Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e203434343836.roa
File:                     3230392e3230302e3235322e302f32342d3234203d3e203434343836.roa (raw, json)
Hash identifier:          6fOw7LbxafEamOULZiEm61WAYvAJ1RJ7gqn6rZZQItM=
Subject key identifier:   93:83:54:6E:C0:2D:92:AD:F2:88:77:D5:21:07:6B:D2:4C:F7:FD:8D
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       566CBF96C5C22A390B77A1F34AD1B6501AB417C8
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e203434343836.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     44486
IP address blocks:        209.200.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6c:bf:96:c5:c2:2a:39:0b:77:a1:f3:4a:d1:b6:50:1a:b4:17:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=9383546EC02D92ADF28877D521076BD24CF7FD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:63:2c:37:bd:97:d4:4a:bd:18:83:90:a8:
                    59:6c:b6:b3:ee:60:d0:ee:b1:f1:f4:6a:25:25:81:
                    b0:3e:5f:2a:ac:50:c9:5a:57:f7:f6:66:4e:7c:8a:
                    9b:a1:f6:c6:9a:e5:a3:e9:b7:8c:b5:7f:69:e2:3e:
                    7d:49:89:26:11:77:fd:f4:94:e1:c3:f6:0b:9d:46:
                    20:0e:4a:6a:20:83:dd:25:b6:54:a9:2b:ef:26:fe:
                    54:8c:3c:2e:68:f6:a7:52:a2:0d:13:ea:dd:8e:40:
                    10:32:6e:95:8c:fa:d8:89:cc:f5:9a:3f:94:b1:f8:
                    dc:19:7c:6f:cd:fd:04:05:0d:6c:1e:47:4a:70:71:
                    a8:e5:05:ec:56:24:df:cf:be:df:f5:58:c3:aa:13:
                    2b:8c:ed:e2:36:fd:97:36:a8:1a:ca:6c:95:42:df:
                    38:1a:e0:6b:0b:30:c4:f4:9f:c8:a9:1a:96:7e:5e:
                    3e:09:60:80:a8:1a:5e:ab:6f:a0:5e:61:85:c5:f0:
                    f8:5f:cf:a8:15:10:a1:6b:50:5f:ff:66:ac:6b:6d:
                    5b:30:71:9f:04:3e:c3:4c:2d:34:eb:fe:45:4d:c7:
                    cc:94:b5:d5:18:ca:f0:4b:c6:40:c4:e8:e5:7f:fc:
                    01:8b:7d:23:c2:09:18:83:b0:a9:24:aa:ce:f7:2f:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:54:6E:C0:2D:92:AD:F2:88:77:D5:21:07:6B:D2:4C:F7:FD:8D
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e203434343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:56:03:81:80:29:63:80:eb:f4:b4:4a:85:63:4c:4b:f6:b5:
         d0:1c:00:02:8c:c1:93:82:b5:d5:f4:0e:96:58:a0:af:d3:cb:
         06:28:f8:34:cf:ad:f4:41:d7:33:e2:6c:ca:ac:f8:2a:55:50:
         ba:e4:5b:ea:42:96:98:a5:cd:12:54:af:48:89:41:d5:42:92:
         e3:17:3b:96:e0:40:4e:82:84:e0:2b:e1:44:7a:ab:e7:4f:20:
         2d:ec:69:6f:9d:5f:2a:33:4f:3c:40:1d:9a:3b:d2:8c:73:f9:
         4f:61:67:ed:a1:36:c0:5a:87:d7:e8:12:95:c5:27:78:07:37:
         7e:6f:4b:23:2d:5e:3a:53:e6:4b:34:17:a9:e4:98:a0:be:65:
         03:5c:e4:82:05:ed:f8:a7:e9:dc:5f:1d:bd:28:49:77:92:25:
         cf:8a:9e:b6:84:ae:53:8b:31:6a:e1:c2:6c:c2:dd:3e:98:de:
         4c:6f:e0:0b:0f:d6:60:0e:d2:41:af:17:e1:e4:6c:b9:74:31:
         f8:64:b4:bf:41:c6:dd:d2:c4:6f:88:fb:1c:16:b2:ed:fc:0c:
         bb:82:10:34:e4:60:e4:fe:6b:a0:94:f3:41:5f:eb:ad:85:c1:
         65:79:b7:08:74:5d:5d:eb:b0:02:ba:2d:cb:29:0a:bc:71:a9:
         a6:e1:77:60
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUVmy/lsXCKjkLd6HzStG2UBq0F8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA2WhcNMjMxMTE1MTEyOTA2
WjAzMTEwLwYDVQQDEyg5MzgzNTQ2RUMwMkQ5MkFERjI4ODc3RDUyMTA3NkJEMjRD
RjdGRDhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf1jLDe9l9RK
vRiDkKhZbLaz7mDQ7rHx9GolJYGwPl8qrFDJWlf39mZOfIqbofbGmuWj6beMtX9p
4j59SYkmEXf99JThw/YLnUYgDkpqIIPdJbZUqSvvJv5UjDwuaPanUqINE+rdjkAQ
Mm6VjPrYicz1mj+UsfjcGXxvzf0EBQ1sHkdKcHGo5QXsViTfz77f9VjDqhMrjO3i
Nv2XNqgaymyVQt84GuBrCzDE9J/IqRqWfl4+CWCAqBpeq2+gXmGFxfD4X8+oFRCh
a1Bf/2asa21bMHGfBD7DTC006/5FTcfMlLXVGMrwS8ZAxOjlf/wBi30jwgkYg7Cp
JKrO9y8ZaQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJODVG7ALZKt8oh31SEHa9JM
9/2NMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM0MzQzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cj8MA0GCSqGSIb3DQEB
CwUAA4IBAQBCVgOBgCljgOv0tEqFY0xL9rXQHAACjMGTgrXV9A6WWKCv08sGKPg0
z630Qdcz4mzKrPgqVVC65FvqQpaYpc0SVK9IiUHVQpLjFzuW4EBOgoTgK+FEeqvn
TyAt7GlvnV8qM088QB2aO9KMc/lPYWftoTbAWofX6BKVxSd4Bzd+b0sjLV46U+ZL
NBep5JigvmUDXOSCBe34p+ncXx29KEl3kiXPip62hK5TizFq4cJswt0+mN5Mb+AL
D9ZgDtJBrxfh5Gy5dDH4ZLS/Qcbd0sRviPscFrLt/Ay7ghA05GDk/muglPNBX+ut
hcFlebcIdF1d67ACui3LKQq8camm4Xdg
-----END CERTIFICATE-----