Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          W508pyQLbP4hB4UaU1jXL8AhdID0w3ovOWvQg0KyKM8=
Subject key identifier:   FD:A7:3C:8B:FA:9F:C8:D1:B1:44:4F:94:44:11:7B:30:33:0F:76:68
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       244998A50C86CAD997BDC5DEC78538DCF448F7C6
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 11 Jul 2022 10:35:32 +0000
ROA not before:           Mon 11 Jul 2022 10:30:32 +0000
ROA not after:            Mon 10 Jul 2023 10:35:32 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:49:98:a5:0c:86:ca:d9:97:bd:c5:de:c7:85:38:dc:f4:48:f7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:32 2022 GMT
            Not After : Jul 10 10:35:32 2023 GMT
        Subject: CN=FDA73C8BFA9FC8D1B1444F9444117B30330F7668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:bf:27:fc:ad:6b:09:d5:b6:ef:e3:f8:d3:
                    eb:a5:57:a9:6d:b2:a2:90:70:7f:15:0d:5f:d8:7e:
                    7a:88:8b:40:3c:1e:32:c4:6f:69:19:eb:82:75:ba:
                    95:e0:7c:2b:63:38:6a:09:33:89:4c:0d:de:d2:cf:
                    9e:aa:e0:97:34:bb:3f:50:7f:f4:56:b9:f9:7e:35:
                    34:c6:fb:1f:8c:0b:7b:f1:7e:45:ba:86:2d:d5:86:
                    db:2e:b3:49:cc:42:9d:ce:2f:18:42:e3:8c:6c:b9:
                    18:55:e5:f9:18:39:82:a3:62:33:52:fe:90:98:7c:
                    cf:c6:1d:bb:ae:45:ed:a2:22:9e:35:ac:9f:0d:fe:
                    72:58:41:32:be:66:ef:70:38:1d:78:cf:a6:04:ac:
                    29:87:9f:5c:86:51:af:21:2e:8b:b5:ed:c1:ef:e8:
                    d8:1c:21:f0:f7:d8:50:78:f1:b5:33:13:9b:5f:c3:
                    6e:15:cc:ad:4d:ca:91:07:51:48:45:92:06:c9:44:
                    0e:9b:ea:aa:6a:8f:08:a5:91:d6:4c:3d:ea:f0:eb:
                    6c:f4:bf:97:44:ba:d9:eb:d0:f3:01:5d:f1:42:12:
                    a7:d5:6f:c0:6a:d4:44:d2:03:6d:7c:25:9a:ce:f5:
                    85:56:fc:45:07:ef:2c:eb:fa:95:64:fd:8e:e7:97:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:3C:8B:FA:9F:C8:D1:B1:44:4F:94:44:11:7B:30:33:0F:76:68
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:5b:69:ed:3c:7d:51:d2:64:ef:09:a0:80:f0:7c:19:f1:
         c4:a6:8d:ba:04:46:22:92:14:7b:11:fc:dc:1b:08:50:b1:2c:
         8d:71:51:fd:6b:87:4a:fd:4d:d2:40:01:9b:8c:17:e9:32:9f:
         06:8c:cc:e4:fa:cb:92:48:c6:bf:1b:3b:35:45:88:e2:c9:87:
         73:37:e0:90:2c:e6:a7:ea:ad:cf:4d:02:3b:83:44:2c:41:f6:
         49:e4:2f:51:a5:95:5c:f1:05:e5:05:e5:db:6b:29:eb:39:92:
         87:af:ac:4e:8f:4c:21:b3:b5:e9:a4:b4:8c:7e:af:b2:36:fd:
         ee:a6:dd:c8:4f:31:e5:f8:cd:d0:6b:6b:d7:73:3a:59:5a:1a:
         cd:80:62:7c:0a:1f:20:9f:c2:13:29:b3:3a:d8:33:fb:0a:14:
         86:42:8c:47:10:30:1c:7e:a8:cd:57:1b:b8:dd:0a:2c:55:67:
         4f:61:fc:fb:52:a1:80:2d:c7:1a:d5:09:c1:f4:69:36:7c:d2:
         92:00:4a:a5:5a:d7:fe:6a:6e:0b:21:ef:3a:d2:8b:71:6a:38:
         79:7d:1e:95:f5:50:b4:89:53:3c:9d:81:75:f2:89:41:96:54:
         ad:37:a0:51:5c:5c:59:9a:07:f2:ac:8d:27:94:5a:51:3b:05:
         0b:57:c3:e0
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUJEmYpQyGytmXvcXex4U43PRI98YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDMyWhcNMjMwNzEwMTAzNTMy
WjAzMTEwLwYDVQQDEyhGREE3M0M4QkZBOUZDOEQxQjE0NDRGOTQ0NDExN0IzMDMz
MEY3NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnke/J/ytawnV
tu/j+NPrpVepbbKikHB/FQ1f2H56iItAPB4yxG9pGeuCdbqV4HwrYzhqCTOJTA3e
0s+equCXNLs/UH/0Vrn5fjU0xvsfjAt78X5FuoYt1YbbLrNJzEKdzi8YQuOMbLkY
VeX5GDmCo2IzUv6QmHzPxh27rkXtoiKeNayfDf5yWEEyvmbvcDgdeM+mBKwph59c
hlGvIS6Lte3B7+jYHCHw99hQePG1MxObX8NuFcytTcqRB1FIRZIGyUQOm+qqao8I
pZHWTD3q8Ots9L+XRLrZ69DzAV3xQhKn1W/AatRE0gNtfCWazvWFVvxFB+8s6/qV
ZP2O55du2QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFP2nPIv6n8jRsURPlEQRezAz
D3ZoMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzODJlMzMzNzJlMzEzMDM0MmUzMDJmMzIzMTJkMzIz
NDIwM2QzZTIwMzEzNzMyMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8YlaDANBgkqhkiG9w0BAQsF
AAOCAQEAS9Zbae08fVHSZO8JoIDwfBnxxKaNugRGIpIUexH83BsIULEsjXFR/WuH
Sv1N0kABm4wX6TKfBozM5PrLkkjGvxs7NUWI4smHczfgkCzmp+qtz00CO4NELEH2
SeQvUaWVXPEF5QXl22sp6zmSh6+sTo9MIbO16aS0jH6vsjb97qbdyE8x5fjN0Gtr
13M6WVoazYBifAofIJ/CEymzOtgz+woUhkKMRxAwHH6ozVcbuN0KLFVnT2H8+1Kh
gC3HGtUJwfRpNnzSkgBKpVrX/mpuCyHvOtKLcWo4eX0elfVQtIlTPJ2BdfKJQZZU
rTegUVxcWZoH8qyNJ5RaUTsFC1fD4A==
-----END CERTIFICATE-----