Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa
File:                     3139302e39322e3136302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          pP+yXWsoacewlqojQKLiJpvmnqSuZ8f+76YzWdyXUF0=
Subject key identifier:   F9:13:66:78:91:2D:BE:D1:75:94:C3:D0:29:82:56:BE:C9:10:67:87
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0BAB600C775F054E6EED09C45213F6E39FA0E4F3
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa
Signing time:             Wed 16 Nov 2022 11:29:03 +0000
ROA not before:           Wed 16 Nov 2022 11:24:03 +0000
ROA not after:            Wed 15 Nov 2023 11:29:03 +0000
asID:                     7029
IP address blocks:        190.92.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:60:0c:77:5f:05:4e:6e:ed:09:c4:52:13:f6:e3:9f:a0:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:03 2022 GMT
            Not After : Nov 15 11:29:03 2023 GMT
        Subject: CN=F9136678912DBED17594C3D0298256BEC9106787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:f3:62:dc:3c:55:12:58:3f:b8:e6:88:41:
                    1b:35:df:9c:be:f4:be:ad:4d:64:a9:52:dc:fb:ff:
                    e7:c6:c4:27:b9:a6:6e:0d:83:a1:44:5d:ab:76:cf:
                    9f:1a:00:a4:18:18:18:70:ae:0a:06:01:64:92:e6:
                    56:7b:f2:78:22:09:e7:5b:cc:8c:40:7e:e6:ed:04:
                    b8:8c:02:07:15:52:48:b9:e2:d5:0e:97:44:ca:21:
                    5f:06:d4:fa:b0:7d:64:46:f6:e4:47:d2:10:26:7b:
                    71:64:1b:53:6f:8c:47:d3:d1:78:c9:cf:21:36:30:
                    6d:dd:4a:e6:68:8a:ef:b5:ed:0b:b2:df:9d:51:fa:
                    4e:2a:24:05:8a:6b:dc:a4:b1:96:39:07:3b:a2:bb:
                    1e:a5:35:b1:83:76:dd:1e:c8:fd:10:6a:f6:df:1c:
                    ba:d3:23:32:a5:9a:4c:a4:37:8c:d8:f7:35:92:0c:
                    e6:6a:46:47:e4:58:06:d8:17:12:bd:9a:04:a5:21:
                    d2:57:4c:02:dd:b6:2c:59:3c:d4:b0:7c:d1:6b:13:
                    cd:1d:3a:3a:8e:9a:a2:fc:80:5a:d8:8f:46:89:88:
                    8c:49:20:58:69:71:c7:f2:21:71:25:3b:9a:ef:91:
                    ab:6b:48:44:be:e6:11:5b:a5:35:7d:8e:20:92:e4:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:13:66:78:91:2D:BE:D1:75:94:C3:D0:29:82:56:BE:C9:10:67:87
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136302e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:91:bf:6c:0b:50:34:df:57:3e:17:f8:d5:b5:d9:db:3d:
         91:0c:a0:6b:76:f2:fd:f2:54:b8:de:67:44:63:87:65:48:d1:
         f9:d1:36:b5:70:f3:0f:1b:f4:02:fc:07:dc:9e:0d:a4:ce:40:
         c8:5e:42:39:1a:17:6d:8e:9d:24:1e:7c:75:71:00:80:c9:b0:
         c1:e0:35:11:49:c6:61:a4:6d:a1:30:1e:d6:31:21:bf:8a:ff:
         27:7c:53:a1:84:f4:bb:f9:70:54:df:c1:d3:44:e9:4e:4c:0a:
         55:d1:99:3d:de:4c:d6:bf:cb:d4:21:54:e8:f8:7e:2f:0b:25:
         ba:2c:76:2b:80:23:5f:ab:c4:0b:13:90:d1:73:96:86:22:7b:
         42:d2:66:72:f6:3b:e1:d0:25:00:91:7d:3b:41:8c:0e:5e:f8:
         11:9b:e6:03:96:07:55:94:09:70:87:b6:3c:08:f5:e1:d9:ab:
         8e:4a:f1:e7:21:89:6e:a4:01:8d:6b:58:b4:67:55:d9:4a:f8:
         af:21:17:86:51:0d:68:0b:60:98:b8:e4:ab:80:17:ad:c0:d4:
         5a:df:39:6d:17:78:07:c9:ff:f6:1e:ea:64:74:79:81:83:74:
         25:15:7f:1c:a7:8c:f9:f5:b0:00:4c:07:1d:9c:23:d5:94:d3:
         23:32:20:e6
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUC6tgDHdfBU5u7QnEUhP245+g5PMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDAzWhcNMjMxMTE1MTEyOTAz
WjAzMTEwLwYDVQQDEyhGOTEzNjY3ODkxMkRCRUQxNzU5NEMzRDAyOTgyNTZCRUM5
MTA2Nzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+3zYtw8VRJY
P7jmiEEbNd+cvvS+rU1kqVLc+//nxsQnuaZuDYOhRF2rds+fGgCkGBgYcK4KBgFk
kuZWe/J4IgnnW8yMQH7m7QS4jAIHFVJIueLVDpdEyiFfBtT6sH1kRvbkR9IQJntx
ZBtTb4xH09F4yc8hNjBt3UrmaIrvte0Lst+dUfpOKiQFimvcpLGWOQc7orsepTWx
g3bdHsj9EGr23xy60yMypZpMpDeM2Pc1kgzmakZH5FgG2BcSvZoEpSHSV0wC3bYs
WTzUsHzRaxPNHTo6jpqi/IBa2I9GiYiMSSBYaXHH8iFxJTua75Gra0hEvuYRW6U1
fY4gkuTLMwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPkTZniRLb7RdZTD0CmCVr7J
EGeHMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMxMzkzMDJlMzkzMjJlMzEzNjMwMmUzMDJmMzIzMjJkMzIz
NDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+XKAwDQYJKoZIhvcNAQELBQAD
ggEBAAjgkb9sC1A031c+F/jVtdnbPZEMoGt28v3yVLjeZ0Rjh2VI0fnRNrVw8w8b
9AL8B9yeDaTOQMheQjkaF22OnSQefHVxAIDJsMHgNRFJxmGkbaEwHtYxIb+K/yd8
U6GE9Lv5cFTfwdNE6U5MClXRmT3eTNa/y9QhVOj4fi8LJbosdiuAI1+rxAsTkNFz
loYie0LSZnL2O+HQJQCRfTtBjA5e+BGb5gOWB1WUCXCHtjwI9eHZq45K8echiW6k
AY1rWLRnVdlK+K8hF4ZRDWgLYJi45KuAF63A1FrfOW0XeAfJ//Ye6mR0eYGDdCUV
fxynjPn1sABMBx2cI9WU0yMyIOY=
-----END CERTIFICATE-----