Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa
File:                     3139352e37382e35342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          PHA4XBUdQnagE5ZY8lK1gn6tTxumk+cKmAfwrYHbmRI=
Subject key identifier:   B5:52:1A:FF:57:BB:F1:2C:12:E5:67:B2:15:7A:59:3D:64:B8:B1:2F
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       767A30BA7B3151F7AD513FE08E276B266223B54B
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa
Signing time:             Mon 11 Jul 2022 10:35:27 +0000
ROA not before:           Mon 11 Jul 2022 10:30:27 +0000
ROA not after:            Mon 10 Jul 2023 10:35:27 +0000
asID:                     174
IP address blocks:        195.78.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7a:30:ba:7b:31:51:f7:ad:51:3f:e0:8e:27:6b:26:62:23:b5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:27 2022 GMT
            Not After : Jul 10 10:35:27 2023 GMT
        Subject: CN=B5521AFF57BBF12C12E567B2157A593D64B8B12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:93:28:77:92:e1:89:e3:bb:8e:3a:b2:7a:
                    a2:89:a8:00:40:70:ef:f9:27:78:35:2a:88:d1:f4:
                    d4:11:5e:bf:36:08:f9:2d:b8:a1:41:48:d3:2e:57:
                    87:ba:ce:38:8d:44:fe:c0:91:0b:cf:61:77:23:da:
                    ac:1b:8c:7c:b7:15:d6:ad:34:1a:74:32:76:c5:1f:
                    b9:b8:21:96:d6:e5:56:f7:07:99:ad:83:a1:c2:5e:
                    38:f7:77:c2:ec:30:31:cb:9a:9b:c7:95:88:99:c9:
                    b9:bd:11:19:1c:a5:b5:2c:af:86:5d:83:6c:a1:ba:
                    e3:29:f1:8b:e6:3b:31:05:38:07:02:78:eb:2b:20:
                    bd:6e:3e:5e:c0:f6:93:a2:c0:76:00:0e:a4:4c:c3:
                    72:b5:7b:91:55:fa:76:00:e0:87:e9:17:85:05:0d:
                    2a:1b:12:1a:88:18:59:f1:99:61:50:04:c7:f9:83:
                    9e:22:6f:4b:be:8e:f7:db:25:80:b6:10:32:af:93:
                    18:b0:bc:dd:c6:30:17:b6:39:fc:f3:d7:ff:83:a0:
                    fe:d6:4e:e7:b5:2f:43:5b:0c:19:d6:22:40:3f:ba:
                    1e:9a:c6:00:27:bf:24:e7:1b:60:f1:95:f6:81:22:
                    9b:8f:a0:48:46:6d:b4:c8:78:b9:87:e8:6c:78:4e:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:1A:FF:57:BB:F1:2C:12:E5:67:B2:15:7A:59:3D:64:B8:B1:2F
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35342e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:80:b4:a3:20:79:38:eb:ac:47:ea:6e:fe:31:a3:df:0b:
         bd:bb:7a:41:ed:1c:25:86:38:a5:c4:0f:87:78:a5:3a:fd:cf:
         a4:ba:63:79:d2:c5:17:4b:1d:0e:1c:2c:ce:74:82:e7:39:0b:
         d6:4e:20:35:bb:e2:6e:1d:56:24:0a:eb:af:c9:54:66:42:9a:
         21:42:18:86:41:26:e8:f6:cf:c8:e7:57:c1:4f:00:17:30:5b:
         c6:d8:5e:79:81:56:ae:84:d2:13:1b:46:47:72:c8:c5:69:7b:
         e4:bb:79:78:f6:97:0b:8a:3b:72:4d:47:88:d8:0c:b9:68:25:
         fa:47:e7:6c:1b:d4:10:38:3c:5b:38:38:5b:0b:24:4b:9e:b5:
         1d:e4:27:f3:2b:3f:2a:4c:44:0b:9f:4d:0a:9b:77:c7:66:f5:
         9b:78:31:ff:16:f3:5f:4b:28:f1:e9:58:9d:a0:04:23:18:74:
         24:6a:1b:be:f6:b5:bc:3e:12:27:c3:fe:a6:be:4e:91:1b:ca:
         2c:25:ee:32:ca:5d:60:8e:65:b4:b9:9e:46:b5:c4:34:e9:50:
         09:a9:22:92:2b:0e:a0:38:88:94:4e:4a:79:ba:03:d6:b7:60:
         04:e4:11:54:f9:a8:73:46:76:17:8b:f8:01:dd:10:6a:3b:4f:
         1f:fa:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----