Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa
File:                     3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          VH/aNUjU0dMv/fYkuUoZ3LUAXKtADhW4bevxGlbnWkc=
Subject key identifier:   62:4C:62:4A:55:3B:34:17:C0:FA:71:FF:62:0A:14:02:8D:8E:90:19
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       C9C554F8EDF9710DE375D49E3853441F0D857E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 18 Jul 2022 14:09:50 +0000
ROA not before:           Mon 18 Jul 2022 14:04:50 +0000
ROA not after:            Mon 17 Jul 2023 14:09:50 +0000
asID:                     7029
IP address blocks:        209.200.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c9:c5:54:f8:ed:f9:71:0d:e3:75:d4:9e:38:53:44:1f:0d:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:50 2022 GMT
            Not After : Jul 17 14:09:50 2023 GMT
        Subject: CN=624C624A553B3417C0FA71FF620A14028D8E9019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:c2:7b:79:95:71:17:19:d1:08:97:9e:20:
                    01:45:45:b4:ff:f0:1f:1c:f2:9b:79:0a:f7:15:c6:
                    cb:da:23:86:52:3a:2d:8d:54:a8:fb:2c:e8:ce:58:
                    81:00:bf:d0:27:43:f9:d5:34:15:a2:9b:b1:e9:ca:
                    26:02:22:29:a5:25:61:52:e4:e8:96:ea:df:ad:0e:
                    b8:07:36:72:bd:91:e3:0e:29:ab:c0:64:80:35:f5:
                    05:63:e8:6f:23:f2:ef:b0:f1:d5:3c:8c:6e:b1:75:
                    5c:d9:d2:e1:e0:c1:96:19:06:64:7e:72:65:ac:80:
                    4a:28:18:5e:b4:2f:e1:85:55:48:9e:d4:29:3a:ec:
                    0d:26:01:ca:03:36:5e:74:f9:f2:f4:f5:ef:b9:1a:
                    a6:39:79:68:e8:aa:62:9e:99:89:1a:4f:45:00:6e:
                    9e:f7:16:d4:ae:f6:84:4c:80:1c:33:bf:ac:a0:1a:
                    fa:79:a8:04:69:3d:d3:3f:13:a5:28:3d:08:01:ba:
                    c7:8d:d5:ee:65:40:45:b2:74:fc:44:69:ae:54:42:
                    05:53:e5:ab:ce:90:dc:2c:97:17:5a:14:e3:5c:cd:
                    df:6b:1c:94:7e:ff:a3:54:de:d5:ad:50:29:6b:77:
                    fb:3d:57:df:21:84:dd:69:2e:fd:09:2c:2d:9f:7f:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:62:4A:55:3B:34:17:C0:FA:71:FF:62:0A:14:02:8D:8E:90:19
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:62:a5:10:85:13:65:0c:96:13:fa:d5:27:f2:b6:7d:79:57:
         d4:8d:e7:5e:df:c0:53:fb:99:39:72:28:a5:a2:6b:fb:be:4d:
         eb:19:69:b8:5e:6f:4a:e2:f9:52:b7:31:e7:88:bb:a4:59:a1:
         ec:d4:a0:15:8f:af:30:44:d9:92:63:e4:98:7c:6b:07:d3:86:
         d0:3e:b1:07:7f:65:66:78:23:57:5d:e3:95:77:fc:87:98:36:
         16:67:e8:6d:c3:43:ad:50:85:c6:c2:bb:41:73:5f:8d:0b:5e:
         db:85:a3:b9:dc:7b:0f:74:62:a1:9c:3b:0a:4b:d7:c3:33:05:
         79:36:23:c5:1a:11:ed:50:5e:97:c5:15:64:f3:85:25:7e:2a:
         de:99:2a:2d:70:95:fe:d1:51:9f:97:f1:06:64:aa:b2:6b:0a:
         c2:6c:a3:35:cc:c7:21:7e:31:44:22:ec:91:ff:ea:1c:af:5e:
         1a:30:8b:99:00:f4:a9:9c:93:5b:c0:40:c1:b3:a7:d9:b6:e9:
         24:98:6f:63:87:f8:7e:51:3d:21:a1:8d:c8:c2:f3:fb:f4:80:
         e5:25:8c:40:56:2a:d4:d7:26:12:f2:cd:0b:7a:56:5d:0a:05:
         9e:1f:11:56:b0:9b:05:46:e5:be:81:e6:f7:ed:d2:f7:34:fa:
         fe:ef:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----