Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa
File:                     3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          IR8GUWzb0xLObfOblPyDN0ULtfItBlwLylZ0ZfYJKZo=
Subject key identifier:   3D:18:B6:84:C5:83:00:1D:F6:34:6F:AC:F0:59:A4:F6:56:70:E6:46
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0350208134981099FC5DDB9FE0BFD619D5DD0983
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa
Signing time:             Wed 16 Nov 2022 11:29:03 +0000
ROA not before:           Wed 16 Nov 2022 11:24:03 +0000
ROA not after:            Wed 15 Nov 2023 11:29:03 +0000
asID:                     211585
IP address blocks:        209.200.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:50:20:81:34:98:10:99:fc:5d:db:9f:e0:bf:d6:19:d5:dd:09:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:03 2022 GMT
            Not After : Nov 15 11:29:03 2023 GMT
        Subject: CN=3D18B684C583001DF6346FACF059A4F65670E646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:21:42:ff:1a:11:a9:7a:71:70:a7:d3:28:
                    cd:58:4d:f0:55:a9:0f:cb:e4:6e:19:12:ec:7b:bf:
                    c8:3c:86:a2:4b:c7:63:25:66:ff:fc:55:86:ed:e0:
                    b9:7f:e9:b0:21:c4:e5:6b:bf:39:75:91:74:ec:85:
                    85:a0:83:97:8e:18:a0:66:d4:cd:09:e1:5e:42:03:
                    4e:b5:39:ea:c6:6b:0f:77:19:c8:89:15:c4:6c:79:
                    1c:4f:31:cb:ac:0d:76:66:ad:e2:b6:69:9d:e2:69:
                    63:12:34:be:c9:9c:d6:25:e9:37:9c:f5:44:a3:c8:
                    5c:8f:a9:8c:2a:08:23:6a:60:54:46:c8:29:da:04:
                    ee:91:80:2c:be:cd:11:40:d4:bd:ca:42:82:8d:28:
                    5d:38:b6:da:58:14:69:8d:75:af:f5:52:7e:9f:d0:
                    f5:0e:77:f9:d5:02:12:c6:2f:3f:7a:71:ef:7a:2f:
                    d6:74:df:ab:80:1c:e8:6f:e4:eb:eb:21:5f:54:d5:
                    fd:32:d0:b1:50:82:a2:bc:f0:64:3b:fb:04:b1:b8:
                    66:cb:e8:14:de:6f:5d:20:33:cc:82:c4:3e:df:91:
                    4d:db:e9:69:30:b0:3c:a6:b5:68:80:73:2d:a4:8f:
                    be:10:f2:f2:fb:03:ef:c2:84:b0:76:17:53:9d:40:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:B6:84:C5:83:00:1D:F6:34:6F:AC:F0:59:A4:F6:56:70:E6:46
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:60:e9:9a:ea:95:e8:39:44:82:d1:61:bd:05:71:9c:bf:2a:
         f2:a7:fa:51:10:29:96:32:09:ff:33:c8:07:04:f8:1d:3f:56:
         12:cb:59:51:3d:bf:01:cc:0b:9f:ca:44:7a:2e:96:ca:bb:bc:
         83:b2:ff:ae:a1:54:6d:0a:7c:5b:98:1c:97:78:05:de:cf:54:
         3c:36:f9:be:25:a0:25:2f:df:05:da:e6:18:fe:59:99:28:ba:
         dc:39:80:9b:c6:28:c0:49:fa:2e:86:c8:65:a9:b3:67:08:9e:
         49:2a:a2:10:79:3e:3d:97:04:8f:3d:b1:80:68:a7:a9:6b:fb:
         86:f0:33:73:38:6b:c5:1a:c8:9d:57:ab:e1:a4:3a:1c:c1:45:
         35:e4:58:6b:f4:fe:7f:47:a8:c9:8a:73:72:9b:a7:d5:e8:ec:
         dc:4a:57:1e:6e:e5:0e:6f:94:0a:82:10:32:d4:06:4a:fd:6e:
         2c:e2:16:d2:c0:69:18:86:15:46:a2:c4:7c:f5:8a:0a:df:70:
         6f:1b:d1:de:a8:34:4a:6d:83:bf:66:c1:0b:08:63:11:1f:30:
         6c:00:12:d3:a5:59:94:63:57:d7:1b:7a:31:97:91:86:a3:66:
         94:c9:f6:3e:b1:54:47:a2:41:38:2b:45:1a:1f:23:e4:a4:77:
         bd:16:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----