Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
File:                     3139352e37382e35362e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          bzJEb9Na6ELhA+Qz0kkHBuOnQvx0vUbYWm0z/Lp3QvQ=
Subject key identifier:   42:38:15:79:7B:EB:FA:A8:70:84:65:3B:16:01:B3:98:04:7E:F1:92
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       23C161A372282E686932FC40BAD9AC35B5E835E9
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
Signing time:             Mon 11 Jul 2022 10:35:26 +0000
ROA not before:           Mon 11 Jul 2022 10:30:26 +0000
ROA not after:            Mon 10 Jul 2023 10:35:26 +0000
asID:                     6461
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:61:a3:72:28:2e:68:69:32:fc:40:ba:d9:ac:35:b5:e8:35:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:26 2022 GMT
            Not After : Jul 10 10:35:26 2023 GMT
        Subject: CN=423815797BEBFAA87084653B1601B398047EF192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:5d:34:3a:50:58:95:ef:20:24:f2:bb:c6:
                    8c:4a:03:95:c1:a2:08:d3:1d:92:5b:15:76:fd:fc:
                    62:9c:f8:06:ea:1c:5f:3e:40:f4:f0:aa:7a:81:0f:
                    2c:2c:a2:6c:a4:bd:31:92:11:5e:32:e3:2c:a1:ec:
                    6a:72:54:ec:9d:57:55:63:fb:d5:29:58:31:bc:13:
                    bf:3b:cf:14:92:d5:49:b8:76:ac:2d:75:40:95:e0:
                    b1:6b:3d:0f:ed:55:d9:37:60:94:68:6d:84:d8:66:
                    2c:fc:ad:db:74:fa:41:82:45:e6:c1:8a:8a:e8:5e:
                    ff:a9:14:13:9b:11:f7:17:65:a9:02:b6:bd:c9:ef:
                    4c:7b:20:7c:9e:9f:4e:e0:e6:72:be:ba:aa:f4:5e:
                    e5:a4:f2:22:13:cf:79:58:e8:b5:d6:e9:42:25:41:
                    51:92:8e:a0:90:bb:35:2f:65:b5:c6:81:ce:e0:84:
                    14:49:77:37:07:ec:63:7a:1a:3d:00:91:b8:90:20:
                    b7:9d:3e:35:d3:4c:85:2a:dd:50:5c:61:0a:34:9a:
                    68:6f:02:d3:02:7c:60:38:4c:5f:e4:05:8d:84:bc:
                    de:d9:4e:aa:4e:3a:b0:6d:52:af:11:58:30:0e:11:
                    11:4c:c4:bf:36:33:37:9a:04:e2:78:e1:d7:01:c9:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:38:15:79:7B:EB:FA:A8:70:84:65:3B:16:01:B3:98:04:7E:F1:92
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:43:db:76:71:56:e5:da:58:84:db:f6:36:0a:7a:78:9b:
         2e:b7:19:e0:0c:f9:d8:06:ef:ff:26:db:45:14:e3:db:51:26:
         ea:06:06:00:bb:b7:3e:5e:3d:67:e5:11:f6:93:ac:5a:a8:77:
         9e:2b:fb:00:ad:cc:65:15:c0:36:aa:7a:e9:72:6a:e9:96:86:
         51:3d:7d:1e:74:75:8c:2a:75:c6:86:43:33:fe:d2:42:86:63:
         15:05:53:12:52:1b:0c:f8:1c:84:52:6c:4f:66:69:6f:9b:b4:
         89:68:d2:d2:c5:62:4e:e3:6a:ec:77:63:1d:23:47:d0:bd:a0:
         f1:2b:49:53:7b:b8:75:f9:81:51:12:a9:2b:9e:51:9e:a3:26:
         fb:fc:4e:d8:54:02:3f:a9:ca:3b:77:66:8b:13:48:8b:1d:6f:
         be:43:01:2e:f2:ce:b5:2e:e4:01:c0:43:7f:27:43:16:4e:15:
         e4:80:1b:24:90:7d:cf:e4:df:21:1b:a4:9e:46:2d:3a:57:67:
         00:10:92:61:22:25:e0:51:27:b0:36:b0:53:7a:40:52:8d:db:
         6c:e5:ec:a2:5e:a7:80:5d:8f:95:ab:9d:99:cd:65:76:25:0d:
         0d:95:de:fc:91:75:0d:ff:44:a9:60:ab:1f:d5:7e:07:82:fe:
         45:89:7a:4a
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUI8Fho3IoLmhpMvxAutmsNbXoNekwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDI2WhcNMjMwNzEwMTAzNTI2
WjAzMTEwLwYDVQQDEyg0MjM4MTU3OTdCRUJGQUE4NzA4NDY1M0IxNjAxQjM5ODA0
N0VGMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JtdNDpQWJXv
ICTyu8aMSgOVwaII0x2SWxV2/fxinPgG6hxfPkD08Kp6gQ8sLKJspL0xkhFeMuMs
oexqclTsnVdVY/vVKVgxvBO/O88UktVJuHasLXVAleCxaz0P7VXZN2CUaG2E2GYs
/K3bdPpBgkXmwYqK6F7/qRQTmxH3F2WpAra9ye9MeyB8np9O4OZyvrqq9F7lpPIi
E895WOi11ulCJUFRko6gkLs1L2W1xoHO4IQUSXc3B+xjeho9AJG4kCC3nT4100yF
Kt1QXGEKNJpobwLTAnxgOExf5AWNhLze2U6qTjqwbVKvEVgwDhERTMS/NjM3mgTi
eOHXAcmPmQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEI4FXl76/qocIRlOxYBs5gE
fvGSMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzAvMzEzOTM1MmUzNzM4MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDTjgwDQYJKoZIhvcNAQELBQADggEB
AF27Q9t2cVbl2liE2/Y2Cnp4my63GeAM+dgG7/8m20UU49tRJuoGBgC7tz5ePWfl
EfaTrFqod54r+wCtzGUVwDaqeulyaumWhlE9fR50dYwqdcaGQzP+0kKGYxUFUxJS
Gwz4HIRSbE9maW+btIlo0tLFYk7jaux3Yx0jR9C9oPErSVN7uHX5gVESqSueUZ6j
Jvv8TthUAj+pyjt3ZosTSIsdb75DAS7yzrUu5AHAQ38nQxZOFeSAGySQfc/k3yEb
pJ5GLTpXZwAQkmEiJeBRJ7A2sFN6QFKN22zl7KJep4Bdj5WrnZnNZXYlDQ2V3vyR
dQ3/RKlgqx/VfgeC/kWJeko=
-----END CERTIFICATE-----