Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          cptV3sGdx+8XhBX/TcPXPeWj+l+cB0Na5yIXgsJ+SMk=
Subject key identifier:   85:D8:1E:DD:6E:0B:C1:E5:69:92:27:23:E3:89:79:5A:9B:0D:85:35
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       3E9BE4E082C3E16D11BFBAAC2D29EB89CF85CA83
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 27 Sep 2022 16:05:08 +0000
ROA not before:           Tue 27 Sep 2022 16:00:08 +0000
ROA not after:            Tue 26 Sep 2023 16:05:08 +0000
asID:                     212238
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:e4:e0:82:c3:e1:6d:11:bf:ba:ac:2d:29:eb:89:cf:85:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Sep 27 16:00:08 2022 GMT
            Not After : Sep 26 16:05:08 2023 GMT
        Subject: CN=85D81EDD6E0BC1E569922723E389795A9B0D8535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:82:60:89:3a:f4:48:a5:14:9d:ff:29:d6:
                    c7:d8:b8:ee:5e:fe:7c:d5:39:90:33:01:18:8c:4a:
                    00:1d:0b:73:ab:22:29:a3:01:15:a5:4a:73:7b:a3:
                    66:d7:51:a1:a7:f5:d6:9b:80:b0:16:54:2e:c4:57:
                    d4:16:0c:32:15:55:43:3e:61:8a:e6:7a:7e:82:04:
                    27:2d:e7:a6:d7:a5:58:50:e8:b2:f8:9c:a5:bb:45:
                    a2:be:66:27:ce:dd:06:ab:3e:38:d5:c3:5c:63:4a:
                    c9:e5:cf:b4:81:6a:f5:68:e6:ad:51:f7:81:23:b4:
                    ff:da:76:67:44:69:c9:a0:99:25:78:47:96:65:d7:
                    1f:58:ca:fa:7d:2d:82:d5:dc:06:32:b9:c9:a4:3f:
                    81:18:ad:72:e2:53:64:95:79:d8:c1:9c:93:54:9d:
                    52:d8:24:55:75:fc:07:d2:92:2e:a6:52:00:a7:99:
                    c3:a6:0f:23:b7:a8:c8:ec:c5:2a:66:5f:3a:21:3f:
                    05:fe:60:53:1d:c4:71:85:42:6b:3e:6c:fd:49:a5:
                    64:f4:0a:99:58:6b:d5:4d:3d:64:19:ee:9c:50:6a:
                    39:98:0c:db:52:d7:4a:d2:ff:91:1e:70:6b:37:27:
                    bb:fc:f8:d2:72:2d:35:d2:b9:1c:1b:88:08:48:74:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D8:1E:DD:6E:0B:C1:E5:69:92:27:23:E3:89:79:5A:9B:0D:85:35
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:a1:45:8a:4c:5b:0e:56:fa:bf:78:95:8f:76:db:4b:5f:
         9e:77:44:66:49:f5:35:6e:6f:ae:99:28:1b:8f:bd:e8:83:be:
         7b:cd:b7:b0:57:c2:c4:34:8a:af:95:0b:6d:5c:19:65:f7:3d:
         85:6e:1c:19:e9:f8:35:6f:9d:56:56:f4:3a:82:ff:81:ec:ec:
         c8:fd:c7:32:95:a6:c5:eb:11:e4:ca:f7:3e:a7:81:55:13:7e:
         fc:34:db:da:a3:58:9e:b5:90:88:47:a8:7d:04:3b:9c:d2:78:
         e3:52:f6:b8:dd:e7:82:fe:7b:fc:20:ba:96:10:51:ab:a5:19:
         01:88:17:73:d1:9c:47:db:71:d1:a9:47:3c:7e:4e:0d:b8:83:
         96:ee:00:d9:0c:7a:cf:39:0f:9c:07:e8:be:fb:56:9e:9f:6a:
         58:1f:5d:7d:82:d9:d3:5b:db:99:1a:d3:d4:ff:16:aa:a1:94:
         5c:31:0a:1e:fb:f5:bd:d6:b0:17:84:99:4a:4e:e4:21:55:08:
         44:72:23:cf:b1:76:1b:d1:46:0e:09:23:bc:82:8c:b1:f9:88:
         e7:8c:62:31:50:61:5b:19:76:c9:c0:bd:f2:89:44:71:96:cc:
         a2:80:92:75:77:36:85:27:76:17:71:07:c9:56:c5:d7:51:c9:
         cb:87:9b:e8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPpvk4ILD4W0Rv7qsLSnric+FyoMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwOTI3MTYwMDA4WhcNMjMwOTI2MTYwNTA4
WjAzMTEwLwYDVQQDEyg4NUQ4MUVERDZFMEJDMUU1Njk5MjI3MjNFMzg5Nzk1QTlC
MEQ4NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO6CYIk69Eil
FJ3/KdbH2LjuXv581TmQMwEYjEoAHQtzqyIpowEVpUpze6Nm11Ghp/XWm4CwFlQu
xFfUFgwyFVVDPmGK5np+ggQnLeem16VYUOiy+Jylu0WivmYnzt0Gqz441cNcY0rJ
5c+0gWr1aOatUfeBI7T/2nZnRGnJoJkleEeWZdcfWMr6fS2C1dwGMrnJpD+BGK1y
4lNklXnYwZyTVJ1S2CRVdfwH0pIuplIAp5nDpg8jt6jI7MUqZl86IT8F/mBTHcRx
hUJrPmz9SaVk9AqZWGvVTT1kGe6cUGo5mAzbUtdK0v+RHnBrNye7/PjSci010rkc
G4gISHSI0QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIXYHt1uC8HlaZInI+OJeVqb
DYU1MB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzMzJlMzIzOTJlMzIzNTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR37MA0GCSqGSIb3DQEB
CwUAA4IBAQANLqFFikxbDlb6v3iVj3bbS1+ed0RmSfU1bm+umSgbj73og757zbew
V8LENIqvlQttXBll9z2FbhwZ6fg1b51WVvQ6gv+B7OzI/ccylabF6xHkyvc+p4FV
E378NNvao1ietZCIR6h9BDuc0njjUva43eeC/nv8ILqWEFGrpRkBiBdz0ZxH23HR
qUc8fk4NuIOW7gDZDHrPOQ+cB+i++1aen2pYH119gtnTW9uZGtPU/xaqoZRcMQoe
+/W91rAXhJlKTuQhVQhEciPPsXYb0UYOCSO8goyx+YjnjGIxUGFbGXbJwL3yiURx
lsyigJJ1dzaFJ3YXcQfJVsXXUcnLh5vo
-----END CERTIFICATE-----