Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232342e302f32342d3234203d3e20323039333731.roa
File:                     3230392e3230302e3232342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          1Svc7HMWUdF1l0QqzxILFhCYNJ4Vo5kQ+0dMKaokZs8=
Subject key identifier:   F6:7F:55:82:11:F8:74:06:58:C3:0C:39:04:25:4C:E5:F1:43:E4:1A
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1CA2BC72D6B00B32E76D8B24AA3E269C4D6D00D4
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232342e302f32342d3234203d3e20323039333731.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     209371
IP address blocks:        209.200.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:bc:72:d6:b0:0b:32:e7:6d:8b:24:aa:3e:26:9c:4d:6d:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=F67F558211F8740658C30C3904254CE5F143E41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:b0:4d:9a:93:84:2f:fd:98:9a:22:57:a5:
                    db:0c:47:32:bf:48:c4:c2:2b:a3:9d:a8:3a:be:2c:
                    fb:f5:03:d5:59:a5:a1:d2:b6:3e:e7:44:78:03:80:
                    3a:91:ea:38:a8:5d:c8:26:40:61:e6:b2:86:37:ec:
                    c2:ed:34:68:60:89:7a:95:51:58:8f:88:31:4d:3c:
                    a0:1f:4d:89:c6:2b:f2:ed:bd:97:56:b8:f4:4b:13:
                    93:a7:66:ca:71:60:e2:46:a6:25:df:92:9c:a8:bd:
                    46:d0:e5:e2:ea:c3:c6:3b:5c:9b:b8:90:4d:03:40:
                    bb:3a:d3:28:14:09:5b:4f:4b:1b:f1:cf:5f:67:47:
                    e9:ae:d1:81:64:47:2b:eb:9d:fd:6d:91:a6:55:46:
                    ff:c0:f7:c3:73:74:ef:24:57:1f:c7:0b:8e:19:f5:
                    e8:08:17:59:10:a3:13:fa:60:bd:84:04:b6:6b:5a:
                    86:91:e3:e7:fe:1b:53:79:6e:d7:99:94:35:2b:bd:
                    b3:0c:e4:20:4a:16:bd:51:45:79:3d:38:29:f4:e7:
                    21:c8:47:f2:77:38:a9:11:df:cf:e4:37:0e:d3:8c:
                    e3:e6:f1:0d:13:c8:80:c2:d6:53:99:4d:32:cc:ee:
                    60:00:ff:b9:80:af:dc:60:9c:47:46:d4:16:1e:81:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7F:55:82:11:F8:74:06:58:C3:0C:39:04:25:4C:E5:F1:43:E4:1A
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:c2:5d:ae:8a:64:66:1c:b1:08:00:47:24:c0:3d:d3:b3:
         11:87:df:16:67:6e:91:e4:ef:d1:af:58:b9:7f:af:d8:0a:fb:
         1f:85:42:5b:4d:8a:4f:0e:62:96:e4:d4:91:e4:de:16:a8:bb:
         d1:59:6b:2d:a6:7f:60:9b:9f:0d:3c:2f:c6:59:09:b2:da:d2:
         6b:31:c1:f3:86:b6:28:e1:62:b9:15:db:ed:aa:c1:97:fd:d4:
         3e:41:5c:55:5a:51:c7:68:7e:86:97:f7:ea:6b:77:dd:2f:8a:
         20:0c:b4:03:b0:37:62:49:69:e5:10:2e:4b:9d:aa:f0:c2:b1:
         a1:5b:21:67:c7:1d:95:08:c2:e1:63:19:32:90:c6:46:46:2e:
         11:93:27:ac:9a:e9:da:2e:50:7d:c5:ba:bb:1b:02:49:e1:4e:
         8e:58:b1:a0:06:a4:dd:b4:33:97:5e:74:a6:ff:53:36:c0:5d:
         ab:4d:f8:a9:9b:7e:c2:6e:ad:fb:b9:4f:c2:a6:9b:87:da:cc:
         d3:c6:5a:37:63:36:e4:56:0c:1e:85:c7:fd:45:77:b0:9d:19:
         1d:b8:dd:23:b6:23:ca:d7:2f:64:b3:6e:59:60:39:e6:e0:e3:
         67:4d:eb:45:b2:27:1d:f6:17:25:68:5b:88:ab:4e:0a:e0:56:
         db:63:7e:41
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUHKK8ctawCzLnbYskqj4mnE1tANQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA0WhcNMjMxMTE1MTEyOTA0
WjAzMTEwLwYDVQQDEyhGNjdGNTU4MjExRjg3NDA2NThDMzBDMzkwNDI1NENFNUYx
NDNFNDFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JSwTZqThC/9
mJoiV6XbDEcyv0jEwiujnag6viz79QPVWaWh0rY+50R4A4A6keo4qF3IJkBh5rKG
N+zC7TRoYIl6lVFYj4gxTTygH02Jxivy7b2XVrj0SxOTp2bKcWDiRqYl35KcqL1G
0OXi6sPGO1ybuJBNA0C7OtMoFAlbT0sb8c9fZ0fprtGBZEcr6539bZGmVUb/wPfD
c3TvJFcfxwuOGfXoCBdZEKMT+mC9hAS2a1qGkePn/htTeW7XmZQ1K72zDOQgSha9
UUV5PTgp9OchyEfydzipEd/P5DcO04zj5vENE8iAwtZTmU0yzO5gAP+5gK/cYJxH
RtQWHoH/IQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPZ/VYIR+HQGWMMMOQQlTOXx
Q+QaMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMyMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRyOAwDQYJKoZIhvcN
AQELBQADggEBACYPwl2uimRmHLEIAEckwD3TsxGH3xZnbpHk79GvWLl/r9gK+x+F
QltNik8OYpbk1JHk3haou9FZay2mf2Cbnw08L8ZZCbLa0msxwfOGtijhYrkV2+2q
wZf91D5BXFVaUcdofoaX9+prd90viiAMtAOwN2JJaeUQLkudqvDCsaFbIWfHHZUI
wuFjGTKQxkZGLhGTJ6ya6douUH3FursbAknhTo5YsaAGpN20M5dedKb/UzbAXatN
+KmbfsJurfu5T8Kmm4fazNPGWjdjNuRWDB6Fx/1Fd7CdGR243SO2I8rXL2Szbllg
Oebg42dN60WyJx32FyVoW4irTgrgVttjfkE=
-----END CERTIFICATE-----