Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3132352e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          00jRQUg40kwZtjV2/ySuCrtOAemgbt+yBJek2WGdYuM=
Subject key identifier:   F0:DE:99:23:D2:8C:6F:2C:7A:E8:3D:C9:9B:F9:6E:6D:83:81:91:EE
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       25E5E151A44FA38FF5F11AF6B19D1CB988DE8B3A
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 11 Jul 2022 10:35:29 +0000
ROA not before:           Mon 11 Jul 2022 10:30:29 +0000
ROA not after:            Mon 10 Jul 2023 10:35:29 +0000
asID:                     53340
IP address blocks:        198.37.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:e1:51:a4:4f:a3:8f:f5:f1:1a:f6:b1:9d:1c:b9:88:de:8b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:29 2022 GMT
            Not After : Jul 10 10:35:29 2023 GMT
        Subject: CN=F0DE9923D28C6F2C7AE83DC99BF96E6D838191EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:1b:79:bd:90:66:85:9f:e2:f6:3d:79:99:
                    9b:fd:44:b1:e3:64:9e:5c:2c:e4:0b:4b:bd:98:87:
                    43:25:c5:82:ab:2b:51:d2:cc:0b:81:c8:19:db:dd:
                    73:8a:f9:f1:fe:71:72:b2:54:12:a8:d0:e3:63:52:
                    0d:c4:09:e4:a9:e2:a5:ba:57:e8:76:18:01:5f:03:
                    c4:23:4d:4e:6b:6f:1c:c1:2b:3f:fe:26:32:21:76:
                    c8:cf:4d:73:10:24:fa:be:d1:a9:e7:5f:81:f0:61:
                    be:7b:33:35:e5:85:19:91:7d:7c:6d:6e:f5:1e:a6:
                    ba:7f:e7:f0:67:5e:9c:81:2f:a9:0e:da:0b:e9:15:
                    f3:22:27:4e:ce:cb:b6:3b:37:d3:c9:be:92:eb:5e:
                    1f:e5:2d:c9:da:db:e5:c4:07:f3:9d:55:c5:0a:7a:
                    a4:49:4a:f2:2e:f2:b0:51:3f:60:34:f1:9f:4f:a3:
                    ed:7f:39:03:d4:f2:a6:c0:97:0a:8b:20:93:2e:91:
                    c1:c0:b1:83:6e:e1:2b:81:1c:df:7d:f8:f9:9b:86:
                    ad:49:d7:d8:cc:5e:87:dd:5b:4a:49:16:e5:6f:56:
                    f4:b6:08:ee:bf:20:c0:39:92:fd:9c:42:77:aa:fb:
                    57:8e:e6:c4:c9:71:ad:f6:ea:0a:69:9c:bc:d7:69:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:99:23:D2:8C:6F:2C:7A:E8:3D:C9:9B:F9:6E:6D:83:81:91:EE
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:63:5e:e6:d2:cb:84:d9:7b:ab:52:f3:bd:47:bc:14:71:e4:
         4c:67:31:23:de:97:da:cb:0c:e4:6d:98:ff:85:c2:17:1a:86:
         d2:04:c1:c1:9c:65:da:97:02:51:62:1a:f8:d8:28:8a:2a:7f:
         8c:9f:08:a4:14:1c:ac:c3:86:10:99:9c:a5:cf:34:07:a8:63:
         dd:51:2b:b9:19:d9:1c:7a:d1:b8:a8:d2:28:e1:98:87:9e:ec:
         31:e6:e2:61:d9:78:80:ea:4d:31:c4:44:dd:7e:99:52:03:2b:
         6f:1d:97:99:e6:e5:11:f6:1c:4c:34:be:cd:35:f7:f7:36:74:
         eb:dc:48:22:2b:0f:8d:47:55:18:28:6b:67:f0:4d:cc:30:86:
         60:eb:62:16:0b:b5:3c:8a:9f:bb:ab:dc:fe:10:e9:52:c0:c1:
         c1:96:82:a6:d4:8c:f5:e5:4d:43:40:0a:7f:ad:94:11:a3:0c:
         a9:fc:cd:f5:74:99:f0:fd:09:00:b2:c2:63:35:51:bb:0f:4d:
         1a:4c:9b:7d:d1:c2:ee:5f:11:ad:65:8f:23:83:2f:4c:fc:29:
         c2:58:fe:1b:15:e1:ac:d5:5b:dd:2f:de:d7:be:db:7c:8d:0d:
         9e:f4:96:7e:cd:e1:ed:64:ed:9a:70:c8:46:73:c7:ae:96:c6:
         ee:5a:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----