Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          DDFefQ627HsvjRHSp4reIsi+oYGKdBbKwBKREWrqgyg=
Subject key identifier:   9F:5A:A0:99:22:2E:91:0D:E3:A3:31:BF:37:5F:27:63:38:AB:A8:9A
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       643E3590DEFE9AEE64C533AACC0126F416941123
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 11 Jul 2022 10:35:29 +0000
ROA not before:           Mon 11 Jul 2022 10:30:29 +0000
ROA not after:            Mon 10 Jul 2023 10:35:29 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:35:90:de:fe:9a:ee:64:c5:33:aa:cc:01:26:f4:16:94:11:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:29 2022 GMT
            Not After : Jul 10 10:35:29 2023 GMT
        Subject: CN=9F5AA099222E910DE3A331BF375F276338ABA89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d5:f6:97:bc:60:12:29:d7:54:8b:00:ff:55:
                    09:46:03:20:69:41:11:2b:4d:a8:73:b0:86:d9:26:
                    9d:6c:f7:91:d5:6e:0e:ae:2a:7d:70:cf:a7:0f:92:
                    48:4a:bb:5a:af:d4:a1:c9:52:6c:c7:e0:ad:b0:57:
                    cf:1e:f5:7b:85:aa:4e:20:61:be:d8:02:62:6c:e8:
                    fc:c6:37:9b:ce:9d:a4:12:b2:40:28:6e:a6:df:51:
                    9b:15:48:06:a9:d1:55:92:6e:da:bb:76:a9:d2:51:
                    37:58:8f:12:9b:01:54:04:4e:df:4c:25:69:a8:15:
                    39:ec:cc:07:db:d2:c5:6f:8e:52:29:47:d2:47:bf:
                    4a:1a:e3:0c:cb:97:cf:9d:d8:b2:c8:18:a8:d2:1a:
                    dc:89:e7:8a:d2:5a:c7:e1:36:a5:c3:a7:38:d4:ae:
                    32:0d:1b:be:de:6a:05:43:c2:ab:fe:25:a3:9f:87:
                    47:63:a7:c5:37:29:ca:d2:c4:cb:ec:eb:c2:5a:63:
                    3d:d6:7b:ca:9d:ab:3f:88:fc:9e:c7:1a:a7:82:cc:
                    c3:df:dc:54:8a:7e:b3:97:1c:0b:e3:ef:46:0e:6d:
                    cf:f8:50:8b:7c:70:38:c8:e5:e2:92:d6:f6:84:e7:
                    72:ae:01:02:e9:56:f8:96:b1:4e:f4:d3:ba:71:a9:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:A0:99:22:2E:91:0D:E3:A3:31:BF:37:5F:27:63:38:AB:A8:9A
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:f8:ef:70:72:77:aa:f1:1a:94:cd:89:3c:e2:75:11:c6:
         0d:97:b5:c0:74:70:61:62:b1:f3:3f:7a:87:0e:3b:3f:e5:30:
         66:73:1b:00:13:9a:b9:66:93:69:72:25:25:49:d9:b4:fb:2c:
         15:8c:cf:e6:4b:69:55:94:52:65:38:b3:44:c8:07:61:7d:69:
         56:2c:aa:39:f7:3a:a7:46:a0:53:5d:38:da:d9:af:ea:26:b5:
         12:36:6f:5b:d3:14:cb:c3:31:d4:f5:41:e8:9c:7d:56:ae:3d:
         de:1b:8c:3f:e7:69:50:fc:93:d3:bf:41:c2:e5:07:d1:cb:6c:
         b4:92:6d:44:bc:19:44:35:0d:5c:af:44:7d:f5:c8:8d:59:66:
         35:30:ea:41:50:e0:b7:66:ed:36:56:4c:b0:80:0e:fb:e0:67:
         87:f7:12:f5:21:be:4c:94:c7:64:99:96:13:e7:8e:66:c3:57:
         a8:20:3b:50:f1:97:92:6d:4b:12:e1:9d:83:27:92:dd:5b:fc:
         f7:db:ca:7b:aa:d0:41:54:6e:39:e7:74:2f:25:fa:6b:90:d9:
         d3:f6:40:32:83:8f:c4:b9:a5:8f:a4:58:59:0f:0d:d9:b5:3a:
         06:5d:3f:4c:62:86:f8:29:4d:90:d9:d1:b4:e3:f8:95:c0:61:
         a8:7c:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----