Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          G0U8o9Gufac831Y9DJ1Ue5sVJMVtzuZ40MomXFqK4eg=
Subject key identifier:   7A:14:D7:7A:A3:1B:7E:B1:75:EA:B5:24:62:65:FD:E5:A8:91:CC:1C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1E67BFCCB4E3ABBD3D2DAD90E7F2A27B242A5C59
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     7018
IP address blocks:        209.200.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:bf:cc:b4:e3:ab:bd:3d:2d:ad:90:e7:f2:a2:7b:24:2a:5c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=7A14D77AA31B7EB175EAB5246265FDE5A891CC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:f7:4b:5d:05:fd:84:39:77:b7:bc:11:3c:
                    b5:f1:8c:cf:b5:a5:72:55:b0:8b:b1:d0:ea:27:d4:
                    dc:06:0d:8d:78:a7:ea:43:7c:82:f9:10:fb:73:17:
                    c7:72:38:6b:e8:2e:ab:a8:b5:d4:94:ea:09:c9:43:
                    c0:a3:2a:63:2b:65:cf:e8:ee:84:f3:7d:ec:34:87:
                    e0:9d:09:9f:fe:91:0e:de:d6:54:01:7b:88:ec:46:
                    08:40:0a:b4:64:49:0f:74:11:ad:3e:af:6d:7f:24:
                    57:52:75:12:61:2a:c6:0f:31:e0:3c:5d:d2:7e:2b:
                    40:33:ad:8c:22:fb:ab:ae:a2:f3:aa:a0:1b:31:24:
                    d6:8f:89:d2:07:96:86:4d:e6:cf:96:fc:02:e2:c7:
                    95:1c:88:a9:2a:1f:d3:a8:b7:75:1d:ae:01:5e:e3:
                    8c:b7:42:9a:9b:af:58:9c:67:5d:76:b1:09:e5:e6:
                    39:ad:86:b9:61:7f:1e:74:30:ba:91:80:3c:e2:5a:
                    ce:98:9f:4a:30:bc:f3:77:fc:f0:a3:ce:e2:a1:45:
                    f7:37:1a:cb:ee:b0:29:f4:05:3e:7b:28:d4:08:5d:
                    b5:d2:b7:a8:b7:e3:4f:c8:d4:8c:0e:ef:db:fb:7c:
                    fb:9f:0c:06:15:31:51:db:23:b6:3f:14:bb:bf:c5:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:14:D7:7A:A3:1B:7E:B1:75:EA:B5:24:62:65:FD:E5:A8:91:CC:1C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:14:43:ed:c2:50:6a:2c:a3:e3:f5:81:93:ef:37:5b:8e:
         7f:ce:f5:8d:01:9d:c8:18:a4:20:b8:ff:7a:57:85:67:6b:ac:
         30:c6:d0:c8:69:67:bb:b7:94:b7:54:2b:c6:84:9d:46:29:e5:
         fd:d2:52:0d:70:42:72:a5:d4:97:db:1e:e7:45:05:bc:19:6d:
         ed:ef:f8:55:61:92:42:91:cd:98:2d:9b:74:98:c3:5e:41:1e:
         36:be:9b:20:c8:a9:83:50:9a:8e:09:49:47:f4:72:35:2f:67:
         8a:68:44:22:45:3b:16:78:d0:28:f6:4e:0d:0d:2c:df:2a:b9:
         38:de:be:ed:12:d4:47:17:7c:52:a8:25:2b:ec:ba:8c:9c:78:
         57:de:bd:b0:da:b6:e2:2f:1f:f6:b5:fa:98:a5:b5:81:ef:a6:
         d0:f5:a3:2b:a6:35:e3:bb:4b:d7:ac:9d:63:23:1a:a8:b4:bf:
         dd:7d:72:57:3d:45:3a:b9:3e:d5:99:9b:94:ee:50:bb:5a:e9:
         82:3e:6a:69:24:8c:8f:9c:44:52:f8:ad:95:7d:b6:f9:d7:78:
         11:74:45:5c:92:7d:d1:55:c3:9f:84:13:5c:be:51:19:03:c9:
         14:c7:a3:e1:af:cd:f1:27:4f:41:75:58:1c:08:40:cc:a0:71:
         f0:2e:b3:c0
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUHme/zLTjq709La2Q5/KieyQqXFkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA0WhcNMjMxMTE1MTEyOTA0
WjAzMTEwLwYDVQQDEyg3QTE0RDc3QUEzMUI3RUIxNzVFQUI1MjQ2MjY1RkRFNUE4
OTFDQzFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXr3S10F/YQ5
d7e8ETy18YzPtaVyVbCLsdDqJ9TcBg2NeKfqQ3yC+RD7cxfHcjhr6C6rqLXUlOoJ
yUPAoypjK2XP6O6E833sNIfgnQmf/pEO3tZUAXuI7EYIQAq0ZEkPdBGtPq9tfyRX
UnUSYSrGDzHgPF3SfitAM62MIvurrqLzqqAbMSTWj4nSB5aGTebPlvwC4seVHIip
Kh/TqLd1Ha4BXuOMt0Kam69YnGdddrEJ5eY5rYa5YX8edDC6kYA84lrOmJ9KMLzz
d/zwo87ioUX3NxrL7rAp9AU+eyjUCF210reot+NPyNSMDu/b+3z7nwwGFTFR2yO2
PxS7v8VRrQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHoU13qjG36xdeq1JGJl/eWo
kcwcMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI6jANBgkqhkiG9w0BAQsF
AAOCAQEAGwwUQ+3CUGoso+P1gZPvN1uOf871jQGdyBikILj/eleFZ2usMMbQyGln
u7eUt1QrxoSdRinl/dJSDXBCcqXUl9se50UFvBlt7e/4VWGSQpHNmC2bdJjDXkEe
Nr6bIMipg1CajglJR/RyNS9nimhEIkU7FnjQKPZODQ0s3yq5ON6+7RLURxd8Uqgl
K+y6jJx4V969sNq24i8f9rX6mKW1ge+m0PWjK6Y147tL16ydYyMaqLS/3X1yVz1F
Ork+1ZmblO5Qu1rpgj5qaSSMj5xEUvitlX22+dd4EXRFXJJ90VXDn4QTXL5RGQPJ
FMej4a/N8SdPQXVYHAhAzKBx8C6zwA==
-----END CERTIFICATE-----