Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
File:                     3139302e39322e3136342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          +Kp0H/z0R8xDzOZHBoO08DGlrHSOrDKXLFm6clBvvyY=
Subject key identifier:   72:16:FD:C0:E3:F0:A9:3C:BF:8E:11:0D:22:24:CD:F4:35:92:1B:5B
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       32968D74961234BAB6513949BDC316DF2AF856C4
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     7029
IP address blocks:        190.92.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:8d:74:96:12:34:ba:b6:51:39:49:bd:c3:16:df:2a:f8:56:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=7216FDC0E3F0A93CBF8E110D2224CDF435921B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:e3:6e:ce:4d:b1:34:8b:0f:21:6d:2b:6c:
                    8e:4d:64:58:ae:d5:ce:4d:2c:20:7a:38:47:4d:9a:
                    2c:53:14:37:c9:72:ca:80:4b:c0:42:6d:90:29:db:
                    8e:90:b0:e0:a5:19:57:cb:b3:c7:7e:25:8c:d0:bf:
                    e0:4e:20:81:38:01:7b:65:d2:d8:9e:99:8e:8b:49:
                    2f:53:9d:fd:e5:93:a7:e0:6b:34:44:d6:0f:0a:4c:
                    da:ef:e7:c1:c6:aa:f8:7a:99:f2:65:e9:ce:f7:6b:
                    04:96:58:47:b4:4e:d6:a7:20:be:70:a7:3a:de:7a:
                    e0:08:26:7d:eb:47:83:27:3f:07:5e:5c:ea:5e:57:
                    2f:16:13:f4:26:88:e0:d3:09:f3:81:0d:95:bc:31:
                    fe:80:0c:81:0a:cc:a1:2c:5f:ce:e8:b8:0a:8f:9b:
                    44:45:41:48:e2:05:af:db:9b:77:f9:7c:0b:a7:be:
                    77:0e:33:9a:df:d4:28:e1:c8:c0:81:cf:7f:0c:f9:
                    4c:63:1d:3e:ff:bf:c2:da:8a:3b:c7:38:f6:21:dc:
                    51:d7:03:c8:21:a6:cd:13:a7:1f:55:67:02:fc:6b:
                    3c:73:f6:f4:26:77:6c:fc:eb:92:e1:93:13:d7:f7:
                    9d:15:15:ef:61:43:57:d1:4b:16:8a:9f:ce:c8:cf:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:FD:C0:E3:F0:A9:3C:BF:8E:11:0D:22:24:CD:F4:35:92:1B:5B
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:6e:d2:8e:c7:59:d2:c3:c0:e8:16:46:dd:af:09:d1:09:
         68:41:31:be:c2:07:c1:87:3a:86:7f:16:2d:4a:f6:f8:53:43:
         26:94:fd:40:94:2c:0d:4d:65:4e:07:bc:8f:c1:2b:8d:f0:1d:
         15:a7:43:03:57:e5:4b:8d:91:b3:49:c6:6e:67:46:f5:1c:a2:
         1c:40:d2:65:a1:cd:34:c0:f6:9c:61:99:d3:2e:e9:7a:c5:25:
         ae:eb:12:1a:e5:ee:80:f4:34:07:03:95:ab:d3:47:d2:ac:2b:
         29:41:f1:28:70:09:60:01:13:a1:82:00:4a:1a:28:bc:b6:90:
         12:47:33:98:3e:95:e4:6c:2e:cf:41:e3:30:2c:34:9a:f3:11:
         0f:c4:af:1c:00:ec:92:da:a5:6f:c1:86:21:08:b1:74:ed:7e:
         bd:8e:24:8c:5a:55:49:e6:55:57:36:4f:28:98:99:a6:7e:0f:
         96:eb:ef:ea:2b:85:0b:0c:04:21:cd:7a:82:db:d1:d9:06:f8:
         e1:6b:6b:f3:33:fa:7c:3e:9a:0f:61:db:b6:fc:10:08:1a:f7:
         b5:ce:28:cf:38:ad:a1:05:72:06:e0:d2:bc:17:78:7f:26:e5:
         38:34:45:d9:64:09:b4:cd:67:59:d5:fb:7c:19:72:20:74:f0:
         42:e0:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----