Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa
File:                     3139352e37382e35362e302f32342d3234203d3e203131343236.roa (raw, json)
Hash identifier:          3C0Sn0EoLzOPX+L2VjxVKkuUYbJXuHLLK78VKRbT4EY=
Subject key identifier:   29:85:F0:53:B0:62:47:BF:51:D8:F9:E6:13:A3:D0:E6:A5:1E:80:72
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       6DF4605886E7A8A36259B64ADF3D51C58F0F7A37
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa
Signing time:             Mon 11 Jul 2022 10:35:27 +0000
ROA not before:           Mon 11 Jul 2022 10:30:27 +0000
ROA not after:            Mon 10 Jul 2023 10:35:27 +0000
asID:                     11426
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f4:60:58:86:e7:a8:a3:62:59:b6:4a:df:3d:51:c5:8f:0f:7a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:27 2022 GMT
            Not After : Jul 10 10:35:27 2023 GMT
        Subject: CN=2985F053B06247BF51D8F9E613A3D0E6A51E8072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:2f:20:1f:cf:d4:d5:78:cf:f4:c3:fb:78:
                    59:87:94:cf:e7:81:c6:57:d1:9d:35:88:d2:99:bc:
                    58:bc:3c:75:fb:dc:d8:b5:56:c6:25:da:f5:2a:48:
                    00:c0:b4:11:5e:1f:5f:18:9b:24:49:c7:4d:7e:50:
                    19:bf:34:b9:96:1b:46:8a:d1:6f:14:00:37:6b:9c:
                    17:2e:84:fa:c9:f3:9a:cf:3e:b8:d3:c1:40:db:cc:
                    d1:f6:1c:af:78:2f:e3:9b:c9:16:1c:ac:bd:a7:da:
                    87:68:b4:cf:fa:47:c1:45:c0:d9:45:41:dc:1b:49:
                    43:ce:53:cf:51:a2:42:a2:57:7a:4c:cd:5c:88:c3:
                    f7:e6:13:ee:8d:db:5a:cb:ef:5c:08:7b:dc:eb:db:
                    40:7f:76:87:0d:cd:71:fb:d6:21:40:be:f3:c3:20:
                    59:df:2c:14:4d:fe:7a:12:75:1e:43:8c:36:66:0b:
                    94:a2:f2:2e:2b:15:87:10:4b:11:90:17:1f:b9:fa:
                    48:05:ef:79:91:06:93:24:fd:7e:3c:d2:45:8a:21:
                    1f:00:49:ee:9d:96:5b:c2:7e:26:89:95:2f:e0:12:
                    e0:05:72:d2:58:26:0a:af:0a:15:8e:f2:bc:d3:b1:
                    e9:c7:a1:ea:72:30:12:e0:8a:97:44:91:18:55:4c:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:85:F0:53:B0:62:47:BF:51:D8:F9:E6:13:A3:D0:E6:A5:1E:80:72
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:aa:87:9a:10:9a:c2:97:b1:3f:46:03:21:1d:04:93:e6:
         a5:15:95:4d:57:36:57:1f:9e:f4:cd:a4:6d:87:4e:c0:69:9d:
         08:fc:d5:e1:24:8e:1b:4c:4d:32:ec:6e:89:6b:05:b5:a2:6d:
         74:07:70:47:3a:eb:92:06:33:45:ad:2c:3e:fe:dd:28:d0:dc:
         7b:e5:74:6d:6b:ab:a6:2f:14:36:0e:d9:c6:97:87:f6:f8:99:
         30:08:9e:1b:60:51:fd:10:c2:44:28:01:0a:7e:7c:52:f4:11:
         0e:ed:49:0d:ac:20:e4:69:24:7b:8b:6a:34:d3:f0:33:f5:7c:
         fc:95:a2:08:ca:37:cc:12:af:4e:0b:14:4e:49:89:27:72:37:
         36:19:4d:ed:30:aa:90:b7:5e:d9:51:e2:82:c5:cb:2f:97:94:
         92:f8:24:41:b1:98:dd:22:8f:c2:2c:3b:1d:96:a6:f2:18:fe:
         f4:f4:42:7f:aa:b2:24:41:54:c1:a0:4a:7e:68:b3:78:cf:69:
         5a:9a:87:e1:b1:14:f1:fc:2a:42:c3:c3:ef:b5:61:84:18:f3:
         fb:45:34:69:7f:50:60:5a:df:9a:24:72:7b:42:57:87:22:8e:
         40:e0:cc:b2:c7:f6:e0:44:7e:6d:5d:4d:0a:39:ad:21:12:4e:
         b2:2a:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----