Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          7SCnBqs7PfKDT99DMpQDZf/jql7H85pVd0TU3OzanCs=
Subject key identifier:   05:DE:7E:2A:BF:A7:D6:9C:4F:D0:2D:E9:83:7A:90:1E:FE:EC:46:45
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1EF05ADAF3C23042757CC6094E796C9AFDBCBF9D
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 18 Jul 2022 14:10:01 +0000
ROA not before:           Mon 18 Jul 2022 14:05:01 +0000
ROA not after:            Mon 17 Jul 2023 14:10:01 +0000
asID:                     7029
IP address blocks:        209.200.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f0:5a:da:f3:c2:30:42:75:7c:c6:09:4e:79:6c:9a:fd:bc:bf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:01 2022 GMT
            Not After : Jul 17 14:10:01 2023 GMT
        Subject: CN=05DE7E2ABFA7D69C4FD02DE9837A901EFEEC4645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:f1:bf:61:aa:63:44:20:50:02:bb:bf:1d:
                    80:c9:4d:70:e1:4c:32:4b:05:5e:7c:4e:d8:4b:33:
                    09:2e:fc:32:76:e8:e0:58:c5:3f:c1:43:72:ee:ca:
                    f9:5b:03:b2:d5:77:9a:40:2c:c2:66:5b:aa:3e:a3:
                    75:8f:8d:e3:9b:93:bd:71:02:23:c1:c5:2e:1f:68:
                    4f:ad:38:7d:df:f1:98:f3:b8:2b:c8:0c:9e:8b:e7:
                    99:fa:dd:d0:cd:0a:57:3b:5b:6c:58:f8:ec:f5:02:
                    7f:07:0b:1f:c8:55:9f:52:8f:c1:6c:16:8e:aa:e3:
                    21:82:97:c3:f1:7a:cf:a4:75:dd:29:11:87:bd:62:
                    cd:fe:3b:e8:06:fc:2a:4e:06:61:39:0b:90:aa:84:
                    ea:26:af:45:f1:51:e1:a6:dd:d4:3e:40:81:b4:9b:
                    57:92:4e:a1:58:3e:89:5c:1f:2e:6a:6b:99:f1:02:
                    5b:ba:d2:f4:92:13:b7:58:bd:3f:66:4b:0b:9f:98:
                    e0:04:c7:a6:8c:fd:69:57:6d:88:4c:98:89:31:3b:
                    cb:e0:ef:9e:a6:68:55:81:23:29:62:ef:c5:58:71:
                    eb:56:2c:1c:63:e6:8c:7f:3d:8c:e8:d6:45:1c:f2:
                    4b:ed:9f:48:d2:2a:3f:7f:89:3c:7a:30:a5:73:5e:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:7E:2A:BF:A7:D6:9C:4F:D0:2D:E9:83:7A:90:1E:FE:EC:46:45
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:05:e8:97:11:31:55:71:30:6e:3b:50:fe:17:d1:7c:e4:
         50:6d:a0:87:05:db:9f:65:44:fd:e4:3b:25:a9:38:40:1f:32:
         37:e2:8d:78:87:17:31:20:79:58:84:23:26:cd:b7:d7:38:54:
         c4:d8:a7:bb:1b:07:d6:22:b7:e7:c1:ec:a5:b9:66:94:94:8d:
         02:e3:ca:bf:00:d7:ea:de:7a:fe:42:c1:97:29:3d:b6:48:8f:
         e6:ea:28:a8:57:a6:5f:99:13:4b:a2:55:9a:69:92:87:69:3e:
         23:81:dd:71:c0:1a:82:79:62:dc:4c:51:1d:12:d4:e5:1d:74:
         bc:45:4e:d9:18:2b:b6:d7:a0:21:a0:1d:4b:c6:09:1f:02:51:
         77:19:83:81:1e:0d:78:a3:39:99:4b:40:9f:0c:db:e2:82:16:
         8d:90:ae:ba:97:ed:fe:24:e4:8e:a8:07:d4:12:09:9c:d3:8d:
         16:7a:49:fc:2c:e4:c6:ab:5e:33:39:30:e8:80:47:41:18:a3:
         a6:ac:50:14:89:45:0b:ce:35:b7:31:36:81:fe:30:c3:07:82:
         6b:dc:26:2b:7b:d3:64:70:d0:a5:ec:72:fe:12:5e:85:94:41:
         53:8b:d2:f9:35:92:ec:33:91:91:16:d4:0d:f9:1e:c9:c4:6c:
         3c:19:39:2a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUHvBa2vPCMEJ1fMYJTnlsmv28v50wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTAxWhcNMjMwNzE3MTQxMDAx
WjAzMTEwLwYDVQQDEygwNURFN0UyQUJGQTdENjlDNEZEMDJERTk4MzdBOTAxRUZF
RUM0NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3bxv2GqY0Qg
UAK7vx2AyU1w4UwySwVefE7YSzMJLvwydujgWMU/wUNy7sr5WwOy1XeaQCzCZluq
PqN1j43jm5O9cQIjwcUuH2hPrTh93/GY87gryAyei+eZ+t3QzQpXO1tsWPjs9QJ/
BwsfyFWfUo/BbBaOquMhgpfD8XrPpHXdKRGHvWLN/jvoBvwqTgZhOQuQqoTqJq9F
8VHhpt3UPkCBtJtXkk6hWD6JXB8uamuZ8QJbutL0khO3WL0/ZksLn5jgBMemjP1p
V22ITJiJMTvL4O+epmhVgSMpYu/FWHHrViwcY+aMfz2M6NZFHPJL7Z9I0io/f4k8
ejClc15JOwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAXefiq/p9acT9At6YN6kB7+
7EZFMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzYyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtHI7DANBgkqhkiG9w0BAQsF
AAOCAQEAIvwF6JcRMVVxMG47UP4X0XzkUG2ghwXbn2VE/eQ7Jak4QB8yN+KNeIcX
MSB5WIQjJs231zhUxNinuxsH1iK358HspblmlJSNAuPKvwDX6t56/kLBlyk9tkiP
5uooqFemX5kTS6JVmmmSh2k+I4HdccAagnli3ExRHRLU5R10vEVO2RgrttegIaAd
S8YJHwJRdxmDgR4NeKM5mUtAnwzb4oIWjZCuupft/iTkjqgH1BIJnNONFnpJ/Czk
xqteMzkw6IBHQRijpqxQFIlFC841tzE2gf4wwweCa9wmK3vTZHDQpexy/hJehZRB
U4vS+TWS7DORkRbUDfkeycRsPBk5Kg==
-----END CERTIFICATE-----