Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
File:                     3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          UeYL8OpGe7B/cmC0SOHnER1UBqglIU+7qRY2YkfWqas=
Subject key identifier:   1B:6F:85:F6:05:35:3F:E7:76:10:EE:36:1C:17:EA:76:9B:B2:64:25
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4BD5DF2DD74AFA3E4DEA1FD49547753630C5DAE0
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     1239
IP address blocks:        192.228.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:df:2d:d7:4a:fa:3e:4d:ea:1f:d4:95:47:75:36:30:c5:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=1B6F85F605353FE77610EE361C17EA769BB26425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:a2:09:68:8d:a6:17:e4:e0:73:30:ee:bc:
                    e1:07:6a:0b:7b:00:d7:65:f2:bf:36:23:ce:97:34:
                    a7:a3:f7:89:e7:fb:e6:c5:28:7a:54:9c:13:23:49:
                    b5:e0:3c:09:a4:cb:13:1d:9e:40:b7:f7:6f:78:39:
                    af:0a:7b:f7:3c:e6:fb:b9:39:29:a5:da:d5:2f:89:
                    b8:31:98:d9:e4:64:13:80:91:05:da:05:c7:c3:53:
                    1d:a7:8a:77:b4:40:f6:24:1b:ab:76:50:ab:02:06:
                    6a:78:20:f9:ef:95:de:00:fb:b8:ee:a0:c2:2d:2a:
                    71:21:7b:c5:be:63:0c:35:cf:9b:23:79:e7:f9:8c:
                    cd:fe:15:48:58:b2:6d:d7:2b:79:42:a4:5c:55:67:
                    3e:0a:3e:94:86:91:af:d9:e0:1a:4f:cd:15:50:c6:
                    be:da:f9:aa:b8:c3:ab:7d:11:d6:4a:ef:4b:24:8f:
                    4e:97:fa:c5:8d:7f:c4:a3:b1:47:71:65:5c:0f:5d:
                    d9:2e:00:d5:ac:64:0d:7c:5d:cb:d3:20:db:a5:41:
                    65:94:98:ae:eb:39:86:c3:a0:f7:0b:2a:55:4c:94:
                    b7:40:8d:c3:de:fc:25:ef:57:ca:38:82:a4:ca:29:
                    a3:89:fa:2d:12:8a:f8:88:e8:dc:d3:9b:f5:93:2e:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:85:F6:05:35:3F:E7:76:10:EE:36:1C:17:EA:76:9B:B2:64:25
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:45:cc:ce:0e:12:59:ed:58:c0:64:f5:c2:4a:63:d3:15:
         48:dc:b6:c1:e7:86:3f:1c:0d:0d:cc:9b:ea:0c:fc:74:7f:87:
         30:14:77:7a:6d:54:06:18:0b:d3:bf:8b:1f:4f:41:9e:62:7a:
         08:1d:e3:77:74:18:c3:0a:f4:02:bc:28:b9:97:1b:43:26:06:
         0f:88:ce:d7:d8:bc:1d:8f:9f:f1:81:bf:e7:44:05:2b:e5:47:
         04:35:ad:97:62:37:56:03:47:1f:b9:3a:0e:43:b9:27:8b:cb:
         5a:30:a8:aa:89:0d:41:62:45:80:0f:64:93:9e:fc:9c:ba:75:
         eb:69:21:bc:77:9e:2f:0d:ff:03:05:22:b1:40:04:43:db:d8:
         1d:f4:29:19:e0:60:6f:de:66:e7:c0:70:de:0d:15:fb:7a:fd:
         b4:c3:1b:67:f2:f3:ff:68:f0:58:f4:11:de:d8:87:4f:f7:e5:
         8b:66:7a:3c:7f:a9:b0:52:71:c8:8e:c1:26:35:95:65:a0:11:
         cc:86:8b:3d:af:71:c1:2c:fc:ec:3a:dc:58:e5:68:24:60:eb:
         8e:80:bf:26:fa:e9:9f:7b:89:e4:45:70:3e:cc:df:42:83:ee:
         58:4f:36:67:e0:3a:1f:c0:60:d0:40:c7:ee:43:9f:d2:65:bf:
         04:fb:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----