Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          3VavAKOp+ePYNqt5ProRg8Ks1Tk4O/o4E3RcP1dW/iY=
Subject key identifier:   FC:DE:B3:FE:68:64:01:D5:00:7D:E1:3C:CF:16:72:B3:79:58:14:9C
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       7BC16835E4AB6D328CE8471E44F66DB104BD30AD
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 11 Jul 2022 10:35:32 +0000
ROA not before:           Mon 11 Jul 2022 10:30:32 +0000
ROA not after:            Mon 10 Jul 2023 10:35:32 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:68:35:e4:ab:6d:32:8c:e8:47:1e:44:f6:6d:b1:04:bd:30:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:32 2022 GMT
            Not After : Jul 10 10:35:32 2023 GMT
        Subject: CN=FCDEB3FE686401D5007DE13CCF1672B37958149C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:78:53:7d:6d:0b:4c:61:cb:d6:e3:5c:d1:
                    c1:ae:79:3b:4f:fc:80:b5:ea:5a:bd:0a:73:d7:b0:
                    bd:52:4b:e6:43:17:5e:b6:fe:6d:ae:6b:cc:6a:1d:
                    67:c2:81:0e:b3:66:d9:8e:9a:e5:94:61:a7:48:6f:
                    f9:f9:59:34:3f:ad:c1:0c:b2:f3:47:da:12:72:7a:
                    cd:8b:f5:02:8b:62:3f:24:c8:af:14:9e:ba:79:71:
                    66:58:fe:8f:f0:e5:10:29:d1:1f:8e:26:2e:cc:75:
                    83:09:7d:b6:46:9e:f2:ce:77:09:ef:32:44:3c:d9:
                    78:75:f4:f0:ed:f7:87:7a:e4:6d:82:1b:44:61:76:
                    51:a7:41:3a:46:ac:39:47:96:ba:d6:6d:a5:a9:33:
                    32:16:4f:65:3b:14:39:cf:30:70:35:1b:d2:82:1e:
                    ba:18:b0:1c:39:fc:4c:9c:e1:34:91:83:ac:d8:29:
                    8a:ba:36:36:04:3e:e5:b9:84:3e:b4:e2:33:1c:ae:
                    76:2f:04:9c:ee:d2:1a:02:01:5d:0d:bb:18:0e:53:
                    13:be:d9:30:74:53:da:1f:cf:47:55:17:ff:69:47:
                    8c:8c:57:04:a1:ee:03:0e:7a:07:5d:1c:b6:62:51:
                    41:4b:dd:92:c6:e3:c4:81:f2:f1:68:dc:22:ff:5b:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:B3:FE:68:64:01:D5:00:7D:E1:3C:CF:16:72:B3:79:58:14:9C
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:b9:ca:b7:0e:66:b7:6f:47:e0:5e:74:61:5e:fe:2f:5d:
         c9:9e:3b:af:d3:10:00:14:8a:d9:c1:a3:25:a9:ae:45:b1:9d:
         de:2e:a1:49:f3:52:62:13:61:3e:c3:b3:10:e2:96:c2:66:d0:
         4d:d0:14:39:32:35:93:b5:23:6d:12:bc:f5:03:ae:41:3c:8d:
         f7:22:43:fe:95:14:0e:b8:f0:b6:f3:96:c9:c1:64:3f:66:5b:
         c0:8a:2e:31:69:b0:50:7b:13:1c:f5:90:b1:dc:85:76:dc:c1:
         02:51:7c:5a:0f:cf:95:a4:72:ad:19:d1:b3:31:19:85:65:71:
         e2:fb:03:db:5c:49:2c:51:51:8c:3c:34:4a:3e:09:c5:c9:28:
         0a:d5:21:60:b0:f2:f6:07:7d:27:ae:37:7f:ed:fc:96:f9:9c:
         e1:21:a8:5e:35:99:29:85:d0:27:85:c8:12:2b:4d:c3:91:c4:
         81:c4:e4:ad:a4:aa:02:3a:e0:bb:8c:46:20:f2:e6:e5:d6:ab:
         09:ed:93:a4:c7:65:fc:22:01:da:6e:e1:f2:10:6f:62:2d:77:
         f1:21:1b:18:ed:49:36:fc:87:19:77:e0:d8:b9:5c:89:51:a3:
         47:df:bd:31:0c:0a:03:6d:a7:ca:c2:89:97:88:dd:bb:74:97:
         a2:05:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----