Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
File:                     3136322e3231332e302e302f32322d3234203d3e2036343631.roa (raw, json)
Hash identifier:          OZLkSp5wQ+/9nzwmDXXII8SHGIMPrY4qXyF8ke4g+3o=
Subject key identifier:   5F:43:B4:28:FB:4F:B7:79:13:74:05:E0:C2:50:DE:D7:B6:F6:FC:A0
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       2FC7C18477A015EE35F8017D4ED47B580B6BB665
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     6461
IP address blocks:        162.213.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:c1:84:77:a0:15:ee:35:f8:01:7d:4e:d4:7b:58:0b:6b:b6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=5F43B428FB4FB779137405E0C250DED7B6F6FCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:19:a5:37:b4:d7:10:52:93:2d:5a:e8:58:
                    a1:64:91:25:d5:9e:5f:7e:49:90:5f:12:c3:4b:f5:
                    04:92:a4:dc:04:3e:58:6a:8d:3a:0a:83:39:a8:1f:
                    65:bd:dd:c5:0a:fd:8c:5d:56:ba:a4:43:01:a7:1b:
                    eb:71:8d:71:8e:41:07:1b:ce:af:83:36:87:4c:5c:
                    60:3e:4f:48:d2:f6:e1:fc:d4:f9:c4:0a:e4:42:ba:
                    e6:d7:6d:8c:c1:27:4b:9b:b6:ad:df:ed:d2:3f:aa:
                    83:23:8e:b5:43:03:88:83:b1:b3:c0:40:fe:9f:e3:
                    09:41:67:30:85:bb:a5:c3:bf:d0:ed:f1:a2:d5:c4:
                    e7:bd:d4:72:a1:7a:d4:73:fc:0f:7b:02:01:ca:f7:
                    c6:45:19:e2:5a:14:0c:01:a4:5b:e9:71:90:4a:61:
                    e8:cd:5c:67:43:9f:87:7c:cd:8e:ec:78:a3:62:05:
                    60:aa:77:7a:56:25:e0:3a:a5:18:13:19:30:32:24:
                    d5:b8:bd:84:97:02:09:6d:a7:5a:cb:29:3a:7b:93:
                    2d:56:ae:da:5a:f1:a0:65:88:d4:40:aa:8b:b8:fc:
                    68:de:c1:fd:3e:97:39:13:47:3f:d1:b3:b0:f2:48:
                    3d:8f:a5:54:fa:8f:0c:83:1f:a8:7a:95:f9:88:12:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:B4:28:FB:4F:B7:79:13:74:05:E0:C2:50:DE:D7:B6:F6:FC:A0
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:bf:b5:29:85:bd:fb:45:d8:04:39:97:83:40:c0:90:35:15:
         18:00:e3:d0:62:a0:4e:bd:30:fa:79:07:c1:7b:70:40:7c:5b:
         e0:f8:bd:06:8c:81:eb:14:d7:e9:fd:45:72:b1:66:0f:f8:08:
         21:3d:ab:16:e7:9d:81:e7:9a:b4:ae:73:e7:e3:3e:68:51:a7:
         47:50:b1:1e:93:df:0c:a9:6a:8d:18:a3:ec:aa:d0:3c:34:34:
         4a:4d:33:d3:4e:60:53:77:df:be:86:1e:36:59:c5:c7:60:a5:
         d4:c8:df:c6:c7:d5:b8:66:e3:cd:f3:94:b7:f1:79:44:b8:f7:
         e1:b5:04:67:f3:84:c3:72:d8:0f:72:20:20:42:7f:85:d9:f8:
         36:54:fd:c7:1a:28:88:70:8f:48:86:18:0b:da:5c:4a:7e:1d:
         7c:01:c3:ef:53:94:54:b4:43:c8:d6:95:52:7d:df:c9:96:1c:
         3b:21:ec:54:9f:bb:66:8f:3d:ed:3c:95:4d:da:37:5d:0e:87:
         1f:11:33:d5:5b:be:62:b7:5e:1b:12:b3:00:22:e9:29:f7:f2:
         4c:5e:ed:7d:ca:62:f4:50:59:26:b4:4b:02:4b:28:af:53:1e:
         d1:cc:24:b6:0a:f6:93:5a:33:9a:a1:07:34:04:f9:ac:24:50:
         69:23:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----