Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          yQ0WRQEzDp1W71ryRH7o27jHTf5s2l9zqATKcnM9hQE=
Subject key identifier:   8D:57:6B:0F:B4:B5:41:44:1C:AD:A9:5C:EA:2D:F0:84:B1:5D:93:E3
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       4DCE6A5B20CAC256D425840798D6D57ED8D373BC
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 12 Jul 2022 11:33:03 +0000
ROA not before:           Tue 12 Jul 2022 11:28:03 +0000
ROA not after:            Tue 11 Jul 2023 11:33:03 +0000
asID:                     61317
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ce:6a:5b:20:ca:c2:56:d4:25:84:07:98:d6:d5:7e:d8:d3:73:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 12 11:28:03 2022 GMT
            Not After : Jul 11 11:33:03 2023 GMT
        Subject: CN=8D576B0FB4B541441CADA95CEA2DF084B15D93E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:79:4f:b1:ed:88:99:f6:6b:66:64:93:d9:
                    b9:8a:70:2d:6b:43:bf:27:71:53:e5:2c:83:b7:e8:
                    77:a0:ed:5c:48:56:16:09:a0:3e:4a:40:38:5b:2e:
                    67:b6:c4:fa:65:51:11:19:a4:23:a8:0c:77:98:76:
                    14:5f:db:08:dc:20:db:fe:90:99:92:99:95:e9:29:
                    9c:ff:43:a8:51:ac:e2:db:36:f6:ce:1b:8e:a5:8a:
                    c4:7f:a8:4e:78:99:5a:8e:1f:71:8f:41:1a:72:fa:
                    ca:13:ad:28:41:ef:3c:b4:2a:bd:64:33:c6:b7:29:
                    c4:9d:88:01:7c:51:cc:94:ec:31:07:f0:eb:3c:63:
                    66:90:35:b5:6c:c3:a8:5c:26:6a:4a:df:c1:72:b7:
                    e8:05:4b:29:ce:67:29:cb:c1:df:08:51:5c:71:1a:
                    be:c6:f9:76:3a:35:dc:f7:1d:9e:0c:36:52:55:78:
                    0c:96:0a:41:26:e9:61:95:1d:f7:ab:fc:c4:fc:6e:
                    d2:fb:48:7b:e2:91:e0:5f:90:eb:99:02:38:d3:46:
                    f3:5b:57:55:62:dc:88:1b:5d:96:cb:97:81:e8:ba:
                    b9:8d:a9:20:3d:70:6d:03:d3:b4:5a:20:3b:ca:bc:
                    46:0d:27:a9:7f:80:4f:dd:71:9f:13:64:da:47:1c:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:6B:0F:B4:B5:41:44:1C:AD:A9:5C:EA:2D:F0:84:B1:5D:93:E3
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:cb:dc:35:35:c5:9b:6f:07:21:eb:85:31:66:96:37:34:
         e1:83:e0:06:33:0b:37:57:77:2a:87:9a:10:73:64:c7:b5:c0:
         b6:b2:0d:d5:3e:bf:5b:5b:e3:44:8d:db:f1:7b:37:70:18:7c:
         24:b1:7a:37:10:a1:4d:d3:1c:46:c9:80:55:46:db:61:3c:9f:
         30:9f:ee:00:30:22:13:f2:1e:a4:8e:59:d7:90:4f:8d:2f:ab:
         49:5b:fb:06:30:7d:19:10:23:f2:1b:a3:43:0c:70:48:dc:00:
         08:d2:20:cc:e6:f8:c2:89:21:0e:de:de:10:c8:99:d0:d6:00:
         a8:e8:8d:dd:c5:5a:a0:e0:82:ca:0d:df:dc:b8:1d:ee:ba:f9:
         6f:5b:b6:dc:9b:02:0e:7b:10:54:3d:87:9f:bf:76:a9:7c:bb:
         73:d2:33:90:d2:d0:58:e6:6f:8e:c7:f6:8a:31:0b:16:60:1a:
         c5:85:b9:98:3f:16:21:30:01:37:77:93:9b:fa:81:f7:c0:ab:
         57:73:fc:a9:2f:df:71:22:ac:fe:63:db:f4:27:bd:12:29:dc:
         b7:d2:35:5d:c0:c7:d9:01:5a:7d:26:e5:53:38:4d:47:1e:56:
         1f:2e:6f:a4:b4:3d:8f:9c:07:1e:ea:48:8e:66:ac:93:45:bc:
         76:7e:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----