Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa
File:                     3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa (raw, json)
Hash identifier:          AMCrmZixo+WgeftRtRvvLkGIRi6T3TC0FmntsI7nwOo=
Subject key identifier:   E8:13:89:F7:86:54:D6:FA:2D:F2:D8:C4:30:EA:0A:24:36:5E:D3:FA
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       5C7D5A5E761C96923C9CB6E2218C503F401E575E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa
Signing time:             Mon 18 Jul 2022 14:09:57 +0000
ROA not before:           Mon 18 Jul 2022 14:04:57 +0000
ROA not after:            Mon 17 Jul 2023 14:09:57 +0000
asID:                     27630
IP address blocks:        209.200.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:5a:5e:76:1c:96:92:3c:9c:b6:e2:21:8c:50:3f:40:1e:57:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:57 2022 GMT
            Not After : Jul 17 14:09:57 2023 GMT
        Subject: CN=E81389F78654D6FA2DF2D8C430EA0A24365ED3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:0b:41:b7:ea:ed:3c:1d:9c:b4:8a:06:02:
                    ab:ad:e0:f3:b4:5d:9f:4e:3c:9d:2a:85:ba:70:9b:
                    37:5c:ab:32:58:38:ce:47:6f:61:3a:90:70:8f:3f:
                    19:76:de:1f:c3:06:d5:bd:da:d2:28:b9:d7:21:ee:
                    5d:ed:ff:49:de:51:51:9b:87:f6:3e:59:6d:1f:95:
                    9c:29:eb:12:ee:fc:0b:39:3f:69:d7:ea:38:24:f8:
                    ba:c5:15:33:9c:04:00:d8:db:7e:10:6c:2c:84:39:
                    ab:22:3d:0c:28:e3:75:b2:b0:30:97:2d:c1:85:fc:
                    02:5e:80:d8:cf:5d:e0:48:de:af:eb:17:13:94:96:
                    de:3e:45:cf:35:ff:11:28:a7:ef:f8:49:44:3a:9c:
                    46:57:4b:24:eb:a6:3f:a9:a5:ab:a2:3b:37:af:14:
                    67:71:23:c6:9c:63:4d:3a:ca:89:9e:48:4e:92:c8:
                    9f:f0:83:0a:e3:e9:2f:7d:9b:a5:97:c1:ca:cb:f3:
                    73:a5:58:c8:2b:49:03:b7:5d:1c:1b:60:bd:28:c7:
                    d3:9f:21:23:31:bd:7f:51:67:a7:fc:38:b9:76:22:
                    99:b5:df:83:a8:3f:ce:eb:b5:7c:eb:ae:9b:75:8b:
                    5a:eb:fd:e1:36:ac:16:81:94:d8:5c:ca:d8:de:65:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:89:F7:86:54:D6:FA:2D:F2:D8:C4:30:EA:0A:24:36:5E:D3:FA
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:58:51:0a:9d:be:64:48:4d:1e:51:f1:7d:28:9c:82:6a:
         04:d6:ac:3a:0c:41:37:29:9e:7a:01:9e:fa:d4:1a:1e:bb:b2:
         3b:6d:31:d3:4a:8e:b0:ad:68:14:93:ca:5f:72:64:ab:f0:4e:
         f8:1f:e5:70:0c:32:3c:49:40:e6:ac:ef:92:46:3d:23:ed:aa:
         c0:fb:f2:df:59:58:47:98:3b:b1:c4:8e:07:e8:5c:6b:66:20:
         b0:37:3c:2e:ec:ed:af:6f:02:6f:b5:d6:3e:ca:b5:bc:26:d5:
         04:d4:aa:fb:9e:e1:19:33:46:9a:8d:7d:81:7e:17:85:56:f8:
         18:54:9f:6e:c5:03:3a:e4:b1:1c:c0:ab:fc:33:17:be:20:94:
         41:36:cd:33:b2:bd:46:99:05:96:e5:cb:01:ab:76:08:df:9b:
         ab:e7:cf:a9:d3:aa:f4:f8:c9:f1:23:3d:ce:e4:4c:11:ad:d1:
         57:88:c9:56:5a:c6:71:24:24:f2:b8:41:d1:78:c6:75:b9:45:
         3a:01:52:27:e1:c6:76:a3:f1:44:04:9a:48:9c:a4:f4:80:25:
         ce:aa:9d:d4:a4:a5:28:ab:b8:86:b6:26:a4:46:c1:55:99:64:
         0f:ba:0c:c2:b2:b3:fb:9d:0b:1e:3e:6f:14:78:12:2c:14:89:
         be:d5:80:78
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUXH1aXnYclpI8nLbiIYxQP0AeV14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNDU3WhcNMjMwNzE3MTQwOTU3
WjAzMTEwLwYDVQQDEyhFODEzODlGNzg2NTRENkZBMkRGMkQ4QzQzMEVBMEEyNDM2
NUVEM0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnALQbfq7Twd
nLSKBgKrreDztF2fTjydKoW6cJs3XKsyWDjOR29hOpBwjz8Zdt4fwwbVvdrSKLnX
Ie5d7f9J3lFRm4f2PlltH5WcKesS7vwLOT9p1+o4JPi6xRUznAQA2Nt+EGwshDmr
Ij0MKON1srAwly3BhfwCXoDYz13gSN6v6xcTlJbePkXPNf8RKKfv+ElEOpxGV0sk
66Y/qaWrojs3rxRncSPGnGNNOsqJnkhOksif8IMK4+kvfZull8HKy/NzpVjIK0kD
t10cG2C9KMfTnyEjMb1/UWen/Di5diKZtd+DqD/O67V8666bdYta6/3hNqwWgZTY
XMrY3mW8qwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOgTifeGVNb6LfLYxDDqCiQ2
XtP6MB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM3MzYzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjiMA0GCSqGSIb3DQEB
CwUAA4IBAQABf1hRCp2+ZEhNHlHxfSicgmoE1qw6DEE3KZ56AZ761Boeu7I7bTHT
So6wrWgUk8pfcmSr8E74H+VwDDI8SUDmrO+SRj0j7arA+/LfWVhHmDuxxI4H6Fxr
ZiCwNzwu7O2vbwJvtdY+yrW8JtUE1Kr7nuEZM0aajX2BfheFVvgYVJ9uxQM65LEc
wKv8Mxe+IJRBNs0zsr1GmQWW5csBq3YI35ur58+p06r0+MnxIz3O5EwRrdFXiMlW
WsZxJCTyuEHReMZ1uUU6AVIn4cZ2o/FEBJpInKT0gCXOqp3UpKUoq7iGtiakRsFV
mWQPugzCsrP7nQsePm8UeBIsFIm+1YB4
-----END CERTIFICATE-----