Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
File:                     3139352e37382e35352e302f32342d3234203d3e203131343236.roa (raw, json)
Hash identifier:          k6WlnEsd6ur+B/P4ihmYe4c6gWHSZ+ED8c/h/VExuTY=
Subject key identifier:   3C:E4:6C:2F:02:0C:65:BC:7A:DC:F9:F4:61:DA:B5:A8:66:0C:82:AB
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       435665227EAE8B8F93B183FA9B69671B88F7E730
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
Signing time:             Mon 11 Jul 2022 10:35:30 +0000
ROA not before:           Mon 11 Jul 2022 10:30:30 +0000
ROA not after:            Mon 10 Jul 2023 10:35:30 +0000
asID:                     11426
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:56:65:22:7e:ae:8b:8f:93:b1:83:fa:9b:69:67:1b:88:f7:e7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:30 2022 GMT
            Not After : Jul 10 10:35:30 2023 GMT
        Subject: CN=3CE46C2F020C65BC7ADCF9F461DAB5A8660C82AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:fb:7d:ca:ca:c2:35:c9:7d:ad:03:bd:a6:
                    77:20:8d:69:4b:30:81:ff:1a:c3:37:38:b4:45:c5:
                    42:ca:66:6b:98:dc:2b:ff:cd:c6:b9:76:bf:6a:b1:
                    21:d8:d7:56:da:58:8d:ff:0a:1a:72:b6:86:ba:04:
                    24:54:4a:cc:00:30:8e:f9:5a:18:e7:d4:94:3a:38:
                    03:3d:f6:0a:90:b4:77:3c:1b:02:ea:4f:d2:39:07:
                    ed:ab:40:72:36:e8:26:9a:a3:c8:16:3a:b1:56:7d:
                    01:f3:55:6a:f5:38:2e:67:e8:04:b3:05:a0:01:49:
                    91:03:f7:62:b0:7b:a5:ac:83:c4:fc:c4:1c:65:99:
                    18:2b:40:cf:17:b2:57:e8:16:da:4c:c7:d9:51:c6:
                    2b:d2:89:24:b7:e5:c8:15:9f:59:5b:42:e5:ae:35:
                    74:9e:4a:90:dd:a1:61:9d:31:4e:4b:43:d4:06:7e:
                    0f:32:29:ec:3a:b9:15:32:bb:2e:58:34:59:cc:fb:
                    af:65:52:d5:46:ed:72:82:49:7b:f0:da:01:8c:5a:
                    70:c9:cd:ae:42:51:44:86:c9:8b:69:a9:9a:e7:b8:
                    a5:b9:1c:51:7b:70:a9:d6:a3:01:1b:15:9e:f0:33:
                    e4:e5:4c:b5:5c:e2:b7:37:cb:5c:9c:2d:4c:97:4c:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E4:6C:2F:02:0C:65:BC:7A:DC:F9:F4:61:DA:B5:A8:66:0C:82:AB
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:49:d1:c5:f9:5c:03:29:db:96:9a:f3:bb:17:e6:bc:12:52:
         0b:24:67:7d:56:5d:45:61:3b:3d:a9:36:a2:50:3d:be:4c:b3:
         c7:3e:fb:14:05:38:29:1c:f0:6f:2f:68:1b:c1:8a:64:dc:bf:
         70:e7:dd:6a:d6:a2:f3:e0:eb:96:b2:23:9d:13:e3:1c:e3:f9:
         9b:2c:aa:69:be:b7:54:f3:35:c9:f7:b1:0a:3e:6d:f7:e0:f9:
         75:bd:82:e3:78:78:ec:a5:4e:83:39:ad:bc:0c:84:5e:01:2d:
         2c:0d:3a:a4:7b:3e:8e:cd:c6:80:cd:13:2f:94:ce:da:f4:0d:
         e3:37:a0:1f:88:7f:94:35:a7:0a:9e:5f:cc:d8:ba:a6:95:23:
         1c:a6:70:09:19:90:ef:db:0f:ee:82:31:1c:ad:51:d9:59:af:
         59:b9:da:7e:d9:25:5f:53:47:76:22:32:10:50:87:bb:fa:43:
         75:8b:e4:60:bc:8f:44:92:35:e6:58:da:bd:ad:38:e3:94:01:
         2b:39:b6:b9:72:bc:0d:52:6d:37:c1:44:fa:e5:ef:0d:ba:24:
         8d:2e:a7:e5:d3:8a:34:99:a4:5c:23:c9:54:9d:fe:cc:28:ee:
         3a:c2:d7:32:bf:b7:2c:d6:23:f2:4e:8b:6e:30:3c:8a:48:65:
         2a:17:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----