Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa
File:                     3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          gBkllAdZfAKWBXxWgiRD2VD2eNCPBbUPePo6RQMBClo=
Subject key identifier:   F1:6B:EC:3C:1E:68:B5:B8:61:EA:45:F9:F0:4F:3F:04:0C:2C:D7:DC
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0390E501F12F72CCD923EF9C183F9347CADE5AB2
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:51 +0000
ROA not before:           Mon 18 Jul 2022 14:04:51 +0000
ROA not after:            Mon 17 Jul 2023 14:09:51 +0000
asID:                     1239
IP address blocks:        209.200.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:90:e5:01:f1:2f:72:cc:d9:23:ef:9c:18:3f:93:47:ca:de:5a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:51 2022 GMT
            Not After : Jul 17 14:09:51 2023 GMT
        Subject: CN=F16BEC3C1E68B5B861EA45F9F04F3F040C2CD7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:99:2c:2d:d8:f4:61:27:59:32:57:48:2c:
                    54:43:63:94:cf:c5:e9:73:81:e4:8f:06:ec:bb:a7:
                    05:4f:b8:1d:e2:22:2d:a5:31:4b:89:66:8e:63:58:
                    06:cf:60:30:01:e4:4e:29:0d:b3:b2:76:9b:2a:eb:
                    ef:bf:6c:84:1c:d6:44:3b:a5:ff:4c:34:23:f5:5f:
                    8a:fd:c9:bd:14:e6:3b:fe:3c:eb:90:9b:ae:5f:cf:
                    eb:51:61:62:7a:79:2d:8e:a3:ce:cf:2f:92:19:a0:
                    50:f3:96:7c:50:68:d9:e4:ee:f7:08:21:45:93:74:
                    1c:7b:f7:bb:a1:5d:19:78:e7:9c:15:43:a6:84:40:
                    5e:8a:24:29:31:3e:28:75:16:cc:68:5b:b7:c8:0a:
                    1f:58:cf:6c:8e:52:ca:39:7f:71:e4:9a:0e:a6:35:
                    65:41:46:e4:b4:55:45:71:37:31:4d:06:ee:ce:b8:
                    5e:fa:35:dd:c5:a4:e1:88:45:3e:94:3c:cb:f0:df:
                    97:70:5b:25:59:42:32:04:38:cd:1f:ff:14:92:8c:
                    92:3d:a8:7d:a7:76:c6:1a:b2:ef:69:70:3f:cc:8f:
                    4d:92:02:e5:77:f2:ba:41:35:0c:46:ed:ec:a0:24:
                    59:fb:67:8b:87:0e:1c:88:bf:0f:47:75:69:45:3c:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:EC:3C:1E:68:B5:B8:61:EA:45:F9:F0:4F:3F:04:0C:2C:D7:DC
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:be:90:63:49:66:e3:a4:5b:62:19:b2:03:b4:3a:12:4a:
         35:c1:9f:c3:78:49:ea:2c:0e:96:96:ba:6b:3f:c2:07:31:52:
         0d:f9:e6:79:4e:ee:18:82:5e:4b:2b:4d:cd:01:b5:79:d1:2e:
         15:95:82:1c:d6:26:77:a8:04:5d:2d:73:80:87:57:47:40:8f:
         47:9d:6f:9b:7a:ab:d3:00:0a:83:3f:0c:2f:8a:69:c9:12:b7:
         b7:30:ce:98:3b:ab:bd:9f:2d:71:af:79:6a:f7:8a:c5:69:42:
         ed:3a:a1:e8:0b:7e:22:eb:2a:d9:39:c7:ab:58:90:7f:19:d4:
         46:8d:61:63:da:16:a8:c5:e3:7e:48:2e:19:56:37:c3:8f:56:
         41:d3:89:64:44:b9:bf:2d:73:0a:fa:ed:e8:97:a8:a9:ec:3a:
         62:d2:6b:e8:63:c3:26:5d:d8:a6:4d:3d:d0:e3:52:d1:f9:d4:
         94:49:27:6f:8b:6c:0d:8d:12:83:78:08:e4:d3:80:1b:df:2f:
         a1:f8:85:5c:34:5b:da:89:19:ad:15:81:60:6a:a0:e5:68:97:
         e2:ae:f0:7a:58:8d:10:cf:51:e0:69:4f:98:8f:b1:64:9e:77:
         16:f6:9b:62:06:09:72:45:f8:28:42:82:45:15:74:87:29:9b:
         e9:ef:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----