bf:30:da:2a:50:21:
                    73:36:39:8c:86:f2:b6:c2:19:5e:69:b6:ee:e0:ba:
                    0a:dc:3b:13:5f:6e:23:20:34:50:9f:06:22:ec:bf:
                    ec:a2:b0:23:1d:55:c9:28:db:29:66:42:8d:2b:f8:
                    4f:f6:84:fd:d2:0e:ea:73:b2:e3:d0:cf:6c:df:21:
                    0c:6e:bf:7f:b0:90:7d:aa:61:90:b4:8f:26:78:7b:
                    06:23:01:de:9a:72:e5:07:08:4d:89:de:2c:82:11:
                    c2:75:c1:e4:5f:11:55:6a:5f:bd:09:9a:37:2c:53:
                    d2:d9:80:02:3b:fa:6b:27:82:a1:a5:46:2c:a7:59:
                    7e:df:23:10:3e:50:49:f6:d6:4b:73:d3:70:60:4a:
                    49:c7:cd:0e:50:02:18:3c:fb:c6:e9:4e:c6:4e:7a:
                    e5:8f:b2:b2:10:fd:aa:b5:40:22:3b:07:f0:71:02:
                    2d:d5:dd:f6:dc:e9:2f:7a:4a:82:bd:2a:53:98:24:
                    56:af:53:59:31:ff:b7:a6:73:7c:43:1c:cb:e5:b7:
                    70:dc:a9:fd:3b:a1:ea:6f:c8:1e:74:80:34:60:e7:
                    71:2a:68:11:b9:7b:7a:04:a0:be:82:3e:10:76:56:
                    74:6e:ae:42:a3:29:7c:02:30:07:d3:cb:5b:e6:9d:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:A1:81:13:B3:73:62:03:28:8E:E8:F7:0F:73:DA:E5:C4:DE:01
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:25:41:4c:cc:47:5c:74:fb:f7:9a:5b:74:6d:36:15:ba:
         c9:ef:bc:41:eb:33:bd:a6:7c:c1:17:a1:d9:85:7d:50:0e:af:
         3a:51:da:bc:f0:de:8a:dd:26:96:88:b8:9c:a7:4f:5f:4d:5e:
         9e:2f:19:b9:4e:f4:ff:21:ab:46:65:75:39:79:7c:0e:82:5f:
         c0:39:33:db:da:ae:98:d5:ac:3c:c0:8a:6d:8d:46:6c:ba:a6:
         cb:e1:8b:17:9f:20:10:b8:76:0c:0c:5d:c3:49:c9:c7:66:45:
         c0:08:9e:9f:6f:46:10:61:9e:29:5b:fe:3e:e5:1c:a8:75:e5:
         6a:b9:cc:95:45:6e:05:39:8d:7f:5e:83:74:21:c0:0c:60:50:
         a1:8a:5c:46:fe:15:c9:a1:dc:35:22:1e:47:1a:84:c9:3b:48:
         93:55:b9:2c:e1:1b:0c:22:b1:22:76:c1:d3:4d:76:2c:04:60:
         86:68:fb:78:64:f4:8e:e0:d8:8a:9a:a2:49:5e:48:9d:f8:ff:
         9f:d4:cc:ca:f1:c2:8f:63:d8:46:e2:6d:d4:d4:89:8f:19:21:
         fd:5d:9b:71:3b:cb:a6:d1:27:3e:9c:c8:ff:95:22:88:fb:cb:
         bb:ad:93:b5:ef:66:e3:20:66:1a:22:34:6e:50:8d:a8:5f:4a:
         8f:07:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----