Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          DkcYh//56IJJZdXNEdLKtkOLDYpZA7pxE2X8YK87Hsc=
Subject key identifier:   37:80:05:8F:B1:92:42:CE:8F:6C:81:4E:04:66:BF:19:9D:B6:A0:90
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       7A4E58B8BBC7C4DDA728E35FA09EEA92874E2842
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 11 Jul 2022 10:35:29 +0000
ROA not before:           Mon 11 Jul 2022 10:30:29 +0000
ROA not after:            Mon 10 Jul 2023 10:35:29 +0000
asID:                     17216
IP address blocks:        198.37.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4e:58:b8:bb:c7:c4:dd:a7:28:e3:5f:a0:9e:ea:92:87:4e:28:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:29 2022 GMT
            Not After : Jul 10 10:35:29 2023 GMT
        Subject: CN=3780058FB19242CE8F6C814E0466BF199DB6A090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:c6:5a:4f:3c:49:ec:c2:44:a7:7f:03:85:
                    e6:37:7f:ad:13:14:21:9b:aa:b5:63:86:ab:bc:22:
                    33:0d:91:66:b5:d1:20:62:4a:de:a0:d7:65:94:6a:
                    ba:38:ea:8d:12:98:47:9a:c8:7e:a3:a6:4b:eb:8a:
                    f3:53:51:b3:27:c7:4a:95:c7:8a:f6:bf:49:f4:de:
                    76:b0:11:c5:5c:5a:cd:26:f5:21:be:17:4c:95:41:
                    c4:28:b8:7c:c2:ec:64:7d:01:ed:1b:32:16:e9:d5:
                    7d:1d:ea:a5:07:0c:7f:a9:c7:2d:ae:1b:e7:85:1f:
                    32:7b:83:9c:e7:d0:e4:b4:02:43:13:16:f9:16:76:
                    cc:2e:62:0a:78:b0:d7:c8:86:fb:92:9d:33:f2:b8:
                    32:e6:04:b0:25:06:a8:ba:79:8f:bb:27:44:00:8c:
                    b0:96:e1:9e:d8:60:37:7f:40:5b:aa:36:f1:6f:c0:
                    a1:4a:40:5a:99:e8:d0:39:a6:b4:66:20:8a:59:04:
                    1a:30:dc:a7:55:85:03:96:fb:2b:40:e4:d5:cb:fa:
                    b0:fc:7d:46:dd:d2:a0:d5:8c:a2:c8:ec:23:c9:43:
                    4b:0a:0c:7e:18:88:6d:79:3c:11:5b:3a:4d:fc:ca:
                    4a:8a:54:b0:72:a0:79:94:31:2f:13:85:26:6c:31:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:80:05:8F:B1:92:42:CE:8F:6C:81:4E:04:66:BF:19:9D:B6:A0:90
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:00:5b:15:97:1c:d4:5f:26:ba:fd:a5:fc:56:fb:16:65:
         0c:58:f5:c6:55:9a:63:8c:24:54:93:ed:70:cb:6f:27:c6:5e:
         89:8c:7a:ab:9b:eb:a2:78:c3:8b:a5:9d:e7:fc:5a:5f:85:fa:
         b8:cb:c1:61:28:72:a9:78:f9:9b:e8:83:a7:f6:e7:2e:62:10:
         1c:dd:53:d8:33:f3:31:15:78:c3:45:09:3c:15:1d:ca:cd:c1:
         3e:eb:cd:1f:22:41:48:c7:f3:ed:01:e9:95:39:6c:fe:2a:3e:
         56:2c:e2:02:b6:54:62:a0:d4:47:de:16:dd:f4:fb:e6:c0:06:
         fc:06:ec:fc:fa:41:cf:73:c0:3d:de:1f:e9:9b:67:33:ce:05:
         09:90:09:79:e3:ce:45:db:51:12:3e:92:25:52:fe:99:73:23:
         c8:b2:ff:f1:2a:34:41:26:3b:64:a9:b4:b6:87:fa:a9:a9:f4:
         16:4f:b8:0c:a3:5e:cf:8e:09:a3:97:64:c2:d0:a8:2f:a4:76:
         33:1c:7b:56:5a:ef:99:26:fe:06:0a:84:1a:bc:17:21:0e:07:
         3a:1b:7b:92:94:bd:5d:e8:16:5f:82:c4:20:2d:e3:4b:cd:11:
         ce:58:a7:03:5b:55:46:81:ca:61:c8:5b:97:92:01:8a:19:7d:
         0c:1f:bf:55
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUek5YuLvHxN2nKONfoJ7qkodOKEIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDI5WhcNMjMwNzEwMTAzNTI5
WjAzMTEwLwYDVQQDEygzNzgwMDU4RkIxOTI0MkNFOEY2QzgxNEUwNDY2QkYxOTlE
QjZBMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EfGWk88SezC
RKd/A4XmN3+tExQhm6q1Y4arvCIzDZFmtdEgYkreoNdllGq6OOqNEphHmsh+o6ZL
64rzU1GzJ8dKlceK9r9J9N52sBHFXFrNJvUhvhdMlUHEKLh8wuxkfQHtGzIW6dV9
HeqlBwx/qcctrhvnhR8ye4Oc59DktAJDExb5FnbMLmIKeLDXyIb7kp0z8rgy5gSw
JQaounmPuydEAIywluGe2GA3f0Bbqjbxb8ChSkBamejQOaa0ZiCKWQQaMNynVYUD
lvsrQOTVy/qw/H1G3dKg1YyiyOwjyUNLCgx+GIhteTwRWzpN/MpKilSwcqB5lDEv
E4UmbDHSGQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDeABY+xkkLOj2yBTgRmvxmd
tqCQMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzEyZDMyMzQy
MDNkM2UyMDMxMzczMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPGJWAwDQYJKoZIhvcNAQELBQAD
ggEBAAuZAFsVlxzUXya6/aX8VvsWZQxY9cZVmmOMJFST7XDLbyfGXomMequb66J4
w4ulnef8Wl+F+rjLwWEocql4+Zvog6f25y5iEBzdU9gz8zEVeMNFCTwVHcrNwT7r
zR8iQUjH8+0B6ZU5bP4qPlYs4gK2VGKg1EfeFt30++bABvwG7Pz6Qc9zwD3eH+mb
ZzPOBQmQCXnjzkXbURI+kiVS/plzI8iy//EqNEEmO2SptLaH+qmp9BZPuAyjXs+O
CaOXZMLQqC+kdjMce1Za75km/gYKhBq8FyEOBzobe5KUvV3oFl+CxCAt40vNEc5Y
pwNbVUaBymHIW5eSAYoZfQwfv1U=
-----END CERTIFICATE-----