Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa
File:                     3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          tOWid/+J5N+01PAviIUpauMcU9140oG//FeTDOhlJVE=
Subject key identifier:   0B:7B:63:6F:BB:6E:80:81:EB:84:B7:99:8F:8E:C7:A5:B8:50:CB:A6
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1E6399328D038853B624544F8AFC70932408BCBC
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 16 Nov 2022 11:29:07 +0000
ROA not before:           Wed 16 Nov 2022 11:24:07 +0000
ROA not after:            Wed 15 Nov 2023 11:29:07 +0000
asID:                     61138
IP address blocks:        209.200.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:99:32:8d:03:88:53:b6:24:54:4f:8a:fc:70:93:24:08:bc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:07 2022 GMT
            Not After : Nov 15 11:29:07 2023 GMT
        Subject: CN=0B7B636FBB6E8081EB84B7998F8EC7A5B850CBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:c9:d5:70:39:0c:e6:bb:19:36:74:96:a1:
                    61:94:87:3d:d8:17:38:85:69:bd:a2:d4:ee:8d:fc:
                    4a:c0:aa:5f:65:ff:fa:9b:bf:a2:92:11:1c:e6:c4:
                    5d:ea:bc:15:10:60:95:ab:a9:3d:e1:bd:d1:df:b1:
                    81:99:48:98:e6:1f:5b:64:ea:27:0b:0d:94:26:07:
                    46:26:78:94:35:6e:45:47:cb:4d:c7:04:f7:59:92:
                    3a:db:54:f4:b8:74:31:9e:87:ae:6f:46:8b:57:3e:
                    75:52:48:e0:06:f7:18:c8:71:e7:50:e2:03:df:39:
                    97:21:23:ee:32:41:7b:4f:53:4c:0b:b2:ad:89:6f:
                    34:88:83:10:4f:9e:26:e7:73:15:16:7f:2c:85:6f:
                    a3:5c:27:13:af:ff:ee:ab:07:af:b3:93:9b:73:c6:
                    28:3d:5d:41:c1:f9:58:ee:c5:62:61:cb:c1:36:71:
                    ca:68:c2:47:d4:47:00:6b:f0:d7:a0:aa:89:26:ad:
                    42:34:49:5f:34:ae:2d:bd:3d:6b:6c:45:59:80:b1:
                    46:5b:21:32:55:d2:62:c9:7f:7b:c7:e7:94:22:68:
                    29:2c:34:28:d4:f6:4c:de:a5:49:71:37:c4:b4:92:
                    15:c1:43:8b:c5:89:99:55:c0:c4:3b:c5:52:d7:dd:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:63:6F:BB:6E:80:81:EB:84:B7:99:8F:8E:C7:A5:B8:50:CB:A6
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:31:6e:eb:44:3b:24:9c:8b:c2:3e:65:a3:56:98:ec:e7:
         3a:de:ae:88:2f:b3:8b:c9:e6:60:5a:16:25:96:3a:18:c9:9a:
         31:09:b1:52:ce:c8:ca:49:58:ff:ef:ea:29:e1:32:ad:b6:f0:
         59:c5:60:85:ea:62:38:2a:58:f1:d2:bb:cc:ff:ed:d3:e0:4d:
         81:ca:9a:91:ca:4d:e0:c8:1a:b4:aa:be:07:47:4a:6d:95:3e:
         08:99:ba:99:b8:1b:52:d5:86:3f:1a:6e:3d:8e:81:74:e1:3b:
         cc:95:17:ce:a5:c8:33:5d:96:47:73:1a:a2:7c:ef:04:c3:bb:
         38:29:5e:71:4f:4d:d2:a8:74:ff:66:a8:02:d2:8e:a1:bb:46:
         64:d4:cb:15:3b:e5:c0:8a:f5:43:af:26:6e:4d:45:a3:19:74:
         90:90:dd:0a:c0:37:b8:48:7c:aa:67:83:0d:25:18:a7:36:11:
         16:83:e4:f4:ea:d1:e4:b9:d8:8b:88:ee:93:25:71:a8:57:ef:
         21:1d:5a:2d:79:64:39:e4:b4:79:1b:09:bd:b7:01:88:f2:d0:
         81:0c:3c:29:6e:52:c6:81:ad:fe:8d:48:bf:f5:41:91:38:48:
         d9:03:9a:08:77:42:fb:6c:22:62:88:8d:24:92:9b:68:93:0a:
         94:aa:68:eb
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHmOZMo0DiFO2JFRPivxwkyQIvLwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA3WhcNMjMxMTE1MTEyOTA3
WjAzMTEwLwYDVQQDEygwQjdCNjM2RkJCNkU4MDgxRUI4NEI3OTk4RjhFQzdBNUI4
NTBDQkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PJ1XA5DOa7
GTZ0lqFhlIc92Bc4hWm9otTujfxKwKpfZf/6m7+ikhEc5sRd6rwVEGCVq6k94b3R
37GBmUiY5h9bZOonCw2UJgdGJniUNW5FR8tNxwT3WZI621T0uHQxnoeub0aLVz51
UkjgBvcYyHHnUOID3zmXISPuMkF7T1NMC7KtiW80iIMQT54m53MVFn8shW+jXCcT
r//uqwevs5Obc8YoPV1BwflY7sViYcvBNnHKaMJH1EcAa/DXoKqJJq1CNElfNK4t
vT1rbEVZgLFGWyEyVdJiyX97x+eUImgpLDQo1PZM3qVJcTfEtJIVwUOLxYmZVcDE
O8VS190aTwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAt7Y2+7boCB64S3mY+Ox6W4
UMumMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjoMA0GCSqGSIb3DQEB
CwUAA4IBAQA6PjFu60Q7JJyLwj5lo1aY7Oc63q6IL7OLyeZgWhYlljoYyZoxCbFS
zsjKSVj/7+op4TKttvBZxWCF6mI4Kljx0rvM/+3T4E2BypqRyk3gyBq0qr4HR0pt
lT4ImbqZuBtS1YY/Gm49joF04TvMlRfOpcgzXZZHcxqifO8Ew7s4KV5xT03SqHT/
ZqgC0o6hu0Zk1MsVO+XAivVDryZuTUWjGXSQkN0KwDe4SHyqZ4MNJRinNhEWg+T0
6tHkudiLiO6TJXGoV+8hHVoteWQ55LR5Gwm9twGI8tCBDDwpblLGga3+jUi/9UGR
OEjZA5oId0L7bCJiiI0kkptokwqUqmjr
-----END CERTIFICATE-----