Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f31392d3139203d3e2035363530.roa
File:                     3130372e3139312e3132382e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          VLFvpHn3amRXWiwoD8ytspw02UVj5b9DwEOqaBEACuc=
Subject key identifier:   A2:FC:00:9E:41:39:AB:06:59:E0:8A:E1:A7:4A:E3:38:FA:72:8B:86
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       49CD6BE220729618087BC26063CFEBEA65D27F9A
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f31392d3139203d3e2035363530.roa
Signing time:             Wed 20 Mar 2024 04:12:24 +0000
ROA not before:           Wed 20 Mar 2024 04:07:24 +0000
ROA not after:            Wed 19 Mar 2025 04:12:24 +0000
asID:                     5650
IP address blocks:        107.191.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:6b:e2:20:72:96:18:08:7b:c2:60:63:cf:eb:ea:65:d2:7f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Mar 20 04:07:24 2024 GMT
            Not After : Mar 19 04:12:24 2025 GMT
        Subject: CN=A2FC009E4139AB0659E08AE1A74AE338FA728B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:ad:8e:fe:12:f7:3d:d3:24:fd:15:cf:4c:
                    07:22:d7:36:ff:b9:b3:5d:d2:d5:b6:cf:25:9c:c6:
                    e0:e4:3e:6e:f2:d7:31:27:1c:24:a7:1c:30:27:e4:
                    d0:1c:f5:3f:6c:d2:10:87:f0:e5:46:6c:48:61:65:
                    d7:d4:fa:96:34:87:a3:46:f4:bd:a8:18:9f:56:cc:
                    a8:68:60:2f:a4:ad:2d:4a:66:42:8b:e9:59:a5:33:
                    83:1a:af:b4:1b:17:39:68:2e:9a:40:fa:e6:b7:bd:
                    be:ff:28:28:03:22:d0:fe:59:35:55:02:3f:0d:be:
                    c2:d2:3c:f4:dc:65:87:6b:ae:a3:da:33:e1:46:a6:
                    77:39:64:b7:2f:d4:06:f5:6c:5e:e8:e8:e9:7d:b2:
                    c7:24:ef:9b:ae:3a:71:fc:e7:36:f3:f1:b6:68:c4:
                    4f:21:36:08:51:3b:f3:a8:1d:b0:1d:36:5f:41:be:
                    4a:87:de:3d:2d:21:76:14:8a:40:a9:b1:bc:c9:14:
                    ee:f8:34:2e:d6:8c:45:99:e6:37:ca:4d:ce:fb:c6:
                    36:bb:4d:37:f5:78:05:b6:7a:88:35:29:0f:d3:dd:
                    96:e7:8d:b1:d2:49:93:a6:d0:85:e8:b9:8b:72:f9:
                    1b:19:bc:70:e2:09:af:7e:1b:ae:ae:6a:05:b2:24:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:00:9E:41:39:AB:06:59:E0:8A:E1:A7:4A:E3:38:FA:72:8B:86
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:cd:28:83:31:db:41:eb:ee:62:eb:44:17:23:08:c3:90:
         3b:5e:ee:7e:aa:87:61:d4:aa:4f:7c:18:87:4c:95:f5:fd:75:
         3c:c2:1f:73:85:c2:94:6c:cc:b5:c3:82:2c:4e:10:c5:3e:e3:
         a9:d4:d0:1a:af:2f:15:19:c2:95:f6:eb:c8:c1:2a:af:71:27:
         f5:7f:a3:b3:2f:6f:d5:3b:6b:a3:cf:3b:42:e7:c6:91:be:09:
         5f:db:fe:bb:26:29:67:11:02:d7:0a:a1:08:8a:0a:59:fb:7f:
         42:78:42:80:7a:48:b9:e6:43:67:27:c2:5d:80:41:64:da:a9:
         a0:c2:de:d6:56:86:81:90:bc:ed:d0:2a:a0:dc:6b:1f:af:9a:
         16:07:87:57:7c:a1:f0:e4:f4:47:ba:9e:7f:cc:bc:6a:2a:37:
         2b:40:f9:e2:30:05:6f:cc:e8:b5:bd:0e:86:e1:0d:c6:e1:a8:
         8e:1e:d8:36:97:be:0f:87:4d:f2:15:4f:dc:04:11:a3:fc:6e:
         e6:38:c1:e0:a1:59:17:8e:4a:55:2f:8c:22:3c:f3:45:e3:b8:
         3e:e7:a1:ca:10:95:2e:6d:51:a8:51:40:5c:1a:32:4d:8f:d3:
         11:ba:68:f8:bb:76:ce:5f:dc:fc:c0:ee:6f:4f:1c:c9:60:1e:
         75:a0:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----