Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa
File:                     3139382e33372e3132372e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          Kx5JTnqo1XmSG1yWTyhX57Avhj89Oaj6bSFs2B4b9gE=
Subject key identifier:   1D:D6:DF:BF:B1:7F:2B:07:C4:F7:6D:C5:0A:48:9F:5A:A5:06:7C:E8
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       5C03D7F2403F7E9DF9D81B7E3E2428B72AD20444
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 11 Jul 2022 10:35:26 +0000
ROA not before:           Mon 11 Jul 2022 10:30:26 +0000
ROA not after:            Mon 10 Jul 2023 10:35:26 +0000
asID:                     40676
IP address blocks:        198.37.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:03:d7:f2:40:3f:7e:9d:f9:d8:1b:7e:3e:24:28:b7:2a:d2:04:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:26 2022 GMT
            Not After : Jul 10 10:35:26 2023 GMT
        Subject: CN=1DD6DFBFB17F2B07C4F76DC50A489F5AA5067CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:d9:32:3e:56:ac:57:8e:68:72:31:44:54:
                    65:07:7d:b2:02:1c:76:4e:5f:9a:8c:55:ca:f1:63:
                    58:40:20:b8:20:9f:7f:8c:2c:df:3f:e7:c7:43:2a:
                    a2:4b:14:da:3a:4d:87:61:f7:71:ee:30:eb:3b:09:
                    05:e8:50:e3:b3:89:ef:4c:ee:6c:ff:9c:47:7f:f0:
                    7e:1a:4b:c7:05:55:fa:e7:e3:7f:da:64:4b:9a:01:
                    22:a4:8d:bd:ee:dc:dc:6e:36:fe:e2:00:44:3f:9e:
                    1f:ae:c1:d4:48:11:26:fb:5f:06:0d:ea:4d:02:df:
                    be:9f:a7:60:55:16:a7:49:b1:2e:ba:3e:d3:25:50:
                    a6:ac:34:25:52:39:b5:40:ed:76:5b:72:bc:2d:09:
                    3e:c7:83:dc:c3:2a:6e:39:ff:00:11:d1:60:19:77:
                    4b:d8:23:32:cd:b6:54:12:4d:5a:ce:2d:f4:25:9b:
                    dd:25:90:61:13:7f:bc:a1:1a:de:2e:b5:22:bf:e9:
                    40:2c:f0:91:5a:b5:28:40:07:14:43:64:6e:0e:50:
                    81:1b:b1:e9:a1:bd:ce:36:e5:79:51:e8:ae:87:d8:
                    3b:db:b4:54:7d:68:22:5c:8a:d2:64:57:3a:65:ce:
                    c4:be:14:c0:41:4d:64:51:f9:90:af:98:6e:38:b4:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:DF:BF:B1:7F:2B:07:C4:F7:6D:C5:0A:48:9F:5A:A5:06:7C:E8
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3132372e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:6c:1a:c6:0c:de:94:ec:7a:87:df:29:d6:31:7d:61:a2:13:
         57:c4:8e:c1:48:06:9f:4e:96:f8:45:16:4c:7e:5c:9f:c1:73:
         c0:6c:dc:80:bc:84:49:8f:bd:4e:f0:59:58:d6:2a:dd:4e:e5:
         61:72:6f:77:26:c3:e4:2f:de:8c:19:1d:82:0e:5d:b6:17:69:
         2d:f3:2d:3f:b8:65:a1:03:4d:8d:1a:a3:4b:fe:24:c9:8c:f5:
         05:6f:9c:2f:96:15:63:f2:24:e4:e1:f3:4a:4c:60:3e:cf:2a:
         88:71:9b:78:5d:45:63:17:a3:34:00:1d:51:d2:38:88:32:8e:
         4f:17:53:13:53:f3:b6:07:69:01:64:d1:0a:0c:86:70:2f:1c:
         5d:09:c7:ea:6a:cf:f3:11:3d:87:a8:9a:41:cf:a9:fd:b4:eb:
         d3:fe:f4:41:e8:60:d1:84:cf:28:af:ba:51:da:61:b4:42:90:
         a8:b1:4a:a4:8d:9c:98:44:58:ec:03:c0:67:3f:1d:46:fa:fb:
         5b:84:59:cc:5f:32:78:a8:d8:51:d3:c2:79:15:d2:b2:51:a7:
         76:67:a8:26:2b:df:1a:78:53:20:2b:5b:3f:82:3f:5c:d5:08:
         06:bb:cc:d5:d8:24:18:ff:a3:71:3b:43:ee:8d:96:c2:13:bf:
         e3:47:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----