Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233352e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3233352e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          7utlmozkNJFzH3eqsrRPncLWYg3912N8jiqnPL6OmaM=
Subject key identifier:   35:42:69:0F:95:E6:E6:A0:37:AE:0F:5C:3B:3A:9F:B6:1C:9D:6E:D6
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       68C8720E72CF44C7C05A8CB3A79789D7C6410859
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233352e302f32342d3234203d3e203436353632.roa
Signing time:             Mon 18 Jul 2022 14:10:06 +0000
ROA not before:           Mon 18 Jul 2022 14:05:06 +0000
ROA not after:            Mon 17 Jul 2023 14:10:06 +0000
asID:                     46562
IP address blocks:        209.200.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c8:72:0e:72:cf:44:c7:c0:5a:8c:b3:a7:97:89:d7:c6:41:08:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:06 2022 GMT
            Not After : Jul 17 14:10:06 2023 GMT
        Subject: CN=3542690F95E6E6A037AE0F5C3B3A9FB61C9D6ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:c2:b3:a2:a4:f1:6a:1a:88:81:90:29:01:
                    96:42:5a:cd:1f:78:7d:67:bd:d4:8a:90:e6:65:d3:
                    c0:9d:c4:83:0f:80:79:f1:98:f9:e0:69:23:49:05:
                    89:62:95:fe:f8:79:38:dc:c5:1e:b7:10:3b:30:7b:
                    30:be:ae:98:60:38:2e:68:15:02:d3:7b:0a:20:92:
                    b5:7e:4a:7b:a2:3d:11:03:26:a4:01:5d:c2:e8:19:
                    47:dd:78:b6:c8:13:93:2d:66:22:2e:74:cb:a3:7a:
                    20:2c:8d:b3:da:20:65:0b:fd:cb:5a:d5:73:22:5e:
                    b1:bc:76:7f:29:ed:4d:50:8c:04:a3:5e:30:65:cd:
                    49:53:6e:d2:32:e8:37:1a:28:31:3c:6b:fd:a2:a2:
                    03:41:e3:28:b4:aa:08:d4:6b:3d:6c:db:f7:c8:e6:
                    da:2b:a0:4e:1b:27:a8:d7:71:84:f8:b9:20:6d:60:
                    82:e6:19:cc:25:9a:00:ff:ef:4d:d9:55:fe:4c:cd:
                    3d:37:96:6f:61:54:5b:ff:d0:4d:9c:84:79:e2:28:
                    1d:9c:cb:cd:1b:d9:a2:aa:0c:af:21:5b:7f:50:79:
                    64:4f:fa:cb:86:76:dd:e0:c2:91:02:94:0f:fb:04:
                    a3:bc:65:2f:8d:1a:57:12:f7:4a:d3:73:b0:10:4c:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:69:0F:95:E6:E6:A0:37:AE:0F:5C:3B:3A:9F:B6:1C:9D:6E:D6
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233352e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:f0:6a:8b:c3:74:10:1f:cf:69:3f:33:b3:0d:c2:78:00:
         bf:66:20:70:fb:1d:75:e4:35:26:14:27:51:7a:c4:7e:5c:1b:
         cc:41:ee:3a:1e:77:81:cf:8c:29:e8:3c:b0:9c:d1:6b:e4:a9:
         9c:90:51:ca:6e:a6:57:46:56:36:2c:c6:c1:82:0a:4a:b3:a0:
         74:c9:e5:1f:3e:d5:57:5b:17:d0:f0:a8:8c:6b:e8:78:ae:10:
         88:6d:e2:83:2d:ac:6a:6e:03:ee:70:15:d5:49:c7:52:19:d2:
         5d:ef:8b:ab:9f:e6:c7:d3:91:16:19:e7:c5:8a:d1:8b:f2:72:
         c3:d0:51:cd:18:9c:fc:1a:18:8b:6a:60:7d:8b:6e:a5:27:d9:
         0f:bd:57:f5:16:7f:70:f9:1e:68:c0:ca:85:9c:aa:53:58:72:
         25:ba:24:c0:19:a9:3a:0c:2a:e6:bd:61:b8:71:03:f4:fc:22:
         e7:af:4a:1b:b7:4b:2f:91:76:21:be:7c:bc:42:e8:0f:36:e0:
         bd:54:60:69:d4:36:37:3d:47:9e:4e:cc:b8:88:58:8e:19:16:
         6d:2b:d8:f5:8a:60:98:11:16:26:e2:e2:15:e0:af:7a:1e:7f:
         ac:cb:bd:40:40:d7:54:af:76:13:15:54:98:c6:15:6b:fe:6e:
         0c:6a:87:b0
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUaMhyDnLPRMfAWoyzp5eJ18ZBCFkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTA2WhcNMjMwNzE3MTQxMDA2
WjAzMTEwLwYDVQQDEygzNTQyNjkwRjk1RTZFNkEwMzdBRTBGNUMzQjNBOUZCNjFD
OUQ2RUQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv3Cs6Kk8Woa
iIGQKQGWQlrNH3h9Z73UipDmZdPAncSDD4B58Zj54GkjSQWJYpX++Hk43MUetxA7
MHswvq6YYDguaBUC03sKIJK1fkp7oj0RAyakAV3C6BlH3Xi2yBOTLWYiLnTLo3og
LI2z2iBlC/3LWtVzIl6xvHZ/Ke1NUIwEo14wZc1JU27SMug3GigxPGv9oqIDQeMo
tKoI1Gs9bNv3yObaK6BOGyeo13GE+LkgbWCC5hnMJZoA/+9N2VX+TM09N5ZvYVRb
/9BNnIR54igdnMvNG9miqgyvIVt/UHlkT/rLhnbd4MKRApQP+wSjvGUvjRpXEvdK
03OwEEwfJQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDVCaQ+V5uagN64PXDs6n7Yc
nW7WMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM2MzUzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjrMA0GCSqGSIb3DQEB
CwUAA4IBAQBMvPBqi8N0EB/PaT8zsw3CeAC/ZiBw+x115DUmFCdResR+XBvMQe46
HneBz4wp6DywnNFr5KmckFHKbqZXRlY2LMbBggpKs6B0yeUfPtVXWxfQ8KiMa+h4
rhCIbeKDLaxqbgPucBXVScdSGdJd74urn+bH05EWGefFitGL8nLD0FHNGJz8GhiL
amB9i26lJ9kPvVf1Fn9w+R5owMqFnKpTWHIluiTAGak6DCrmvWG4cQP0/CLnr0ob
t0svkXYhvny8QugPNuC9VGBp1DY3PUeeTsy4iFiOGRZtK9j1imCYERYm4uIV4K96
Hn+sy71AQNdUr3YTFVSYxhVr/m4Maoew
-----END CERTIFICATE-----