Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          liWt1xskJanskraf3NZJinjY1pVJuW0jc5HoMLzK47Y=
Subject key identifier:   41:D5:E9:BC:61:59:90:B1:51:2A:1E:78:CD:90:CA:E9:F3:40:A2:8C
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       4FD05FD48F1E4F52B5153EED0425A4A6CE3DD3D8
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
Signing time:             Mon 11 Jul 2022 10:35:26 +0000
ROA not before:           Mon 11 Jul 2022 10:30:26 +0000
ROA not after:            Mon 10 Jul 2023 10:35:26 +0000
asID:                     14935
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d0:5f:d4:8f:1e:4f:52:b5:15:3e:ed:04:25:a4:a6:ce:3d:d3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:26 2022 GMT
            Not After : Jul 10 10:35:26 2023 GMT
        Subject: CN=41D5E9BC615990B1512A1E78CD90CAE9F340A28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:bc:64:67:e1:91:b8:74:3a:15:f6:be:ad:
                    a8:01:61:3a:01:f1:ea:16:92:44:5b:6c:83:19:cc:
                    66:8c:3f:5f:01:c6:67:d4:b1:cd:eb:75:e1:40:1f:
                    64:d7:69:eb:76:35:96:8c:72:a8:89:b1:03:90:ec:
                    00:6d:1d:7e:ff:f7:19:f7:38:19:b5:e5:b2:59:95:
                    fc:72:76:74:ea:1a:ba:53:ca:b8:30:e6:44:55:7e:
                    81:d7:72:0d:b0:6e:62:19:c4:1e:2d:bd:75:37:c4:
                    95:4f:1b:33:63:cb:f5:bf:1f:49:29:ec:27:99:61:
                    7d:37:6b:08:d7:ae:e7:31:70:93:07:c3:e9:23:82:
                    67:cc:18:0e:70:37:62:bc:24:eb:3a:63:4b:4e:c8:
                    d5:05:f2:87:38:71:5e:d5:23:86:5e:5d:09:f9:51:
                    77:0b:e2:05:cd:3e:53:26:07:c7:90:87:a2:ad:8e:
                    e5:45:9f:e8:c8:0f:87:dc:8d:69:32:06:7f:40:b4:
                    7e:38:ad:9f:8f:6c:64:87:9b:34:d6:4c:e2:8e:dc:
                    a1:4c:19:e5:a6:77:68:77:f5:2a:77:12:25:4f:30:
                    32:8a:e9:34:34:71:90:33:19:01:f7:1b:7b:09:e5:
                    c3:d7:c2:9c:ff:1f:e0:e0:bd:d3:36:db:22:82:46:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:E9:BC:61:59:90:B1:51:2A:1E:78:CD:90:CA:E9:F3:40:A2:8C
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:83:b4:55:c6:ea:e5:59:72:d6:ae:9a:14:01:0f:b2:1f:
         3a:07:57:22:a2:dc:69:e1:86:6f:44:a1:ab:18:34:4b:a7:a5:
         0e:6c:87:db:8e:20:3b:e6:42:fd:4a:04:49:ef:5e:04:41:db:
         9b:5c:86:b8:06:35:fe:4e:32:ed:74:58:e1:0a:ae:9d:53:42:
         e0:ff:94:52:3a:3c:90:aa:25:f9:f9:68:12:da:ba:ad:54:36:
         4c:ca:33:b0:ff:8a:71:d2:ba:80:f8:24:fa:4e:9a:4c:87:99:
         2f:64:cc:da:ad:40:3d:81:50:e5:d4:97:16:a1:24:18:36:65:
         25:f5:79:a3:94:a6:08:72:a7:ed:85:5f:a0:0f:74:69:9e:0a:
         fb:b7:e6:40:fc:aa:bc:f3:76:c7:00:74:97:b5:36:9b:7f:6c:
         d3:28:68:47:13:84:41:1e:f2:ee:1e:41:c3:93:b5:2d:12:ab:
         84:f0:74:79:83:a3:c3:09:c6:0e:68:63:72:b8:d5:fa:c1:a5:
         04:cf:d8:47:c6:43:54:91:e3:44:e8:3e:3b:0c:3a:01:fe:44:
         12:f8:46:5c:de:10:03:b5:b4:6d:ca:a3:25:2a:4d:3c:d8:c4:
         73:36:d5:6b:53:c8:4b:fa:53:58:bf:1d:a1:1c:99:37:76:34:
         28:41:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----