Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203137323136.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203137323136.roa (raw, json)
Hash identifier:          /tfGjQHaYueF2FxpWzNFPw6MGQPJf2Ip5Hi8v13FqeU=
Subject key identifier:   E5:69:9F:B2:BD:63:AF:0E:F2:2F:2E:2C:66:B7:0B:CB:1B:2C:B7:48
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       60A1930F17059C17DD8F7E501861C4E300868D0A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203137323136.roa
Signing time:             Wed 14 Aug 2024 11:20:03 +0000
ROA not before:           Wed 14 Aug 2024 11:15:03 +0000
ROA not after:            Wed 13 Aug 2025 11:20:03 +0000
asID:                     17216
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a1:93:0f:17:05:9c:17:dd:8f:7e:50:18:61:c4:e3:00:86:8d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 11:15:03 2024 GMT
            Not After : Aug 13 11:20:03 2025 GMT
        Subject: CN=E5699FB2BD63AF0EF22F2E2C66B70BCB1B2CB748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:53:40:cd:4c:8a:8d:1b:36:96:f4:ab:7d:
                    d7:6c:95:14:fc:b8:e0:46:00:79:cb:91:f2:ca:e8:
                    a9:34:b2:dd:13:0d:53:e9:d3:34:5a:b7:cd:ad:f1:
                    9c:d0:ce:8e:4a:ee:24:70:d1:cb:e8:57:21:a5:81:
                    b7:4f:88:b3:55:b6:9d:21:8b:05:6c:68:8a:b9:f9:
                    f9:cd:1f:dd:e6:a1:a3:03:cd:59:9a:1e:aa:8d:44:
                    4b:aa:cc:bb:ef:d5:f1:bc:cf:88:69:eb:03:2d:22:
                    f6:9e:d4:41:de:9c:76:00:91:f0:00:90:ab:de:29:
                    50:fb:54:7a:2d:f8:98:d8:57:88:49:df:2c:e6:28:
                    0a:f1:07:a7:be:01:4a:3a:20:d8:b8:2a:bb:b2:35:
                    37:e0:90:54:a2:04:62:c2:11:7e:2d:37:35:1c:8a:
                    96:3e:1f:61:42:54:94:21:c1:1e:ae:69:83:4e:c7:
                    70:78:ba:68:c7:78:48:b7:fb:37:db:f7:98:fc:1d:
                    49:c8:03:55:9f:32:dd:bd:9f:f7:ff:90:0b:dd:53:
                    f7:ed:5e:4b:ee:97:d7:87:9c:68:29:6c:96:4e:33:
                    93:63:9b:27:85:ae:21:5e:6d:51:f0:f0:5c:e0:97:
                    f1:3a:8b:e2:9e:fa:74:82:9a:d6:f8:56:da:5f:d3:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:69:9F:B2:BD:63:AF:0E:F2:2F:2E:2C:66:B7:0B:CB:1B:2C:B7:48
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:2a:e4:a1:1f:75:02:9f:8d:f3:c0:b0:aa:8e:29:02:a4:
         3c:41:d6:36:71:f6:22:86:59:d5:95:1c:e6:05:d8:59:c5:90:
         9c:ce:8a:bb:59:31:4e:8e:01:26:b3:34:fd:0d:e4:72:81:53:
         ef:a8:16:ea:3a:98:4e:d7:02:bd:8d:67:05:b4:9f:e4:fe:04:
         f4:6f:a1:27:a6:c4:b0:bf:e2:40:99:88:0f:83:04:3b:09:e3:
         5d:66:c8:f2:4f:ea:89:97:81:ab:f2:19:02:f8:fa:28:35:ff:
         b7:14:5f:c7:05:7a:0d:05:28:a9:79:4c:1c:a9:bc:09:9f:e9:
         ec:9c:0e:ab:4a:ca:5a:4a:b2:bb:ec:e0:d8:b3:4e:5d:a2:e0:
         8a:d1:ac:c5:25:f3:1f:b7:1d:b2:c8:e5:ac:ef:8d:b8:6e:e4:
         5c:65:42:fb:fb:20:17:5c:2a:cc:86:f0:2b:f6:f5:6f:16:5d:
         77:18:8b:43:3b:fd:da:62:be:d4:98:d7:93:d5:17:57:bb:2c:
         39:a4:8b:b2:29:9b:35:66:fe:ed:f1:c6:bd:32:e8:2b:59:29:
         73:3c:3b:27:c6:bc:ff:96:a2:18:60:ea:5b:36:4e:66:cc:e7:
         d8:7a:39:03:b5:79:af:e4:2c:24:21:6c:a6:e8:d2:ef:dd:50:
         ac:97:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----