Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa
File:                     3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          lXlytImUlgT3CBB5cKuMHpoiRCWU613y4bsd1K1COPE=
Subject key identifier:   17:63:90:CF:86:B4:40:E4:D6:AE:2E:76:EB:E9:56:6C:E3:F7:2C:24
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4211710E031178E0A2646CE05F941BFEA534D8D5
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:53 +0000
ROA not before:           Mon 18 Jul 2022 14:04:53 +0000
ROA not after:            Mon 17 Jul 2023 14:09:53 +0000
asID:                     1239
IP address blocks:        209.200.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:11:71:0e:03:11:78:e0:a2:64:6c:e0:5f:94:1b:fe:a5:34:d8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:53 2022 GMT
            Not After : Jul 17 14:09:53 2023 GMT
        Subject: CN=176390CF86B440E4D6AE2E76EBE9566CE3F72C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:0c:5b:76:d9:d8:b3:b5:4e:34:47:dd:da:
                    9c:81:fb:43:5a:3f:44:17:4f:eb:c2:81:c2:a2:2d:
                    7b:7f:a6:15:b6:42:b1:47:a4:ca:92:91:f1:ac:02:
                    88:d3:ae:7e:05:55:78:e3:c2:cb:f6:f9:9b:bd:ce:
                    dd:b2:01:24:c0:d1:33:b9:c9:cb:c2:cd:98:ee:d6:
                    c1:0f:b4:6d:e6:03:53:94:ae:17:c4:58:4b:3a:f9:
                    ce:2a:18:c0:59:ec:f3:e7:72:f6:27:56:a1:2d:16:
                    1e:9d:e0:6d:8a:9d:6d:60:3f:68:ef:69:67:f5:08:
                    e6:f7:73:f6:c0:2c:a3:90:a2:85:5b:a0:36:39:7a:
                    97:de:18:7c:0d:11:58:a0:14:fc:d6:a2:12:1d:7d:
                    66:7d:33:64:02:82:ec:ef:21:ac:25:5b:25:da:0e:
                    6f:58:10:67:8d:3a:2d:1b:af:2a:da:e4:f3:6a:02:
                    9e:70:a8:54:aa:84:a7:42:d2:63:20:65:7f:23:b9:
                    92:14:5b:a6:2c:43:b5:e1:e6:87:f9:84:4b:be:78:
                    51:ec:a9:76:81:67:45:9e:4c:3b:8c:94:ed:0a:d0:
                    5e:ae:fd:f7:f2:29:c3:3a:0b:ad:b4:15:6f:49:5c:
                    ea:8a:09:e2:c2:b7:1f:57:99:b9:2b:3e:a1:9b:d1:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:63:90:CF:86:B4:40:E4:D6:AE:2E:76:EB:E9:56:6C:E3:F7:2C:24
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:8e:93:0f:1d:53:93:7e:8e:93:8e:07:b0:4c:09:7b:96:
         44:a8:98:19:87:ef:b6:b5:e8:08:bc:35:42:f7:45:28:f8:05:
         2a:54:e5:62:52:16:d2:a1:ec:3c:c4:be:b6:c9:69:22:55:67:
         ba:bf:e4:ce:e3:99:96:0c:bc:ba:72:08:9c:7f:cd:32:a4:3e:
         52:65:35:62:51:45:96:26:43:7e:e0:49:c3:91:33:47:77:b4:
         73:63:0e:96:2d:c3:cf:56:64:00:d2:ae:bb:11:2c:ca:57:ca:
         8f:38:7d:bf:93:5a:dc:38:dd:f0:ae:20:27:d3:e8:0c:fe:30:
         5d:92:cd:37:f6:8c:d7:32:9b:a5:22:de:53:f3:7f:73:03:a8:
         f8:cb:53:bf:ee:8e:0e:d0:9c:a9:a0:2e:b3:2b:57:ff:86:6f:
         e1:3f:9b:15:67:03:eb:61:28:74:54:16:4d:88:3f:01:78:45:
         c7:b0:1d:35:4e:64:45:d1:31:74:81:0b:5d:2f:7c:90:2c:8c:
         01:95:db:b5:69:91:e2:46:b3:54:02:71:54:11:8e:f6:05:ce:
         10:35:c4:69:0c:08:f0:b5:49:3e:99:b6:f3:18:e8:8f:89:6e:
         de:97:b8:76:3c:f8:56:8d:2f:99:98:f6:b1:91:65:a4:f9:16:
         e5:30:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----