Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
File:                     3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa (raw, json)
Hash identifier:          v67YfkXJ1Z38GwpQptIme7vUJMro2oGhh59B9g3BO5E=
Subject key identifier:   E5:E6:A1:07:FA:25:88:0C:15:7F:D9:77:4A:BC:4E:68:AF:2E:BD:69
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7F36C82D9FAA5CE001C60BB4630C3EA8D0A3E938
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
Signing time:             Wed 16 Nov 2022 11:29:03 +0000
ROA not before:           Wed 16 Nov 2022 11:24:03 +0000
ROA not after:            Wed 15 Nov 2023 11:29:03 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:c8:2d:9f:aa:5c:e0:01:c6:0b:b4:63:0c:3e:a8:d0:a3:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:03 2022 GMT
            Not After : Nov 15 11:29:03 2023 GMT
        Subject: CN=E5E6A107FA25880C157FD9774ABC4E68AF2EBD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:eb:6e:89:e0:ba:fb:ed:61:44:fb:b9:f8:
                    30:c9:33:00:01:a3:e5:c3:be:38:66:ab:d2:2a:b0:
                    89:90:2d:61:6a:a7:a4:c6:b0:6d:d0:13:c3:e4:9e:
                    7e:ca:a9:a9:a9:af:c7:ab:b1:d0:85:7c:8b:3e:e9:
                    fc:26:32:a0:5a:08:84:ed:eb:e5:68:4c:56:cf:6e:
                    73:19:32:d2:25:a5:de:2f:d6:e2:a1:3f:13:d6:af:
                    2d:47:ff:9f:cc:67:97:3c:e8:5f:c8:2f:cf:40:5a:
                    09:86:fc:43:ff:a3:1c:18:35:3f:23:39:c2:81:31:
                    86:dc:06:c0:95:86:90:93:fa:00:cf:53:94:fb:3c:
                    ab:85:b4:20:2b:ec:b4:8c:3d:b1:e6:93:06:0f:32:
                    b7:bc:0f:44:24:e7:dd:b8:e6:79:6c:67:f5:88:cb:
                    75:39:70:52:c0:a9:71:cf:f3:3b:f6:ee:3b:ce:84:
                    8f:3d:62:69:18:5c:98:93:ea:fa:53:28:00:c0:ab:
                    02:69:dc:3f:c2:ff:f7:0f:cd:13:ea:57:46:ae:51:
                    cc:e1:5b:71:b2:5d:27:9c:5f:a3:ab:5c:da:7c:27:
                    10:f3:4d:25:86:b2:dc:e6:7b:38:39:b1:4e:1c:ac:
                    cf:46:97:16:b7:22:ea:70:d6:3f:99:ce:d1:5e:f4:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:A1:07:FA:25:88:0C:15:7F:D9:77:4A:BC:4E:68:AF:2E:BD:69
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:51:3b:ba:29:d0:7a:a4:11:de:4d:57:05:46:6e:ba:e8:d2:
         92:a4:af:03:4c:74:13:23:aa:6f:13:30:f1:58:4b:24:a0:8a:
         e0:bb:05:bd:80:c9:05:95:68:41:13:0f:cf:97:fa:5c:1c:f9:
         e5:2f:69:0d:ac:1f:36:fc:68:88:77:8d:59:90:37:7e:d9:24:
         ee:61:04:86:0a:37:e0:15:a7:b0:b6:00:6b:0d:1f:e6:36:8d:
         ea:c1:1b:4c:1b:33:10:55:f1:8a:32:c2:d4:80:08:72:da:46:
         ed:91:b5:7e:29:00:54:50:03:46:90:b7:c4:fa:f2:29:ba:ed:
         4d:62:4d:c4:dc:80:54:7e:8d:f1:51:3c:a2:5f:8e:62:90:8d:
         9b:21:45:e2:9d:d1:e1:da:e2:f6:ff:e9:9e:51:33:7b:7c:a3:
         e7:53:ae:da:f6:8c:2d:58:f1:08:50:c2:e7:0b:e9:ed:42:4f:
         1c:d7:2c:ce:18:7c:98:4f:be:33:1f:5a:cd:8d:39:19:30:a5:
         65:2d:28:c7:15:cd:9a:cb:9d:50:73:2a:4f:58:9b:9b:5b:54:
         18:ed:ef:df:6c:53:1a:bd:22:fb:de:b1:45:da:0c:a9:d4:b5:
         df:27:94:b4:c9:8d:63:b7:37:3c:fc:b3:c1:83:3f:ea:12:cd:
         66:60:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----