Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          3CwuRZg9X0SGg9Q9KyJemCLrK7VJgnVIvYIDYnWO47c=
Subject key identifier:   99:C3:A3:06:C3:54:2B:6C:11:14:F3:63:FF:1F:88:0D:20:A0:A9:08
Certificate issuer:       /CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
Certificate serial:       50DBED4D5C6FD5638C3888BC2EC8BA7113D3E085
Authority key identifier: EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Wed 30 Aug 2023 20:09:56 +0000
ROA not before:           Wed 30 Aug 2023 20:04:56 +0000
ROA not after:            Wed 28 Aug 2024 20:09:56 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:db:ed:4d:5c:6f:d5:63:8c:38:88:bc:2e:c8:ba:71:13:d3:e0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
        Validity
            Not Before: Aug 30 20:04:56 2023 GMT
            Not After : Aug 28 20:09:56 2024 GMT
        Subject: CN=99C3A306C3542B6C1114F363FF1F880D20A0A908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:5d:24:d0:74:72:0f:e5:69:76:2a:4d:2e:
                    fd:85:df:e1:ff:c4:53:a5:07:84:12:41:92:c1:1d:
                    4b:20:05:68:59:04:c5:b8:6f:89:83:a9:c3:7f:37:
                    c0:d0:18:10:14:f6:e7:11:6e:cd:6d:da:df:34:3f:
                    2c:a5:2a:e8:69:6f:40:44:75:39:de:dd:2d:7c:e0:
                    56:19:61:79:c0:7e:f3:5a:7f:01:b2:fa:07:ea:db:
                    24:1f:51:14:04:45:0e:0d:fd:52:79:25:6d:07:d8:
                    64:f5:8a:0d:d4:2d:55:43:33:54:98:84:a5:9a:89:
                    be:01:5e:a1:76:be:fd:f5:f0:3e:37:09:3f:cc:8d:
                    04:1a:d2:1f:99:f0:6b:f8:34:54:17:7f:bd:ef:23:
                    e5:40:59:29:5d:35:db:07:42:d0:8f:86:80:99:33:
                    3c:28:ba:fb:d5:b9:69:f3:a7:56:e0:99:45:59:54:
                    25:d0:99:d3:51:21:f1:65:f8:10:bf:54:d3:c4:00:
                    06:b7:d7:53:b4:f1:f7:53:e6:04:bc:71:b2:8e:6f:
                    fc:9a:0f:71:a4:1f:71:b7:ec:1d:0b:80:e9:64:c9:
                    aa:2a:f9:3c:fe:2a:d1:5f:7a:50:e7:b8:46:fe:fa:
                    e9:f3:13:c1:f0:80:cb:ea:f4:9c:22:5b:64:62:af:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:A3:06:C3:54:2B:6C:11:14:F3:63:FF:1F:88:0D:20:A0:A9:08
            X509v3 Authority Key Identifier:
                keyid:EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/EF13C213784664D4684119614B2AF58530A084C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:61:9a:39:d9:c5:f9:d6:2d:ab:a9:c4:4d:10:8c:96:98:
         f7:b1:f5:45:b4:79:28:db:80:5b:8e:ca:63:30:0d:84:e4:e6:
         6b:7b:ab:69:16:33:a5:fa:49:ba:8a:41:be:ff:11:11:17:70:
         eb:2d:b1:a9:a4:e0:85:fc:ba:ad:b1:07:32:c5:a8:15:a3:28:
         39:84:d2:a4:78:e4:d1:af:e5:8e:c6:98:5e:e9:8b:1c:f5:46:
         fc:c1:ca:dc:1b:54:5f:e9:0d:89:e5:34:6f:8f:da:99:39:98:
         98:51:ca:94:5a:e2:29:2b:c5:d3:f7:57:99:f0:87:be:11:03:
         81:e8:61:65:2f:b9:e0:55:29:e7:13:4d:01:6f:af:35:27:99:
         ef:bc:44:4a:a7:33:6a:59:08:3d:ff:d3:49:80:f3:2d:11:a2:
         c8:14:d7:30:53:f7:07:de:28:f2:9d:3b:8b:3c:b2:37:86:8e:
         84:76:c9:ce:3d:5e:35:3c:f7:b3:7a:44:52:a6:80:65:60:74:
         87:bf:6f:00:eb:54:94:10:43:65:07:94:2a:be:de:83:5d:af:
         94:88:2c:4f:d4:6f:b1:46:eb:1a:65:d0:59:8b:71:2b:39:98:
         35:05:db:fc:e7:de:f3:fc:25:35:a3:28:3d:00:33:a5:a1:83:
         50:c6:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----