Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e20323036313530.roa
File:                     3230392e3230302e3233392e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier:          RRv0AIFFNKMVX6vdd8z3AunVcVGL237Tovx5ly3rq6k=
Subject key identifier:   9F:C5:18:9D:88:94:A7:F8:C2:43:B9:15:1B:9F:4F:40:A1:16:F2:40
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       614C4534FF0918B868D830D9901160851232D782
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e20323036313530.roa
Signing time:             Wed 31 Aug 2022 14:09:09 +0000
ROA not before:           Wed 31 Aug 2022 14:04:09 +0000
ROA not after:            Wed 30 Aug 2023 14:09:09 +0000
asID:                     206150
IP address blocks:        209.200.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4c:45:34:ff:09:18:b8:68:d8:30:d9:90:11:60:85:12:32:d7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Aug 31 14:04:09 2022 GMT
            Not After : Aug 30 14:09:09 2023 GMT
        Subject: CN=9FC5189D8894A7F8C243B9151B9F4F40A116F240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:81:f8:3e:0a:4f:9d:25:fc:67:8b:9f:cd:
                    06:f0:c1:67:c8:d0:66:44:9d:d9:27:14:ab:f6:27:
                    d1:52:a5:1f:90:9c:0f:bd:4e:6c:72:1a:66:d6:04:
                    77:57:07:46:56:3e:ff:3c:0e:8c:9a:91:07:51:6b:
                    49:04:34:bf:3b:80:e4:cc:5e:8d:1f:b4:81:90:0b:
                    48:a2:d4:12:e7:f7:c7:11:75:eb:f8:58:10:7c:ae:
                    fa:6b:72:6d:61:1c:35:42:07:42:26:58:bd:8c:44:
                    4f:31:12:e4:56:12:92:86:cf:29:90:13:82:39:c8:
                    fe:d0:e0:bd:7b:8e:e7:8d:24:d8:0c:a9:fe:a9:8b:
                    5b:3d:02:8e:71:57:00:34:20:8f:68:31:6a:1a:d2:
                    d0:1c:35:d7:84:26:60:5f:0a:2d:e2:69:9d:b1:e8:
                    3e:bf:cc:0e:f4:ac:20:a6:a9:e6:9c:ff:18:14:c9:
                    c2:64:c1:96:c1:f3:a3:e6:f7:1f:51:c3:6d:e7:ca:
                    69:54:66:5d:52:61:32:db:5a:22:c5:fc:ee:e9:75:
                    c7:a0:d9:2d:11:45:48:74:11:7b:85:e8:25:3e:82:
                    49:3b:fb:d5:c8:62:e2:ed:84:4a:9b:a9:d4:55:bb:
                    e1:5f:a8:e6:5b:4e:c3:f4:e9:53:7d:7a:a1:b3:6e:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:18:9D:88:94:A7:F8:C2:43:B9:15:1B:9F:4F:40:A1:16:F2:40
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e20323036313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:5f:bd:b8:60:08:52:8a:a3:bd:6f:e6:3a:f0:d5:96:0b:
         9e:c7:e0:9d:0a:bf:df:e4:81:34:38:44:af:a3:fb:98:81:e9:
         67:6a:e2:37:32:f5:d6:29:50:9d:60:a1:53:85:9f:ad:d1:75:
         1a:6d:36:f7:5e:3d:98:78:1a:53:37:62:b4:74:34:d5:d1:d0:
         04:99:f6:ab:ea:a6:d2:c3:41:b3:11:9c:62:85:8e:84:2e:bc:
         38:a8:ae:18:f5:88:44:47:3f:90:2e:9c:84:43:4d:61:e6:e5:
         8b:57:cf:21:84:cb:1f:2b:8e:5e:be:cb:06:74:af:6f:11:50:
         7b:45:84:57:23:71:61:ad:73:9a:12:6f:44:1e:0b:17:9e:57:
         5c:e6:6d:c0:cb:a2:1c:76:63:89:df:cf:1a:29:f4:19:2c:bb:
         95:42:31:0f:88:c8:48:fd:a8:a9:7a:7a:24:61:a8:6b:dd:6d:
         cd:f6:c8:cb:a7:87:e4:57:6b:ae:5e:b3:b7:1f:ce:9b:ab:ba:
         ce:76:fc:3d:45:eb:3e:86:34:eb:58:6a:3c:1a:df:0e:ad:e0:
         f6:2d:c1:b4:a7:57:6c:51:93:f3:f9:57:ab:09:9e:96:f7:5d:
         f5:12:e0:d4:8e:09:7e:fd:5f:ac:49:ee:05:f1:cd:e8:22:8e:
         9f:c2:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----