Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3132302e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          bLpgtw6PJx5+aYQ58MlPWTnTzK4NHG+4OdtmeW62/ek=
Subject key identifier:   51:F4:BE:B8:C3:BF:6C:BA:EA:B6:8B:D9:0F:99:6B:20:BE:F0:22:E5
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       0E8927800A7FFFCC22DCB0E344ABBD9509E7EFE3
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 11 Jul 2022 10:35:28 +0000
ROA not before:           Mon 11 Jul 2022 10:30:28 +0000
ROA not after:            Mon 10 Jul 2023 10:35:28 +0000
asID:                     17216
IP address blocks:        198.37.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:89:27:80:0a:7f:ff:cc:22:dc:b0:e3:44:ab:bd:95:09:e7:ef:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:28 2022 GMT
            Not After : Jul 10 10:35:28 2023 GMT
        Subject: CN=51F4BEB8C3BF6CBAEAB68BD90F996B20BEF022E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5e:c9:ea:f1:42:a8:1b:e6:d9:f6:1a:c7:1e:
                    81:9d:23:41:3e:55:f5:d2:f5:e3:85:7d:a7:1c:18:
                    25:5a:0e:06:f7:c0:fb:27:e3:8c:57:e2:37:fd:28:
                    f1:62:e3:fe:00:44:b9:c4:fc:cf:1f:0b:0e:92:07:
                    ed:ed:36:d1:3c:24:4f:49:9d:4e:3c:76:5d:6b:d7:
                    b2:3a:8e:60:0a:21:09:02:ed:6b:cb:27:15:38:ac:
                    7c:fb:79:a0:da:74:d8:17:e7:8a:cf:f9:d4:15:55:
                    58:33:d4:fc:93:20:ea:fc:0e:ed:32:60:fb:86:ae:
                    54:39:e6:ae:be:1d:c1:dc:66:9f:01:b7:91:7d:b9:
                    d4:cb:28:7f:19:ab:9f:ac:f7:f7:16:76:d0:4f:37:
                    c4:f5:da:54:b0:ca:b8:aa:69:ac:5d:86:0e:05:a7:
                    c3:c0:36:d0:f6:56:d3:84:17:61:55:7a:f6:77:32:
                    8c:e7:86:b3:e3:f8:5a:ff:dd:bf:69:c5:6a:ff:88:
                    75:81:88:08:c6:bb:7d:18:40:e8:b9:f2:fc:5c:0c:
                    5a:32:5d:da:a3:66:99:0a:71:32:9b:1b:ee:68:69:
                    2c:44:51:4d:d5:fa:f0:70:b3:6a:83:f2:36:fb:75:
                    77:d1:4c:ab:1a:38:c4:45:49:3c:24:ec:fe:c5:b3:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F4:BE:B8:C3:BF:6C:BA:EA:B6:8B:D9:0F:99:6B:20:BE:F0:22:E5
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:67:36:e6:24:9c:b6:f6:9f:ef:f5:36:c5:19:a5:39:5c:
         7f:7a:49:e3:fa:0a:71:12:89:6c:33:15:73:cf:d8:e7:3b:93:
         bd:e3:ee:c5:25:aa:0f:b0:49:c3:7c:15:64:1e:d3:19:40:65:
         dd:5b:49:b2:86:29:0d:71:48:9d:dd:f3:ac:ee:b1:1c:78:b1:
         6d:36:12:8b:50:5f:9a:ee:bc:8b:99:80:2f:4c:bb:be:66:dd:
         c1:c5:f8:82:d3:15:0e:1a:3d:d0:28:0c:5d:a6:0a:14:6e:da:
         9a:b2:3a:9f:5d:85:40:39:0b:73:03:cc:91:86:e4:99:2d:5f:
         88:ff:a5:56:dc:4e:46:45:a5:3d:0e:e3:dd:36:af:97:06:79:
         4c:0b:27:b9:69:dd:b5:02:5c:82:ac:36:2b:c5:e6:39:10:68:
         2f:91:20:a5:70:a5:be:4f:05:59:c6:eb:64:e1:ea:16:ea:75:
         32:94:1e:bd:7b:6d:69:bb:01:85:b0:f3:d6:2b:d2:e2:b8:60:
         8c:dc:4c:5f:29:c2:bb:85:c6:a1:a1:61:e2:c9:69:70:73:c5:
         99:5a:eb:75:04:ef:c0:90:12:59:0a:07:c8:33:93:74:1e:b6:
         8e:18:32:96:10:99:cc:46:35:60:8c:03:08:fb:e5:77:bd:37:
         6a:c7:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----