Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa
File:                     3230382e37362e34302e302f32322d3234203d3e2036343631.roa (raw, json)
Hash identifier:          kI8qHMpZJjrCv0SZl4vUAREu8kZegB0svfLEO5+v0UM=
Subject key identifier:   31:BD:08:3E:EE:5C:BD:A3:B9:3E:D5:BA:7D:5C:8E:E0:59:2E:55:79
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3FC106022B41F4EDEA45DE54389017266E5C039B
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     6461
IP address blocks:        208.76.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c1:06:02:2b:41:f4:ed:ea:45:de:54:38:90:17:26:6e:5c:03:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=31BD083EEE5CBDA3B93ED5BA7D5C8EE0592E5579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:ba:72:6d:0a:16:ad:4d:a4:6b:5f:0f:cb:
                    53:f2:58:85:fb:1b:56:04:24:5f:77:04:28:6d:04:
                    65:08:60:23:79:17:aa:93:4b:b9:a5:52:0e:2f:ba:
                    4a:77:64:10:09:26:6e:51:7b:72:23:b1:4e:ce:f4:
                    d3:01:ab:1b:60:3e:68:bb:cb:e4:d5:67:ad:b2:6b:
                    9b:cc:13:22:f4:56:a0:46:e8:60:25:f5:02:b1:18:
                    7f:a3:ab:3c:33:40:b6:27:81:39:14:0d:58:ed:a9:
                    2a:cc:d6:0e:7b:01:f7:50:a2:58:7c:19:a2:53:53:
                    40:98:c3:0d:70:34:cd:43:76:48:60:f9:44:7e:33:
                    bd:41:0f:73:c0:b0:21:6e:8b:d0:3d:f6:15:63:ba:
                    00:ee:47:2a:e8:7f:3d:2a:9e:f9:52:a9:c5:36:3c:
                    d3:17:11:7d:85:9b:f0:78:ab:b4:70:75:69:2f:0f:
                    80:ea:0d:c7:ab:c2:93:61:6b:43:47:41:ee:32:b1:
                    c6:8f:65:c2:53:fa:ba:26:82:32:23:14:cf:80:ab:
                    1d:bc:4b:1e:68:7f:a6:93:e7:58:97:ec:cf:f7:68:
                    f4:2d:06:19:bc:aa:cb:20:7a:c5:a8:aa:7f:8f:33:
                    3d:82:14:78:6a:f5:b7:85:8d:2c:4b:cc:61:a2:00:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BD:08:3E:EE:5C:BD:A3:B9:3E:D5:BA:7D:5C:8E:E0:59:2E:55:79
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:08:f2:50:90:8e:02:91:43:78:01:fa:ba:d2:fa:6d:47:
         91:04:96:6e:e8:87:b8:35:10:f3:81:b8:cb:ab:1c:56:a2:93:
         d8:87:71:1a:f0:59:f7:fa:98:2d:10:35:48:d4:4b:84:c7:d3:
         d1:a1:54:a6:f7:a8:2a:3f:c1:9a:1f:e0:8c:d8:e3:e4:bf:d5:
         52:c6:d5:13:a2:5f:ff:e2:73:31:71:b5:36:83:f9:89:da:7f:
         90:e8:b0:b5:26:9c:cb:8d:1c:cf:1f:b3:34:d3:03:22:78:ce:
         92:5c:46:11:23:53:48:a8:65:46:7d:78:4f:99:63:7b:7b:69:
         26:56:f1:cc:9c:9e:32:ab:dc:19:19:60:14:e1:4c:27:ec:1c:
         b4:d3:a8:bb:2b:a6:b7:06:3a:45:e0:ae:65:f5:ae:b1:db:55:
         fa:5c:06:8f:5c:0a:ad:96:68:bc:1d:8a:6a:56:a9:d8:b1:71:
         b9:c0:86:39:40:f3:83:9a:c5:a9:9c:fc:26:95:4c:73:fe:93:
         9b:c8:94:67:79:51:d3:27:9c:79:09:42:21:7f:e0:b9:65:e0:
         1a:2a:1a:6c:3f:b6:ed:bc:2d:fc:09:2e:51:fe:51:ea:7d:b5:
         ff:6d:48:3f:a5:1f:b6:35:46:e6:f5:67:a0:8f:76:3f:5a:50:
         c2:b6:02:80
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUP8EGAitB9O3qRd5UOJAXJm5cA5swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA2WhcNMjMxMTE1MTEyOTA2
WjAzMTEwLwYDVQQDEygzMUJEMDgzRUVFNUNCREEzQjkzRUQ1QkE3RDVDOEVFMDU5
MkU1NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgG6cm0KFq1N
pGtfD8tT8liF+xtWBCRfdwQobQRlCGAjeReqk0u5pVIOL7pKd2QQCSZuUXtyI7FO
zvTTAasbYD5ou8vk1WetsmubzBMi9FagRuhgJfUCsRh/o6s8M0C2J4E5FA1Y7akq
zNYOewH3UKJYfBmiU1NAmMMNcDTNQ3ZIYPlEfjO9QQ9zwLAhbovQPfYVY7oA7kcq
6H89Kp75UqnFNjzTFxF9hZvweKu0cHVpLw+A6g3Hq8KTYWtDR0HuMrHGj2XCU/q6
JoIyIxTPgKsdvEseaH+mk+dYl+zP92j0LQYZvKrLIHrFqKp/jzM9ghR4avW3hY0s
S8xhogAMoQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDG9CD7uXL2juT7Vun1cjuBZ
LlV5MB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzAvMzIzMDM4MmUzNzM2MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIw
M2QzZTIwMzYzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALQTCgwDQYJKoZIhvcNAQELBQADggEB
AGgfCPJQkI4CkUN4Afq60vptR5EElm7oh7g1EPOBuMurHFaik9iHcRrwWff6mC0Q
NUjUS4TH09GhVKb3qCo/wZof4IzY4+S/1VLG1ROiX//iczFxtTaD+Ynaf5DosLUm
nMuNHM8fszTTAyJ4zpJcRhEjU0ioZUZ9eE+ZY3t7aSZW8cycnjKr3BkZYBThTCfs
HLTTqLsrprcGOkXgrmX1rrHbVfpcBo9cCq2WaLwdimpWqdixcbnAhjlA84Oaxamc
/CaVTHP+k5vIlGd5UdMnnHkJQiF/4Lll4BoqGmw/tu28LfwJLlH+Uep9tf9tSD+l
H7Y1Rub1Z6CPdj9aUMK2AoA=
-----END CERTIFICATE-----