Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dae02d98e3e21/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          CGCTKrAkMVG0QmXmIYM6Zmb5upjc/TwSaPQPG1rwF7E=
Subject key identifier:   6D:E4:6C:36:19:CB:77:77:46:35:A9:A9:DA:FB:FA:4F:3A:6F:20:6A
Certificate issuer:       /CN=fcb20f59666ae5205c6df7944757cb8566e50fd320af92e27b
Certificate serial:       2978A2A82C168161C9D9C338BE3F5D6D3513EA0A
Authority key identifier: D3:25:70:A2:78:B7:66:24:96:63:E5:6D:34:20:72:1D:D7:D1:B4:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/44d56c09-7c49-4f51-baa8-f0f55f9f4e6c/fcb20f59666ae5205c6df7944757cb8566e50fd320af92e27b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dae02d98e3e21/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time:             Thu 15 Feb 2024 18:25:48 +0000
ROA not before:           Thu 15 Feb 2024 18:20:48 +0000
ROA not after:            Thu 13 Feb 2025 18:25:48 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:78:a2:a8:2c:16:81:61:c9:d9:c3:38:be:3f:5d:6d:35:13:ea:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59666ae5205c6df7944757cb8566e50fd320af92e27b
        Validity
            Not Before: Feb 15 18:20:48 2024 GMT
            Not After : Feb 13 18:25:48 2025 GMT
        Subject: CN=6DE46C3619CB77774635A9A9DAFBFA4F3A6F206A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:4a:27:0c:11:96:24:4d:b8:e6:2e:85:a4:
                    f7:8a:85:65:62:0c:6a:07:ab:8d:dc:ee:5d:a7:2f:
                    f6:ef:b3:2a:50:52:fc:ed:03:54:39:7e:94:62:ea:
                    3a:66:98:4b:80:06:8c:83:b2:d7:50:e0:8c:dd:a6:
                    bb:d6:4b:ce:d2:5c:6a:e1:f8:7f:ff:73:60:d4:16:
                    3a:2e:44:49:14:b3:c1:d7:da:f1:c8:4a:ef:b0:2d:
                    23:69:c1:73:09:b2:4c:a2:f4:8f:df:e2:76:c9:2b:
                    ec:a3:81:a0:a8:70:40:78:4a:79:ce:77:4d:8c:11:
                    19:d5:a8:32:9b:40:dc:72:ad:14:6b:47:6e:cb:47:
                    50:07:85:06:b7:91:2c:4c:85:c1:1d:a2:3a:95:65:
                    bf:38:71:ad:7f:5f:f1:4b:98:3a:bf:9c:d6:f0:4d:
                    a7:46:5a:ee:61:d7:cc:e4:f2:52:ab:0c:dd:5a:5d:
                    fd:20:46:00:f2:41:4a:07:42:3f:6b:37:f2:f3:be:
                    82:05:65:73:93:ef:9c:29:66:36:37:b4:61:81:e1:
                    54:34:4b:b7:34:c4:00:56:a9:13:51:a8:88:9d:1c:
                    30:15:7b:7b:1a:8f:50:c8:c2:c2:b7:57:0b:30:62:
                    2d:a0:82:0b:c3:b6:73:81:75:7f:3d:06:9c:e2:47:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:6C:36:19:CB:77:77:46:35:A9:A9:DA:FB:FA:4F:3A:6F:20:6A
            X509v3 Authority Key Identifier:
