Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa
File:                     3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          I3Lt1fPRvNOeRVmoa14xHlPR3AkbPWILm9i7bFNaUHU=
Subject key identifier:   EC:9B:CD:14:EF:C0:BA:5D:8D:41:E0:CC:70:FD:5E:B2:8B:50:37:80
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       17F58DDB7AF5BB733C3DA30D2E583DD339674F78
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa
Signing time:             Mon 18 Jul 2022 14:09:58 +0000
ROA not before:           Mon 18 Jul 2022 14:04:58 +0000
ROA not after:            Mon 17 Jul 2023 14:09:58 +0000
asID:                     29802
IP address blocks:        209.200.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f5:8d:db:7a:f5:bb:73:3c:3d:a3:0d:2e:58:3d:d3:39:67:4f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:58 2022 GMT
            Not After : Jul 17 14:09:58 2023 GMT
        Subject: CN=EC9BCD14EFC0BA5D8D41E0CC70FD5EB28B503780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:ca:c2:db:d5:66:2d:e7:77:79:4c:cd:47:
                    51:00:de:52:9f:ae:71:2c:60:3f:dc:78:f3:f3:9d:
                    6a:7a:88:aa:e3:f6:89:04:5d:f7:74:1f:92:8d:8f:
                    5a:68:3e:5d:b1:76:65:23:9a:84:d9:1c:08:11:5d:
                    f4:69:af:18:ef:40:15:c7:50:f5:c3:18:e6:d0:9e:
                    3a:f9:f3:24:38:77:ad:5a:7a:21:49:1d:4d:53:6e:
                    2c:d4:81:82:5b:54:83:43:75:fd:97:0d:68:ad:bd:
                    00:ed:5f:d4:cd:ea:7b:ab:6d:b3:7c:a0:50:04:e5:
                    28:8e:c0:a2:ce:24:bf:1f:6a:71:2a:be:3a:e5:9d:
                    c3:80:06:7a:61:bb:c0:78:2f:eb:e3:9a:36:b9:1e:
                    35:08:d5:55:33:44:fc:45:b9:85:42:17:31:9c:53:
                    d7:46:06:7d:c3:6b:07:c0:2a:4c:d9:59:fb:51:a5:
                    28:c9:e8:19:9b:fd:16:b0:16:5a:86:5e:75:34:6a:
                    73:e4:4b:fc:7b:f0:48:02:1c:23:64:ef:85:38:de:
                    e3:97:a2:a8:99:54:c4:7b:a4:d2:16:d4:cf:b6:4c:
                    10:77:83:13:2f:b1:84:ed:35:58:3c:2d:4d:25:1a:
                    41:2e:e4:e2:5f:42:38:75:f3:12:c2:13:2d:dd:6c:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9B:CD:14:EF:C0:BA:5D:8D:41:E0:CC:70:FD:5E:B2:8B:50:37:80
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:36:38:27:a8:11:34:b4:95:bc:65:95:4a:20:88:58:82:
         15:f8:36:6f:c5:8c:ad:e8:c0:fd:a7:b5:57:f7:bc:ec:2a:43:
         b7:5b:ac:c6:f1:d0:23:25:d2:df:5f:b5:46:6d:df:c5:0d:17:
         3d:89:38:c2:c8:a3:33:ff:33:a3:76:47:a1:d6:cd:10:47:28:
         4a:91:45:cf:a2:bc:ca:d0:31:79:32:dc:d1:e8:ba:0b:b9:d6:
         67:5a:ae:8e:aa:f9:11:9f:0c:fa:f6:65:8b:86:1a:ac:6a:b0:
         31:e8:d0:15:52:b3:fe:27:52:1c:e6:3c:cb:03:58:ed:5b:73:
         4d:c7:28:52:9a:cb:11:99:cc:35:b0:d7:0d:8e:14:6e:70:f8:
         80:5d:e2:7a:5f:7b:5f:0a:0a:a6:63:bb:fe:f9:12:76:4a:cc:
         46:5f:68:80:a2:f3:89:6b:26:eb:59:2e:e5:14:39:3f:6a:cf:
         db:e5:2e:5a:8b:c7:8a:2e:b1:b8:09:8d:9d:70:98:00:92:f4:
         91:f8:58:23:6d:45:67:59:93:c3:5c:f2:9b:65:25:2a:05:21:
         56:3f:84:d7:7f:54:07:a2:1e:b8:e0:19:bc:b6:7d:47:d3:eb:
         aa:1a:7e:40:b3:2e:34:c1:67:74:da:27:6a:d2:0c:e6:a4:75:
         54:9b:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----