Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          fj7QrYCrNCLwYNsZfjKESo4rHiEOmo9J6rePkdEZnC8=
Subject key identifier:   8D:3D:75:C6:B9:F9:69:B5:36:7D:86:61:CE:82:90:C1:1C:D8:8D:51
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       0656C866CD133819CA2FFB537DE4500262DB57EE
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 11 Jul 2022 10:35:28 +0000
ROA not before:           Mon 11 Jul 2022 10:30:28 +0000
ROA not after:            Mon 10 Jul 2023 10:35:28 +0000
asID:                     212238
IP address blocks:        192.109.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:56:c8:66:cd:13:38:19:ca:2f:fb:53:7d:e4:50:02:62:db:57:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:28 2022 GMT
            Not After : Jul 10 10:35:28 2023 GMT
        Subject: CN=8D3D75C6B9F969B5367D8661CE8290C11CD88D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:5d:40:e7:bc:8f:cb:b7:72:96:2a:2c:89:
                    41:19:df:3e:29:f0:5d:14:73:60:97:74:e6:d1:46:
                    5f:6b:20:22:ef:71:56:bd:63:21:2f:5f:e8:78:a4:
                    f8:41:aa:d8:55:4e:6e:44:e5:46:3c:3b:51:af:0d:
                    23:19:24:22:e0:3d:76:d2:d6:9a:9e:93:bd:b0:18:
                    34:2e:01:a2:b7:9d:15:16:26:74:a0:53:9e:38:50:
                    c1:ad:b3:f3:5e:a9:83:76:3a:d4:ca:15:9f:e4:aa:
                    d5:98:22:66:23:73:20:19:df:c3:ad:00:ea:61:48:
                    b7:85:be:66:bf:34:fe:5a:f1:1b:aa:be:ea:44:3d:
                    5c:d7:77:62:58:5f:72:3b:49:51:05:86:10:e2:7f:
                    fb:34:0f:fa:8e:84:ac:2b:58:f4:04:21:5b:33:e0:
                    a4:9d:5d:08:38:9e:63:47:9e:d2:96:eb:fa:f3:f8:
                    d7:66:46:67:0e:53:0f:ed:c6:c0:3f:46:29:c7:ed:
                    d3:66:43:07:d3:30:0a:0d:be:79:21:a3:7b:41:b7:
                    3e:34:1f:29:cc:ae:fd:c7:c1:8e:52:1a:1a:1f:78:
                    4f:f0:a0:7e:04:48:5f:7d:d9:e9:36:0c:56:6a:a4:
                    60:8e:a7:7b:1f:8d:3e:9d:69:f4:81:a6:b2:cd:3b:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:75:C6:B9:F9:69:B5:36:7D:86:61:CE:82:90:C1:1C:D8:8D:51
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:5d:dd:f3:6f:96:28:58:c0:a5:e9:4e:75:a1:2d:a1:d3:
         82:ec:9f:e3:a2:5d:6e:4b:d8:18:55:00:a4:82:0a:17:e3:cd:
         16:5b:18:eb:83:66:72:39:91:10:cf:9d:b2:f1:eb:f6:5b:58:
         c1:7d:8d:9f:d3:89:5c:59:87:23:ef:cd:61:14:6a:e5:af:f1:
         11:ef:14:6f:0a:fe:0c:b7:b8:11:de:3a:a6:27:9c:60:06:2b:
         22:52:8d:43:9b:a4:68:e8:fb:77:31:9d:b0:37:9c:cf:2d:dd:
         2a:f3:fe:00:9a:45:fe:c6:1d:cc:98:ed:bf:55:6b:f6:dd:5a:
         62:a3:3b:b1:00:4c:56:23:f3:6b:f9:55:a5:4d:12:85:77:78:
         fb:08:be:41:5b:f3:2a:06:de:31:01:91:e7:24:de:4e:5e:77:
         a5:07:56:47:cc:d7:df:50:c2:bf:d9:a6:ff:e1:3e:bf:e6:9a:
         84:69:e3:1e:7f:26:e2:af:de:e0:ef:5c:a4:0b:38:69:17:25:
         fe:d3:26:72:9b:55:a5:d1:9c:70:9d:b9:17:e2:c7:fb:c8:04:
         ed:0b:ba:51:e0:c7:01:d6:40:dc:45:d1:5d:ce:5c:12:44:5c:
         63:d2:d5:f0:73:97:ed:3e:3c:dd:1a:0b:c4:2f:a3:c9:33:2b:
         cf:3f:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----