Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          wT6yFUv0gElW3g0PtuUIcMGx1z8dtos1JTw4XaqdrQ0=
Subject key identifier:   15:66:FC:41:E0:9A:00:6B:AE:07:B5:9F:AA:98:91:13:20:3A:E0:37
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       0EAB02793D5ED2E6610F21BE03FC96ACC7B89D40
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 11 Jul 2022 10:35:33 +0000
ROA not before:           Mon 11 Jul 2022 10:30:33 +0000
ROA not after:            Mon 10 Jul 2023 10:35:33 +0000
asID:                     212238
IP address blocks:        192.109.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ab:02:79:3d:5e:d2:e6:61:0f:21:be:03:fc:96:ac:c7:b8:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:33 2022 GMT
            Not After : Jul 10 10:35:33 2023 GMT
        Subject: CN=1566FC41E09A006BAE07B59FAA989113203AE037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:b2:32:90:6c:50:99:4a:a9:f6:e3:fd:47:
                    97:84:22:6d:50:7c:2f:b3:ec:e5:b2:97:62:b5:80:
                    81:9f:e2:1b:8a:c7:05:8d:e4:05:ee:0e:39:3b:72:
                    e4:3a:81:14:5a:0f:7d:4a:3d:bf:35:b9:5f:f5:13:
                    e4:0f:48:63:4c:07:f7:35:66:64:88:5d:2c:7a:bd:
                    53:90:eb:68:a0:10:7d:34:17:44:09:de:d2:7a:2f:
                    76:ac:6b:11:cf:c1:ef:70:fe:54:ff:3e:81:8b:a7:
                    b0:b7:01:bd:d4:db:b7:8b:f2:a1:b2:de:4b:bc:7f:
                    e2:2e:bc:03:51:6b:52:15:95:2d:b9:37:e9:e5:eb:
                    75:86:14:21:0f:b1:04:17:6c:d8:42:39:60:b5:7c:
                    08:42:af:c3:24:c3:72:df:08:8e:62:50:55:2d:04:
                    62:16:b4:d9:18:78:09:2d:c8:7b:68:13:35:b3:09:
                    f0:83:8d:ba:5d:e3:3c:ab:70:1d:93:f3:10:a9:92:
                    87:f4:54:7f:90:75:e3:d7:aa:d9:c0:b6:ee:51:e1:
                    31:5f:a4:8b:7f:a4:9d:59:aa:18:05:0d:31:be:5d:
                    9a:2b:29:16:e2:8d:5e:08:6f:94:8f:f4:17:48:7a:
                    3c:4b:39:23:6a:7f:02:2a:94:6d:f3:9a:fc:63:ed:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:66:FC:41:E0:9A:00:6B:AE:07:B5:9F:AA:98:91:13:20:3A:E0:37
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:7b:6b:1c:10:6e:0e:e9:da:63:dd:33:d1:26:5b:db:99:
         10:4f:bf:e7:0a:b7:bc:37:79:8c:81:48:2b:32:29:18:bb:7f:
         5b:81:22:78:0d:78:fa:c7:81:a6:0d:2a:e6:cb:ad:9c:a4:4d:
         74:bb:7e:c8:e1:13:b1:52:32:30:30:4d:98:04:cd:2d:40:f2:
         12:41:d5:a2:12:35:8f:ae:db:f9:33:78:53:8a:54:7b:8d:cd:
         0c:1c:79:76:01:be:13:b1:b8:6c:0a:c9:d8:6e:e5:23:f5:f5:
         5a:d2:78:bc:48:35:97:22:b1:ba:ae:7a:e7:db:66:ff:bc:c8:
         fa:73:69:5f:0f:c1:d2:8c:2b:7f:d4:37:2a:ce:ce:70:f5:89:
         7a:aa:d2:3b:1e:43:8d:eb:6a:e6:7d:1c:4d:98:fe:4c:68:28:
         d2:7b:0e:7d:a1:42:b3:44:a1:1d:de:a9:f9:33:7f:4d:ba:4a:
         20:de:e4:4b:8e:62:74:bf:38:6d:20:78:36:13:b1:e2:bc:03:
         51:4d:4c:47:bd:3b:46:cc:d2:71:b4:17:4a:8c:a3:65:7d:84:
         c4:7c:33:02:7a:0f:68:05:75:6b:88:24:3d:33:aa:fb:2d:56:
         3e:d8:62:55:90:ff:ae:3e:93:6e:3e:0b:1a:ec:ca:87:a7:bc:
         a7:04:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----