Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa
File:                     3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          5pt6oweueMrk0uvFtD4nf++QEVoezVAIfmlnTOiiFFg=
Subject key identifier:   4E:69:0D:36:57:00:2A:C7:00:C4:BE:1B:90:57:69:07:A3:D0:53:AC
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       700EF097474A0B500B6C19C3940140EF2D8C9AB6
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     211061
IP address blocks:        209.200.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:f0:97:47:4a:0b:50:0b:6c:19:c3:94:01:40:ef:2d:8c:9a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=4E690D3657002AC700C4BE1B90576907A3D053AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:4f:fd:68:aa:34:e2:7b:a7:8f:ac:69:9d:
                    22:63:40:1b:ea:84:1b:bc:de:7a:4d:8c:d1:f2:c9:
                    89:e3:1e:dc:19:2b:85:e2:b3:60:2a:51:a8:89:f9:
                    d0:55:23:9d:1f:68:55:1d:5d:ca:34:66:cd:0c:2f:
                    0b:76:90:5c:c9:3b:c8:37:a7:e0:f1:c4:10:35:93:
                    fc:c7:f8:85:79:94:f5:86:16:69:d4:84:4f:fc:d8:
                    b5:5e:a7:a6:35:97:66:52:d9:e5:9f:30:0c:37:82:
                    ca:85:56:92:97:ef:92:2d:e7:a5:2e:91:b6:b9:cb:
                    ed:88:7c:f3:ca:6b:6c:13:d8:da:27:d3:72:9f:ff:
                    a1:15:61:f5:10:0f:45:e4:20:28:03:38:01:77:b7:
                    90:a4:fe:29:e1:fd:70:84:a7:d2:83:ea:28:cb:0e:
                    00:22:6d:e8:36:5a:f9:66:18:8a:5a:c0:94:50:12:
                    f5:fc:47:66:8e:9b:89:d6:07:a0:1d:f8:df:9b:d8:
                    a3:fb:b7:75:26:f9:da:77:b0:9a:85:a9:3d:24:61:
                    94:4c:b1:f4:30:35:29:49:11:49:2f:12:2b:3c:b3:
                    bd:b0:fe:72:02:af:63:4b:40:b0:68:de:81:38:85:
                    39:ac:ee:8e:d7:9e:47:17:dc:58:6f:4c:c3:38:5a:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:0D:36:57:00:2A:C7:00:C4:BE:1B:90:57:69:07:A3:D0:53:AC
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:a5:d0:6d:8b:1e:c7:7b:54:4a:0c:14:d1:09:f9:99:b8:
         41:ab:23:70:0d:11:bf:83:c7:73:c8:9a:09:c1:44:93:21:6b:
         bc:56:3c:03:d4:6e:d3:e8:75:c2:1c:83:48:3e:2e:1b:0c:86:
         99:46:c7:b4:fa:61:de:c7:51:7a:95:f3:15:b9:47:d7:bc:ff:
         7e:ad:f8:e2:42:68:57:20:fc:19:b4:c0:5b:42:e3:60:ba:7e:
         c5:62:65:b6:4c:18:4c:74:3e:7e:01:a0:cc:9a:9f:46:94:92:
         1e:e0:af:f1:af:5b:01:d6:42:ad:16:92:60:af:ad:c2:c6:01:
         9d:72:07:b4:97:1e:92:e4:d9:13:32:5e:4c:d8:89:6f:07:3b:
         e8:17:19:63:e8:1b:75:12:1e:14:db:24:d4:68:e9:8d:c7:ea:
         13:89:5a:3b:b9:71:4a:ab:d7:2e:75:00:4f:e4:d5:b0:75:88:
         ad:c0:a2:7b:ae:9a:92:8e:c5:c3:15:f3:b6:ab:d9:f6:b2:3e:
         59:79:85:f0:bd:98:9b:d8:31:49:6f:ce:9f:7c:ef:1c:10:7a:
         ae:28:f1:5b:08:49:40:78:a6:29:01:0b:ef:04:d2:de:05:4b:
         b7:eb:49:7b:e5:d9:f6:43:e1:0e:61:e9:36:0e:5c:20:f9:d0:
         9b:60:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----