Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa
File:                     3139352e37382e35352e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          hq2rp2kP705LS/GvjEt/beGprcMs8NEOaOV3HYF+VUI=
Subject key identifier:   E6:BF:F8:2B:83:69:00:76:83:BB:FF:4F:B8:EF:48:18:F7:F1:BE:19
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       2812F24077164B31899FC4D479875B5BDF22CB95
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa
Signing time:             Mon 11 Jul 2022 10:35:26 +0000
ROA not before:           Mon 11 Jul 2022 10:30:26 +0000
ROA not after:            Mon 10 Jul 2023 10:35:26 +0000
asID:                     6461
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:f2:40:77:16:4b:31:89:9f:c4:d4:79:87:5b:5b:df:22:cb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:26 2022 GMT
            Not After : Jul 10 10:35:26 2023 GMT
        Subject: CN=E6BFF82B8369007683BBFF4FB8EF4818F7F1BE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:ae:67:88:75:6c:93:3c:1f:94:55:4c:93:
                    26:b7:e8:bf:d5:b6:07:c3:6e:68:69:d6:6e:21:9b:
                    86:fe:5d:bf:31:c1:de:d0:d0:33:5c:10:aa:38:a7:
                    7b:56:f0:08:c5:67:f6:c2:1f:d0:25:fe:03:a6:76:
                    e7:b0:b5:97:47:dc:fb:1d:18:cc:cd:74:37:43:4e:
                    01:2b:61:59:41:4a:6e:b6:c5:b8:39:13:9d:16:b7:
                    d4:f3:5d:7a:bc:35:4f:d6:13:67:ed:6c:38:f2:b3:
                    de:ee:82:44:80:b7:3f:a4:cb:a2:d1:5d:66:f1:d8:
                    f4:91:75:0d:1f:17:d1:97:d6:3e:ec:04:75:9a:b0:
                    92:ac:1c:90:e1:ed:fe:dc:4f:e6:4e:0e:e5:46:5a:
                    b9:1d:09:38:7d:86:72:27:75:9f:a7:9b:7f:d3:fb:
                    a4:1d:f6:f2:18:69:b4:2c:af:87:d6:a5:d8:2a:ed:
                    9d:f7:a8:30:b6:9c:9a:f9:3c:d8:40:19:37:a8:6a:
                    8d:2e:68:99:1c:a0:9f:0c:c8:89:dd:10:77:6f:14:
                    af:7b:dd:b4:96:89:7d:57:46:0d:8e:b2:8d:92:11:
                    46:63:69:a6:c0:8d:b3:bd:dd:7d:f5:5c:d5:1a:51:
                    ab:1c:bb:40:4d:33:2a:bb:af:43:76:fc:0d:f0:66:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BF:F8:2B:83:69:00:76:83:BB:FF:4F:B8:EF:48:18:F7:F1:BE:19
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35352e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:67:e1:99:1b:56:92:a5:2e:40:1c:99:fb:a0:38:63:fe:1f:
         79:1c:7b:46:9c:d9:eb:36:09:56:14:18:3e:16:51:b3:79:b6:
         f9:e6:ff:7b:a8:90:bc:20:fc:9b:a6:11:f1:b5:5a:8c:88:a9:
         fd:af:e8:91:a6:5c:ff:e4:c7:f4:36:a7:f8:36:55:dc:fb:34:
         02:b5:04:89:59:ab:2d:6f:49:56:eb:ee:d1:e8:d8:c6:9f:1e:
         1e:7b:97:92:6c:16:1f:ec:cd:b6:ba:4c:ce:bd:4e:03:1d:45:
         36:a2:d0:e1:d4:dc:c8:53:55:42:c5:1a:f7:b3:04:75:09:fb:
         be:0f:82:83:7d:cf:0c:78:c5:ed:33:e2:e9:0e:d0:0a:d1:08:
         a7:69:e9:b6:9d:eb:aa:ea:58:26:e0:c0:72:eb:7c:d6:a8:80:
         53:ff:db:b4:b9:31:50:5d:ad:a9:4f:da:d4:90:16:07:c8:ef:
         8f:7f:59:97:b4:b8:e7:8c:1b:3f:e3:0d:6b:f1:70:f6:7c:83:
         06:a6:b4:ba:11:84:df:0e:2b:cf:42:b0:28:7f:f7:43:a9:30:
         bc:f3:60:19:94:9f:9a:9c:0a:03:e9:2a:19:77:9a:c0:d4:91:
         b8:3f:3b:28:64:c4:41:11:22:21:53:84:70:1a:23:40:54:16:
         8b:5a:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----