Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XU086G1Aoatj5x34gTJS1CZsVKN735PYjztHWzOp6yM=
Subject key identifier:   6A:74:39:4A:C0:26:A1:90:9F:1F:4E:9F:D7:F4:5C:19:DC:FF:B0:BD
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       4C1895B8DB5E50423E34358E532D231715588A8E
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 11 Jul 2022 10:35:31 +0000
ROA not before:           Mon 11 Jul 2022 10:30:31 +0000
ROA not after:            Mon 10 Jul 2023 10:35:31 +0000
asID:                     61317
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:95:b8:db:5e:50:42:3e:34:35:8e:53:2d:23:17:15:58:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:31 2022 GMT
            Not After : Jul 10 10:35:31 2023 GMT
        Subject: CN=6A74394AC026A1909F1F4E9FD7F45C19DCFFB0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:00:13:cd:16:57:9e:60:15:19:a4:a4:45:
                    6c:dd:6d:1a:b0:b2:77:64:ee:8a:9f:91:a5:e8:8a:
                    a9:f1:46:e6:08:44:d8:db:53:07:df:4b:25:ec:61:
                    89:6c:aa:7f:78:05:8a:3d:e8:51:6b:81:93:e7:ff:
                    88:fa:44:94:59:f7:d0:aa:f3:c4:c9:50:28:71:2e:
                    2c:5e:0e:b1:7a:f3:89:e2:44:dc:05:f5:20:1e:a8:
                    85:c2:f0:a7:01:84:8c:f0:4f:66:95:72:5c:8a:39:
                    81:38:7f:43:86:ac:1b:cd:42:56:88:11:b4:b2:cb:
                    80:8c:49:fb:e0:bd:1b:1e:37:a4:88:47:e7:7d:a1:
                    9c:af:0f:cb:30:d9:56:18:69:cb:0a:ef:4b:b0:41:
                    f4:a4:21:d9:ef:92:c6:2f:1d:15:85:57:d4:f6:b4:
                    ab:c4:5e:f5:89:10:1a:7b:d0:6a:38:9b:d0:9e:d3:
                    aa:00:0e:87:8e:e7:5c:76:bf:1d:92:ba:52:46:87:
                    a8:9d:0a:88:96:e4:9d:90:fc:00:ab:b1:4d:71:ef:
                    2c:64:e0:75:95:4e:50:b7:2b:69:11:dc:01:05:a0:
                    17:24:40:dd:35:59:d4:63:ae:d4:bb:cf:0a:7f:0f:
                    3c:ba:da:60:04:34:38:73:e2:34:f4:bf:65:a4:62:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:74:39:4A:C0:26:A1:90:9F:1F:4E:9F:D7:F4:5C:19:DC:FF:B0:BD
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:48:72:c4:2b:0d:0a:26:35:ac:df:1f:cf:57:a1:f2:1f:f1:
         e4:61:0e:c2:d3:76:6e:ac:11:2e:59:89:95:1e:7a:d7:99:98:
         ec:3d:c9:fe:42:b4:cc:9c:86:a4:80:73:c4:a4:09:02:17:a1:
         98:c0:d0:f4:29:78:60:a6:c4:a0:b0:08:d6:56:f8:ff:5b:7b:
         77:51:87:6b:41:bb:de:7b:1b:ac:0a:88:69:0e:b1:a2:d3:90:
         25:bd:5e:a8:6d:02:9c:df:be:5b:6d:4b:82:db:52:42:8f:25:
         46:33:94:67:42:09:03:b6:d2:a6:8f:c1:e7:5e:65:c4:60:03:
         f2:91:54:3c:63:9c:d0:01:3e:a8:79:eb:4f:8d:d1:2f:45:52:
         df:d1:8d:be:ae:cc:90:18:2c:7e:5e:da:e4:f6:3f:96:e7:b9:
         d3:03:31:d8:f4:aa:46:db:32:33:ec:d5:e5:e0:10:0d:b6:a6:
         9d:c8:26:8c:f3:50:df:10:8f:b0:ef:5d:ef:de:09:9f:8f:fb:
         b8:de:1b:58:0a:41:df:e9:ed:57:28:c4:78:2a:9f:d9:92:a4:
         b9:5d:b6:ef:5d:f1:24:19:2f:77:84:5c:89:eb:6f:5b:b7:b1:
         39:c2:02:24:02:72:f3:fc:35:70:d0:c7:67:ed:cb:f6:27:26:
         e7:62:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----