Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Zl3oXh/0pa69QJsspzPvQpWe6gCMXAW5aadh2aa3CRM=
Subject key identifier:   D3:4A:F3:FB:5B:76:9D:80:63:01:1E:1B:B5:35:EB:8C:EB:8C:22:E1
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       40FA9F87CD676E394F87A41A6B1F0488E0162F1C
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 11 Jul 2022 10:35:30 +0000
ROA not before:           Mon 11 Jul 2022 10:30:30 +0000
ROA not after:            Mon 10 Jul 2023 10:35:30 +0000
asID:                     61317
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:9f:87:cd:67:6e:39:4f:87:a4:1a:6b:1f:04:88:e0:16:2f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:30 2022 GMT
            Not After : Jul 10 10:35:30 2023 GMT
        Subject: CN=D34AF3FB5B769D8063011E1BB535EB8CEB8C22E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:5d:2d:a3:0e:b1:52:a5:c8:f9:2d:fd:d5:
                    ee:28:e7:0e:40:26:df:0f:a9:25:9c:69:8c:25:4e:
                    3c:49:d8:21:fb:21:94:f6:fb:f5:84:fc:2b:14:48:
                    81:1c:6d:ff:3e:65:c0:64:af:72:e6:45:03:15:73:
                    76:51:3d:12:bf:63:2c:77:19:14:9d:78:dd:0f:1f:
                    7f:c3:87:6d:e8:15:66:03:5b:6e:32:dd:67:ff:68:
                    5e:69:27:90:7d:01:71:18:83:d2:76:5a:f0:d7:88:
                    85:9a:9c:8c:c1:21:fd:ed:69:e2:2a:05:a8:47:25:
                    63:30:b3:c6:68:c4:ce:3e:7d:05:0f:cb:d3:a1:99:
                    d1:e7:31:82:77:93:e0:87:5c:16:96:a8:80:1a:db:
                    eb:43:55:d1:ee:0e:13:36:86:51:98:f1:88:85:90:
                    7f:1a:22:5f:38:c9:2b:33:7f:a6:3f:5d:e6:b8:2e:
                    3b:58:d4:78:62:03:d9:e4:4a:52:31:dd:37:b0:25:
                    db:f0:7c:74:55:b2:58:4c:1b:b7:9b:dc:20:38:7d:
                    fb:e0:b0:44:84:73:42:3d:cc:9f:c4:2b:8a:19:4b:
                    8b:4c:ca:2d:be:76:d5:f7:c9:e3:64:9c:fc:95:74:
                    45:1a:0f:66:2a:c8:48:95:50:b3:83:4b:fc:98:0a:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:F3:FB:5B:76:9D:80:63:01:1E:1B:B5:35:EB:8C:EB:8C:22:E1
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:78:0b:63:40:c5:2b:be:81:50:f1:5b:8a:5a:ed:2f:81:
         3f:4a:33:e4:db:2d:f8:62:6b:b3:6d:7a:12:1e:f9:83:75:8b:
         d3:0f:27:26:f2:3b:09:42:0f:a2:ac:b1:06:07:a4:de:d1:b1:
         b7:90:2c:a7:78:3c:5d:51:dd:c1:79:22:02:d1:f3:06:bd:b2:
         b1:3e:30:29:9a:8c:a6:60:91:8c:40:c6:70:61:63:ab:63:61:
         d3:c5:9c:e2:0b:c6:29:dd:4a:c0:5e:3c:2e:04:2f:6a:7a:7f:
         61:8f:82:d6:d3:37:49:eb:9e:dd:cd:38:fc:61:a6:e8:18:23:
         91:16:c0:72:0d:de:b9:69:8d:30:69:70:a7:39:9e:f2:28:47:
         6b:75:7a:80:0d:ca:d2:4c:1d:a9:ff:61:4c:62:da:87:1f:d0:
         b2:e4:f1:ff:18:7d:5c:ff:83:4e:1d:f6:d6:c3:ef:d0:6f:cd:
         ee:57:f4:41:f6:3b:69:47:59:78:a9:4e:f9:d4:f7:c4:7f:aa:
         fc:53:24:08:e9:8b:fc:54:40:8b:d6:34:30:22:4b:8d:50:bc:
         d3:76:fa:1b:ed:43:2b:88:b2:a8:10:a4:ce:ec:7d:e8:c0:9a:
         73:a0:b2:96:e2:79:64:8d:02:a0:5d:4c:7e:f3:0b:80:8b:e0:
         b0:52:e7:e9
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUQPqfh81nbjlPh6Qaax8EiOAWLxwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDMwWhcNMjMwNzEwMTAzNTMw
WjAzMTEwLwYDVQQDEyhEMzRBRjNGQjVCNzY5RDgwNjMwMTFFMUJCNTM1RUI4Q0VC
OEMyMkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJdLaMOsVKl
yPkt/dXuKOcOQCbfD6klnGmMJU48Sdgh+yGU9vv1hPwrFEiBHG3/PmXAZK9y5kUD
FXN2UT0Sv2MsdxkUnXjdDx9/w4dt6BVmA1tuMt1n/2heaSeQfQFxGIPSdlrw14iF
mpyMwSH97WniKgWoRyVjMLPGaMTOPn0FD8vToZnR5zGCd5Pgh1wWlqiAGtvrQ1XR
7g4TNoZRmPGIhZB/GiJfOMkrM3+mP13muC47WNR4YgPZ5EpSMd03sCXb8Hx0VbJY
TBu3m9wgOH374LBEhHNCPcyfxCuKGUuLTMotvnbV98njZJz8lXRFGg9mKshIlVCz
g0v8mAqM6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNNK8/tbdp2AYwEeG7U164zr
jCLhMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzMjJlMzEzMDM5MmUzMTM2MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG2lMA0GCSqGSIb3DQEB
CwUAA4IBAQCLVngLY0DFK76BUPFbilrtL4E/SjPk2y34YmuzbXoSHvmDdYvTDycm
8jsJQg+irLEGB6Te0bG3kCyneDxdUd3BeSIC0fMGvbKxPjApmoymYJGMQMZwYWOr
Y2HTxZziC8Yp3UrAXjwuBC9qen9hj4LW0zdJ657dzTj8YaboGCORFsByDd65aY0w
aXCnOZ7yKEdrdXqADcrSTB2p/2FMYtqHH9Cy5PH/GH1c/4NOHfbWw+/Qb83uV/RB
9jtpR1l4qU751PfEf6r8UyQI6Yv8VECL1jQwIkuNULzTdvob7UMriLKoEKTO7H3o
wJpzoLKW4nlkjQKgXUx+8wuAi+CwUufp
-----END CERTIFICATE-----