Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa
File:                     3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FxzlE7EWg1IqWzCF719L+GPz7nDepDuJqSRh+zjgkgQ=
Subject key identifier:   32:76:E2:3E:42:70:A8:AD:54:BE:68:37:EA:18:E8:C3:DF:1B:D2:FB
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       31C1FC0440263B484E85A4E44FEEA3BD461FDC7E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 25 Nov 2022 03:32:17 +0000
ROA not before:           Fri 25 Nov 2022 03:27:17 +0000
ROA not after:            Fri 24 Nov 2023 03:32:17 +0000
asID:                     61317
IP address blocks:        209.200.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:fc:04:40:26:3b:48:4e:85:a4:e4:4f:ee:a3:bd:46:1f:dc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 25 03:27:17 2022 GMT
            Not After : Nov 24 03:32:17 2023 GMT
        Subject: CN=3276E23E4270A8AD54BE6837EA18E8C3DF1BD2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:9f:10:54:c1:0e:e7:36:f0:1b:5a:09:fb:
                    ee:fc:d1:72:ed:47:27:2d:ba:a0:39:23:9c:b9:68:
                    ce:b1:a3:96:32:9b:2b:2d:55:a2:3d:7e:d5:02:25:
                    05:e1:14:6c:60:67:d0:89:a2:09:14:41:e6:bd:10:
                    fe:e5:67:31:a3:74:a3:b4:90:24:eb:3b:e3:62:58:
                    b7:f8:84:8b:b4:28:40:2c:d6:cc:30:57:9a:f2:5f:
                    02:ff:1d:da:ba:d5:16:8a:f0:5f:96:70:58:5a:72:
                    1a:47:75:2c:3a:7e:77:5f:d8:7f:f9:6e:c8:9c:39:
                    98:5a:93:05:a4:15:0b:94:32:8b:96:2d:3a:2b:54:
                    67:ff:72:4a:75:f6:a9:26:1e:f4:ff:61:2d:7c:55:
                    82:63:e7:ed:97:f9:c0:10:6b:24:5e:76:44:e0:12:
                    e0:d4:9f:4d:20:42:c8:2d:03:6d:3f:40:8a:0d:40:
                    d1:53:27:7c:56:92:c8:4d:cc:19:1a:f8:b5:97:ae:
                    9c:2f:ad:ac:6c:3d:52:71:c2:21:eb:69:ea:57:73:
                    e6:e1:e3:bc:15:bc:c7:38:95:ce:7a:11:42:4f:94:
                    d2:04:db:d3:3d:fd:6e:a5:b4:f5:35:c1:7c:ee:64:
                    91:11:71:b2:a4:2d:2b:1d:0e:e5:4c:7e:51:1a:c1:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:76:E2:3E:42:70:A8:AD:54:BE:68:37:EA:18:E8:C3:DF:1B:D2:FB
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:17:5f:05:95:fe:ca:ae:bc:9a:e1:89:7e:4c:53:d8:5c:
         70:08:47:f8:ee:3f:66:4c:a5:6f:6e:1a:f4:f1:08:97:89:c2:
         66:f4:2c:c4:b1:1f:31:9d:6c:3e:f3:cc:2d:17:e8:12:ce:02:
         1e:e2:2c:6c:3d:a0:64:84:33:e8:38:34:23:26:40:ca:79:cf:
         f0:45:5f:01:dc:17:5e:b4:8f:94:15:06:cc:c1:be:fe:d1:f2:
         66:87:07:47:5a:7b:7d:20:b5:b7:32:d5:69:ba:48:e9:c3:37:
         f3:51:67:c8:df:34:14:62:e4:48:39:b9:81:9d:ac:2e:38:45:
         99:db:f5:89:14:38:3f:04:60:ed:0d:b2:55:14:94:24:b9:64:
         10:2e:01:93:4e:5d:9f:16:2c:09:a3:64:09:62:2d:25:27:9e:
         95:58:34:01:42:9f:1e:ff:72:a8:0a:dc:60:c9:34:9c:2b:58:
         b6:5f:94:5a:ef:79:f4:5b:42:da:30:20:e1:53:4f:b0:23:6c:
         4a:d0:03:87:8f:e3:88:57:6d:8a:a6:c6:a9:b1:5d:ad:09:2a:
         9a:9f:00:fe:bd:ca:dc:fd:f5:b7:46:70:69:94:aa:d9:b1:25:
         50:86:8d:f7:2b:64:90:b6:1d:0c:e5:cb:02:b2:88:05:71:28:
         cb:9c:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----