Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa
File:                     3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          GaB8Hsw7b4yLJC/Gg18MoekcCf8M6AiHbhPU+DLE0pI=
Subject key identifier:   9A:71:E9:E0:83:05:E7:BB:C6:11:1C:AB:6E:AC:73:05:90:2A:CB:DF
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       09CB52B092CC0F36B59A499830777D1272FCAEDF
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa
Signing time:             Mon 18 Jul 2022 14:09:51 +0000
ROA not before:           Mon 18 Jul 2022 14:04:51 +0000
ROA not after:            Mon 17 Jul 2023 14:09:51 +0000
asID:                     29802
IP address blocks:        209.200.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cb:52:b0:92:cc:0f:36:b5:9a:49:98:30:77:7d:12:72:fc:ae:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:51 2022 GMT
            Not After : Jul 17 14:09:51 2023 GMT
        Subject: CN=9A71E9E08305E7BBC6111CAB6EAC7305902ACBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:fe:0d:e6:8f:81:d1:06:03:a4:5f:c1:a4:
                    36:12:07:ec:9a:73:63:21:da:dd:de:d3:21:20:10:
                    88:77:d7:82:97:90:3b:fd:eb:8d:eb:36:be:c1:b5:
                    19:d0:6f:11:94:33:59:2e:41:5a:cc:96:16:e2:5d:
                    83:24:39:4b:4b:bc:95:fe:fb:33:e6:06:fd:88:b2:
                    bf:6b:f1:d6:50:69:e9:35:fb:09:5a:a1:2f:11:82:
                    7b:cb:c3:7d:9d:5f:a6:93:22:2a:91:47:a0:0a:49:
                    e8:94:b2:ed:d6:90:62:d4:2a:2c:f0:90:b3:16:af:
                    ca:6f:f1:a1:4e:75:e6:1d:5f:be:00:2d:f0:ad:99:
                    a1:7d:89:e5:f8:c0:6f:26:9a:c5:96:ed:30:81:46:
                    2e:7c:20:4f:2f:e8:bf:60:70:09:32:3c:6f:81:a0:
                    21:eb:12:84:4b:6a:49:46:65:41:fc:7f:26:92:0e:
                    3e:a3:b4:e8:cb:23:f8:b9:c6:2c:49:44:ef:7b:91:
                    f3:95:a7:09:d1:5c:e4:36:9a:dc:45:d2:e0:d8:5d:
                    ba:92:69:cb:b0:e4:d2:0b:eb:ea:cd:10:ef:a4:7a:
                    a0:1f:60:d4:0a:07:c8:b2:23:a2:e8:2e:7a:dd:01:
                    80:a2:86:3a:03:ca:f4:36:27:5c:3a:50:73:7f:0a:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:71:E9:E0:83:05:E7:BB:C6:11:1C:AB:6E:AC:73:05:90:2A:CB:DF
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:74:44:90:d7:41:68:a0:eb:e1:07:5e:23:89:36:9c:82:
         cf:fe:c5:bb:e4:59:97:fc:1c:ac:6d:f1:98:f7:b1:19:a2:ce:
         3e:0f:ce:4e:ed:94:eb:de:2c:4c:4e:1a:cd:11:d0:01:fd:88:
         b5:00:9a:89:dc:11:5b:45:d7:f8:8e:d6:2d:a1:d1:2d:dd:22:
         d1:36:52:1c:d7:70:fa:79:48:9b:80:b8:28:8d:78:dc:d0:3a:
         0c:4f:4f:21:3d:d4:dd:32:9d:bf:12:76:70:97:18:67:eb:18:
         ae:2f:40:51:78:7b:b9:35:9f:22:3b:12:5e:a0:d6:dc:4e:bc:
         ba:46:22:68:8e:88:6f:7e:5a:11:0a:23:b0:75:79:bc:9a:e7:
         45:e0:b4:1a:92:96:73:8a:fa:4b:32:cb:74:62:70:a3:99:d4:
         5c:8c:62:23:9b:cc:70:0a:15:97:7e:b1:cf:99:37:8b:bc:ba:
         e7:a0:a7:9e:ae:1f:0e:9d:1a:58:aa:d4:8b:76:12:3e:5a:d1:
         4f:9d:44:38:28:41:90:65:f4:83:89:d7:d9:e1:e2:54:59:39:
         43:2b:a6:9f:f3:b3:40:0a:9c:96:0c:7e:2e:35:88:a2:6e:42:
         f8:bd:8e:85:0f:fd:fd:1d:8b:13:22:d8:cc:e5:3d:60:2a:45:
         cd:4e:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----