Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
File:                     3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa (raw, json)
Hash identifier:          19tINd67mRMwWnOrDZ9iiuo1cIYYDgJ1fRx6LJC6AYI=
Subject key identifier:   56:73:1D:BD:D9:46:D3:6D:C3:92:C7:D2:CA:12:D2:5E:C3:00:90:A2
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       757F8653BCFC64F1D8F1B8AF9FBE4AB04B9ADBDB
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
Signing time:             Mon 11 Jul 2022 10:35:30 +0000
ROA not before:           Mon 11 Jul 2022 10:30:30 +0000
ROA not after:            Mon 10 Jul 2023 10:35:30 +0000
asID:                     208911
IP address blocks:        192.109.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:86:53:bc:fc:64:f1:d8:f1:b8:af:9f:be:4a:b0:4b:9a:db:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:30 2022 GMT
            Not After : Jul 10 10:35:30 2023 GMT
        Subject: CN=56731DBDD946D36DC392C7D2CA12D25EC30090A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:f2:ac:7b:bd:a7:0c:18:99:61:1f:18:d8:
                    1f:24:50:3b:d7:83:81:6f:87:e4:e1:e8:0f:92:08:
                    3a:04:27:38:9a:db:db:2a:ba:9a:48:3f:47:18:19:
                    cb:73:7b:a7:24:4b:06:07:0d:f9:00:d7:b2:2d:7c:
                    5b:8b:e6:7a:7e:f0:61:3c:f8:f7:4b:c5:f7:10:b6:
                    f0:2e:63:a8:e7:75:24:55:c5:9a:08:5e:7e:a0:04:
                    f7:f2:db:44:ec:43:eb:2f:88:ce:0c:27:de:43:0d:
                    ab:95:a7:f8:42:83:f1:6a:aa:34:ad:bc:1e:42:d5:
                    da:00:96:88:8c:7b:f1:bc:eb:d2:54:2a:ba:17:c0:
                    10:00:33:74:60:5b:f4:cd:0c:59:77:45:5e:f3:c1:
                    3c:7f:b0:6f:a0:f5:be:31:c0:e6:fe:ff:88:56:8a:
                    bd:7d:fd:35:76:1f:24:08:fa:03:65:4b:f6:20:f0:
                    58:02:0e:7e:b8:89:59:b4:ca:a4:06:6c:54:da:77:
                    06:f8:81:ed:75:87:45:eb:a4:39:59:71:e7:8b:f4:
                    68:f0:c5:07:3c:1f:99:4c:5e:61:84:de:6d:7a:58:
                    f9:a2:a4:3c:89:5a:51:39:ec:e2:1f:d9:fb:90:96:
                    e2:fe:d8:60:2c:5c:04:da:24:37:74:40:6e:a4:53:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:1D:BD:D9:46:D3:6D:C3:92:C7:D2:CA:12:D2:5E:C3:00:90:A2
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:20:f1:87:90:07:ce:80:88:2a:da:57:2f:c1:b6:b5:f0:
         6d:0f:c5:72:c9:dd:d7:fc:88:1e:14:ab:5f:e3:8d:8b:f9:f7:
         ee:80:33:78:1b:d7:f3:a9:6b:02:8d:1f:41:d3:33:5d:86:80:
         dc:c8:a7:f6:6b:12:25:e3:11:a4:c5:0a:b7:e1:0a:a1:2d:ab:
         38:4a:7d:de:61:aa:06:0e:09:a2:62:62:ce:d5:c9:a3:de:4e:
         9e:a3:56:f5:73:6f:29:a1:6e:b5:e7:00:ae:20:02:0a:d6:af:
         b3:12:51:42:11:21:3b:4b:56:5a:0b:37:1b:6d:8b:82:b3:7c:
         a1:e4:de:44:1c:4e:47:20:4c:9e:03:d3:29:23:a9:f0:6b:eb:
         69:d7:bb:f9:95:6b:24:52:76:75:2a:c5:29:0b:8d:db:ac:2e:
         ed:98:e1:a3:97:6f:c1:07:8b:82:34:b4:2d:4b:79:42:40:94:
         8f:fc:93:32:04:f2:a3:b8:8a:36:4f:6f:db:d2:ed:97:f1:1f:
         a6:9f:86:34:6c:8b:86:e2:58:6d:bd:03:f9:c4:c4:cd:9f:d1:
         3c:d2:ec:3a:d3:2c:3e:8c:39:db:1c:cb:b0:8f:04:c2:02:59:
         5b:a2:f8:08:01:96:e1:63:dd:9c:a1:a3:14:f5:5e:6c:30:ea:
         1b:d0:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----