Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          xwAs2jLFljglDkziRP56wGeB9rBiRzRkZ5a1kERmoX8=
Subject key identifier:   B7:98:39:3C:EE:7A:93:02:4E:B0:EB:49:CD:A8:36:52:80:88:F2:B1
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       11B6BD93CC19F8C1D7C19313C3725001D1D09331
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa
Signing time:             Mon 11 Jul 2022 10:35:32 +0000
ROA not before:           Mon 11 Jul 2022 10:30:32 +0000
ROA not after:            Mon 10 Jul 2023 10:35:32 +0000
asID:                     33696
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:bd:93:cc:19:f8:c1:d7:c1:93:13:c3:72:50:01:d1:d0:93:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:32 2022 GMT
            Not After : Jul 10 10:35:32 2023 GMT
        Subject: CN=B798393CEE7A93024EB0EB49CDA836528088F2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:a9:b0:93:44:d4:7c:3b:9e:7b:52:c8:62:
                    f8:c8:b5:20:f2:03:a3:a1:2d:22:b1:85:0d:d9:b6:
                    e6:51:52:e4:13:ba:58:3a:a9:63:bd:f9:8b:ff:ba:
                    2a:30:21:10:29:14:5d:4c:d0:49:44:8e:b3:6a:a8:
                    e2:51:8d:20:01:4e:80:ef:1a:79:1f:b4:0d:c8:48:
                    67:f0:14:67:07:54:a9:62:93:36:21:14:4d:a6:c6:
                    3a:d8:b6:fd:55:d5:f5:57:1d:e9:bc:a3:0e:89:62:
                    a0:e6:85:98:08:94:4a:7b:af:c8:47:7a:de:e2:de:
                    0a:f0:12:76:83:6c:74:55:f9:59:18:b5:6f:c4:f0:
                    c7:e5:a5:6a:52:a0:01:ed:74:f0:c0:78:32:22:f7:
                    af:79:6f:35:a3:d9:08:30:b0:bd:b2:52:bf:c7:ca:
                    8a:e9:b1:40:bd:45:8d:c7:7a:06:66:3c:7c:ba:b2:
                    39:57:f7:9a:eb:17:34:6c:59:54:41:b4:91:31:59:
                    36:5f:da:37:88:32:39:a3:8c:2a:f1:d0:84:c2:3e:
                    db:65:0d:40:b3:16:4f:13:4d:33:ad:d7:fc:b1:9a:
                    c3:eb:86:07:cb:07:32:c7:8f:ac:66:4b:22:6a:30:
                    f1:fd:8d:29:28:55:c4:e9:50:fc:95:44:45:c5:92:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:39:3C:EE:7A:93:02:4E:B0:EB:49:CD:A8:36:52:80:88:F2:B1
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:81:17:a5:03:9f:76:f3:fc:b6:92:19:d8:84:b5:73:48:
         51:87:81:03:25:52:ca:1c:9e:5c:8c:6d:91:3d:fb:d0:c9:34:
         81:ae:a9:78:93:7e:f2:c5:a0:ea:84:0e:11:1c:be:c5:0a:05:
         9b:22:16:ee:3c:c4:43:3a:47:35:31:ae:05:bb:6f:22:d1:03:
         5e:79:80:e4:a4:f5:64:e0:f1:66:d2:db:80:61:08:3a:b7:5f:
         d3:b9:1d:fe:c6:a4:1a:8f:2f:d5:2c:aa:a8:86:f8:de:51:96:
         6e:1f:43:b6:33:6e:5d:4b:5d:35:ad:96:c3:85:78:41:50:af:
         f2:68:97:b5:4f:0d:0e:2e:40:85:53:12:5b:fb:83:7c:4b:6a:
         1b:3f:08:fe:40:49:7f:f3:7b:e6:52:39:63:cc:fe:ce:8e:2b:
         cf:0e:c1:12:4b:13:ea:f2:9b:ce:f2:fe:20:57:c7:6b:2c:4c:
         44:bf:1f:ce:a8:2a:b8:71:44:ee:18:43:41:1c:8b:89:61:2f:
         ad:18:92:1c:54:01:e6:27:66:f6:f6:73:35:df:08:e8:55:00:
         87:0a:4d:3a:ce:ae:b4:c4:83:43:6c:d9:91:fa:d6:54:a0:00:
         4d:54:c9:fd:4e:97:e5:21:12:c6:55:2e:18:64:c8:17:12:dc:
         a5:93:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----