                keyid:D3:25:70:A2:78:B7:66:24:96:63:E5:6D:34:20:72:1D:D7:D1:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dae02d98e3e21/0/D32570A278B766249663E56D3420721DD7D1B46D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/44d56c09-7c49-4f51-baa8-f0f55f9f4e6c/fcb20f59666ae5205c6df7944757cb8566e50fd320af92e27b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dae02d98e3e21/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:40:fa:1d:d6:6d:2e:f7:60:4e:6d:24:01:9f:b1:56:15:33:
         77:1a:b0:03:90:65:0b:2a:ee:d3:09:39:b2:6f:0d:10:a7:5c:
         5d:36:d5:8e:09:72:4a:b2:d8:5d:13:9e:ed:81:12:68:ca:9b:
         e0:f1:93:2c:42:88:ce:2a:5b:d4:eb:b7:56:f0:16:c3:fc:83:
         69:27:42:3c:d3:a6:8f:47:4f:4c:f7:fd:2e:68:f7:32:8d:2b:
         d6:ff:e1:ab:9a:83:80:63:93:f5:31:d9:cd:5c:75:bc:fa:a5:
         d8:b8:86:c2:25:d1:99:e1:1c:bd:f9:72:0e:c6:4b:30:c5:a4:
         46:e6:ab:64:5e:63:54:0c:0e:73:7c:ab:9a:70:d1:43:46:f6:
         65:6b:ec:d3:84:54:0c:42:bb:52:f2:24:25:82:c9:52:b0:12:
         92:91:10:4c:e5:c4:ea:ed:ab:81:a3:a6:e3:f4:63:67:35:52:
         cd:54:1c:f4:44:78:df:f0:75:18:0c:d7:b3:db:c7:7c:3c:75:
         f4:5e:17:3e:78:e7:6c:1c:55:81:a4:c2:ad:e1:0a:b3:07:2c:
         d9:79:ea:8b:1f:e6:91:06:89:b0:3b:91:97:ca:61:ff:08:b9:
         5c:e8:8b:d4:b3:c6:29:18:d9:10:59:fc:50:d9:ee:e1:cd:9c:
         1c:03:e7:2b
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUKXiiqCwWgWHJ2cM4vj9dbTUT6gowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjZhZTUyMDVjNmRmNzk0NDc1N2NiODU2
NmU1MGZkMzIwYWY5MmUyN2IwHhcNMjQwMjE1MTgyMDQ4WhcNMjUwMjEzMTgyNTQ4
WjAzMTEwLwYDVQQDEyg2REU0NkMzNjE5Q0I3Nzc3NDYzNUE5QTlEQUZCRkE0RjNB
NkYyMDZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWBKJwwRliRN
uOYuhaT3ioVlYgxqB6uN3O5dpy/277MqUFL87QNUOX6UYuo6ZphLgAaMg7LXUOCM
3aa71kvO0lxq4fh//3Ng1BY6LkRJFLPB19rxyErvsC0jacFzCbJMovSP3+J2ySvs
o4GgqHBAeEp5zndNjBEZ1agym0Dccq0Ua0duy0dQB4UGt5EsTIXBHaI6lWW/OHGt
f1/xS5g6v5zW8E2nRlruYdfM5PJSqwzdWl39IEYA8kFKB0I/azfy876CBWVzk++c
KWY2N7RhgeFUNEu3NMQAVqkTUaiInRwwFXt7Go9QyMLCt1cLMGItoIILw7ZzgXV/
PQac4kdRTwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFG3kbDYZy3d3RjWpqdr7+k86
byBqMB8GA1UdIwQYMBaAFNMlcKJ4t2YklmPlbTQgch3X0bRtMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkYWUwMmQ5OGUzZTIxLzAv
RDMyNTcwQTI3OEI3NjYyNDk2NjNFNTZEMzQyMDcyMUREN0QxQjQ2RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzQ0ZDU2YzA5LTdjNDktNGY1MS1iYWE4LWYwZjU1ZjlmNGU2Yy9mY2Iy
MGY1OTY2NmFlNTIwNWM2ZGY3OTQ0NzU3Y2I4NTY2ZTUwZmQzMjBhZjkyZTI3Yi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGFl
MDJkOThlM2UyMS8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJgwDQYJKoZIhvcN
AQELBQADggEBAIhA+h3WbS73YE5tJAGfsVYVM3casAOQZQsq7tMJObJvDRCnXF02
1Y4Jckqy2F0Tnu2BEmjKm+DxkyxCiM4qW9Trt1bwFsP8g2knQjzTpo9HT0z3/S5o
9zKNK9b/4auag4Bjk/Ux2c1cdbz6pdi4hsIl0ZnhHL35cg7GSzDFpEbmq2ReY1QM
DnN8q5pw0UNG9mVr7NOEVAxCu1LyJCWCyVKwEpKREEzlxOrtq4GjpuP0Y2c1Us1U
HPREeN/wdRgM17Pbx3w8dfReFz5452wcVYGkwq3hCrMHLNl56osf5pEGibA7kZfK
Yf8IuVzoi9SzxikY2RBZ/FDZ7uHNnBwD5ys=
-----END CERTIFICATE-----