Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203137323136.roa (raw, json)
Hash identifier:          AIxxRA54OZjKWKkgUdiHq2hoXgllZNf6tHtzl6NDH2A=
Subject key identifier:   D0:7B:53:20:D3:69:D3:61:2A:02:91:F8:50:AB:E4:3D:40:32:5F:03
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       1A02295446A6128E54A925AC196A92EE7C0C6518
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
Signing time:             Mon 11 Jul 2022 10:35:27 +0000
ROA not before:           Mon 11 Jul 2022 10:30:27 +0000
ROA not after:            Mon 10 Jul 2023 10:35:27 +0000
asID:                     17216
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:02:29:54:46:a6:12:8e:54:a9:25:ac:19:6a:92:ee:7c:0c:65:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:27 2022 GMT
            Not After : Jul 10 10:35:27 2023 GMT
        Subject: CN=D07B5320D369D3612A0291F850ABE43D40325F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:21:ab:97:3d:9a:d1:17:75:1e:f0:85:ec:
                    87:80:0b:e5:55:98:98:45:f3:60:04:8a:05:0c:77:
                    75:87:af:57:8b:04:b8:55:32:b3:e7:b4:b8:13:bf:
                    8c:cd:df:b5:5c:c7:5f:56:63:e9:fb:81:32:dd:4b:
                    32:0b:04:2d:e2:6d:34:e0:4f:e4:95:cd:d4:27:2e:
                    78:9b:79:95:07:76:a3:12:97:0a:64:f4:b2:f5:0e:
                    44:57:bc:5c:09:20:e9:56:b7:ec:27:b6:5f:43:7c:
                    71:46:ca:2f:0c:b1:21:3e:a9:1d:dd:cc:8f:66:16:
                    3b:97:e3:c6:02:2c:db:5d:53:d5:79:8c:e8:51:88:
                    11:08:b4:78:84:82:5e:22:87:6a:10:68:6d:21:42:
                    17:fd:c5:0f:84:56:3a:36:91:b0:88:64:4a:a4:b2:
                    db:50:46:2b:a7:dd:46:81:ce:eb:bb:43:14:5c:08:
                    9b:d3:8d:42:e3:f9:d2:c5:9e:6d:c1:7e:e7:bc:ee:
                    75:67:22:7b:bd:2e:84:56:0f:4d:46:5d:78:d5:59:
                    a5:3c:e8:5b:11:79:ab:7e:bc:65:04:ea:92:d8:ef:
                    ad:e2:b4:7e:29:7f:1d:e4:3f:42:eb:66:85:01:00:
                    de:4c:50:5a:bb:82:2b:f9:28:c8:e4:16:a7:be:12:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:53:20:D3:69:D3:61:2A:02:91:F8:50:AB:E4:3D:40:32:5F:03
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:8f:94:e1:b4:ec:57:74:03:6d:9e:cf:21:bb:a0:9e:07:
         16:3f:c8:71:20:ee:50:ce:8b:f4:f0:9b:9a:0e:c6:58:1d:e2:
         da:6e:b5:cf:c2:55:6b:0f:16:e5:c4:60:e9:e5:0b:03:9a:66:
         ea:87:1e:aa:db:00:82:8a:8b:82:ac:2c:2f:47:1d:98:70:9c:
         9c:b4:6d:3e:8e:68:86:f1:4b:15:56:77:e5:32:e0:69:e0:44:
         58:2c:fd:29:25:71:2e:bf:17:7d:63:39:2c:37:2e:a2:51:a6:
         a3:b0:8f:04:27:e5:59:e5:29:63:1f:ec:4e:49:22:89:44:de:
         95:60:df:39:1b:8e:e7:4c:cc:b2:07:aa:93:56:2a:54:4f:50:
         6b:72:80:c8:83:25:36:4f:a9:3a:10:77:58:23:2e:bc:b6:6b:
         e6:e2:c3:a8:e7:76:04:e9:88:55:d5:f8:22:a5:56:b9:33:3c:
         87:fc:6e:3d:38:f5:8d:34:11:34:78:6b:a6:3b:88:98:84:af:
         4d:43:25:6d:1f:79:ff:a9:55:bc:5a:97:56:a7:7a:c7:5f:4f:
         6f:08:35:2e:4b:0c:8e:a8:9b:2a:2b:86:75:24:ab:4c:b8:31:
         2c:b7:09:7b:e3:b2:98:c6:eb:ef:77:df:8e:00:c4:db:91:63:
         e9:85:44:6d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUGgIpVEamEo5UqSWsGWqS7nwMZRgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDI3WhcNMjMwNzEwMTAzNTI3
WjAzMTEwLwYDVQQDEyhEMDdCNTMyMEQzNjlEMzYxMkEwMjkxRjg1MEFCRTQzRDQw
MzI1RjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR8hq5c9mtEX
dR7wheyHgAvlVZiYRfNgBIoFDHd1h69XiwS4VTKz57S4E7+Mzd+1XMdfVmPp+4Ey
3UsyCwQt4m004E/klc3UJy54m3mVB3ajEpcKZPSy9Q5EV7xcCSDpVrfsJ7ZfQ3xx
RsovDLEhPqkd3cyPZhY7l+PGAizbXVPVeYzoUYgRCLR4hIJeIodqEGhtIUIX/cUP
hFY6NpGwiGRKpLLbUEYrp91Ggc7ru0MUXAib041C4/nSxZ5twX7nvO51ZyJ7vS6E
Vg9NRl141VmlPOhbEXmrfrxlBOqS2O+t4rR+KX8d5D9C62aFAQDeTFBau4Ir+SjI
5BanvhJKHwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNB7UyDTadNhKgKR+FCr5D1A
Ml8DMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQy
MDNkM2UyMDMxMzczMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATGJWAwDQYJKoZIhvcNAQELBQAD
ggEBAAOnj5ThtOxXdANtns8hu6CeBxY/yHEg7lDOi/Twm5oOxlgd4tputc/CVWsP
FuXEYOnlCwOaZuqHHqrbAIKKi4KsLC9HHZhwnJy0bT6OaIbxSxVWd+Uy4GngRFgs
/SklcS6/F31jOSw3LqJRpqOwjwQn5VnlKWMf7E5JIolE3pVg3zkbjudMzLIHqpNW
KlRPUGtygMiDJTZPqToQd1gjLry2a+biw6jndgTpiFXV+CKlVrkzPIf8bj049Y00
ETR4a6Y7iJiEr01DJW0fef+pVbxal1anesdfT28INS5LDI6omyorhnUkq0y4MSy3
CXvjspjG6+93344AxNuRY+mFRG0=
-----END CERTIFICATE-----