Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          +ROLs2FkRdIfigoA+DJ5nIfu9bgtDr5Fq8EEHvhCfNg=
Subject key identifier:   5D:89:E0:3C:25:AC:D8:FA:90:6D:77:5F:8E:7C:B3:C4:AF:7E:57:3F
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       609515D995567C5B7FE3E3EA2162C814EDEFDE9B
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
Signing time:             Mon 11 Jul 2022 10:35:31 +0000
ROA not before:           Mon 11 Jul 2022 10:30:31 +0000
ROA not after:            Mon 10 Jul 2023 10:35:31 +0000
asID:                     397423
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:95:15:d9:95:56:7c:5b:7f:e3:e3:ea:21:62:c8:14:ed:ef:de:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:31 2022 GMT
            Not After : Jul 10 10:35:31 2023 GMT
        Subject: CN=5D89E03C25ACD8FA906D775F8E7CB3C4AF7E573F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:38:26:da:9e:83:c6:5d:77:c7:7d:85:77:
                    78:ae:37:99:13:5b:17:7e:54:b8:31:64:85:54:27:
                    5e:58:c1:c6:ba:2c:e8:bb:e1:07:ef:c2:34:7c:62:
                    19:7c:b7:4d:73:7e:77:11:96:a0:79:67:aa:5e:07:
                    4f:e9:d6:d0:01:fc:7c:41:ea:27:13:f7:2c:c2:25:
                    4b:00:09:e3:29:bc:80:e1:15:bb:10:91:4e:10:18:
                    ca:9b:49:95:4a:7e:d0:0d:b1:5d:f4:bf:61:0a:f6:
                    0a:51:0c:91:b0:46:50:89:cf:82:4d:7d:17:32:09:
                    27:a9:65:71:be:98:20:c8:25:6d:eb:23:3b:2f:9a:
                    b3:5f:12:bb:23:cf:6a:24:57:f5:82:6a:db:79:37:
                    63:e5:09:e7:e0:9c:29:a6:fc:fb:32:6c:2d:e9:e9:
                    3e:38:8c:4d:f7:ab:f1:95:93:fd:67:c7:33:ad:af:
                    6d:b1:59:64:6c:be:37:38:d8:ee:85:1f:a9:05:8c:
                    22:87:8d:b0:ad:2c:94:11:4c:ce:78:62:b4:aa:ee:
                    95:8e:76:7e:04:ee:24:14:79:78:39:bd:eb:11:38:
                    1c:8a:7c:7a:2e:de:82:69:32:65:77:01:2a:b0:29:
                    9d:4e:9c:2e:0e:9b:7f:4f:3e:d4:ab:cf:fd:22:44:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:E0:3C:25:AC:D8:FA:90:6D:77:5F:8E:7C:B3:C4:AF:7E:57:3F
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:a5:42:eb:6d:58:43:f1:66:1a:4b:16:b1:3e:16:5d:82:
         a1:0f:92:44:2d:3a:4e:71:4a:de:b1:a8:47:f9:26:fa:f0:37:
         37:f7:f1:3f:a7:00:93:0a:54:1f:d1:fe:dd:4d:26:80:5d:a5:
         9e:97:54:bb:7d:b8:06:69:e0:25:01:1b:4c:1c:44:0d:c9:3f:
         b0:a1:3e:be:63:7c:89:12:75:ea:f1:a1:79:9f:48:5c:62:39:
         47:08:f4:53:65:a8:ad:81:fc:fb:5e:4c:2d:31:1f:db:ab:50:
         dd:d1:65:06:5f:b4:0c:52:9d:64:84:e2:d2:9c:6a:b9:31:92:
         48:fa:66:66:38:c9:49:90:78:c0:6b:af:5a:ae:b2:34:c2:01:
         cd:bb:6b:cc:c9:a2:61:c3:74:db:a3:5c:1b:34:7b:c5:64:ce:
         ba:e4:81:37:09:20:bc:7d:7d:ee:97:a4:87:77:fb:9a:5c:3c:
         45:5b:73:3f:68:5a:d8:c2:24:cb:26:3c:9c:64:3c:b4:2c:b0:
         39:c6:f2:89:0e:42:43:9b:a7:f5:c5:8f:47:4f:ef:71:26:40:
         9e:32:cd:19:3c:0b:d8:08:fe:d7:3b:02:f2:a5:c9:ca:41:96:
         b6:f8:86:a4:18:da:47:af:7a:de:f5:2d:d3:ca:7d:03:fd:6e:
         00:47:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----