Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa
File:                     3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          cdzxUP1hEkiEb+t5jNoAvbuXyLr8pEMd5FSmI6zUfAA=
Subject key identifier:   4B:B9:BF:4D:A2:F5:85:23:46:03:C0:DA:DE:FF:FE:BC:E0:60:94:25
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       6B529E3E6D0F71C34ED5A2CD948539389CF4EDBD
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa
Signing time:             Mon 18 Jul 2022 14:10:04 +0000
ROA not before:           Mon 18 Jul 2022 14:05:04 +0000
ROA not after:            Mon 17 Jul 2023 14:10:04 +0000
asID:                     8100
IP address blocks:        209.200.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:52:9e:3e:6d:0f:71:c3:4e:d5:a2:cd:94:85:39:38:9c:f4:ed:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:04 2022 GMT
            Not After : Jul 17 14:10:04 2023 GMT
        Subject: CN=4BB9BF4DA2F585234603C0DADEFFFEBCE0609425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:e7:89:69:a5:f7:56:cc:03:a1:8e:cf:50:
                    1d:d9:7c:cb:5e:b9:58:8d:37:d3:a2:fa:fb:c5:e8:
                    f1:07:2a:03:32:a4:62:fa:5d:4a:73:3a:d7:9d:76:
                    91:b7:89:7b:4e:74:2f:27:fe:10:29:ee:de:38:61:
                    33:c3:70:c2:af:d6:13:f0:3c:60:2b:84:6f:ee:b2:
                    c2:1a:57:f2:52:c1:8a:7c:64:a4:0e:d9:f7:ae:68:
                    f0:79:67:2e:98:52:c8:2b:11:43:0a:e8:5a:ab:1e:
                    b4:28:d8:c7:7d:74:f3:ed:10:96:26:9c:7b:c9:18:
                    70:36:bb:21:b2:90:f6:f3:d5:98:f8:a5:bb:f5:02:
                    e5:5a:ba:7d:c0:82:2b:06:f1:75:6e:51:2c:72:13:
                    b2:f6:91:05:d8:02:38:09:74:fd:1d:19:94:c6:b9:
                    1f:7a:96:b6:22:f5:4d:f6:31:b1:e7:6d:a7:2c:77:
                    13:32:f7:06:c9:12:2f:72:46:ff:4b:d1:ac:e6:ce:
                    18:f3:7a:12:98:94:5a:fc:e9:30:ff:0c:2f:b5:d2:
                    c9:af:5b:2e:05:27:c4:d3:2f:ef:2c:57:26:f0:48:
                    f5:31:57:51:ad:b4:58:08:4c:a3:2d:be:97:1f:b1:
                    bf:d5:2e:27:c2:ba:59:4a:00:53:48:b8:9e:af:01:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:BF:4D:A2:F5:85:23:46:03:C0:DA:DE:FF:FE:BC:E0:60:94:25
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:89:a6:75:21:a5:ed:82:fb:fa:23:78:b9:69:1a:9c:9f:fd:
         1c:6a:fe:d5:cd:bd:1d:04:1f:e9:6b:78:19:a5:48:ae:db:14:
         d2:fd:a4:00:82:19:0b:ee:e5:84:81:1f:45:88:bd:8f:b3:63:
         2a:93:2f:e2:cb:80:3d:3b:d9:e4:67:9e:d1:36:cc:5e:a5:88:
         9c:39:17:71:d8:71:59:80:e1:78:8b:90:01:7e:88:74:b7:10:
         35:af:d0:7a:7a:05:81:c6:25:b5:4f:71:36:33:cc:5b:a5:b2:
         82:81:bb:66:45:30:b5:3c:90:2d:a1:f1:a0:2a:63:a5:21:cd:
         5e:49:45:0c:11:bb:ea:94:58:11:e6:c7:7a:c1:cc:87:94:12:
         20:e3:3f:c2:82:c2:23:b3:37:cf:e7:3f:1c:f3:0f:85:84:3a:
         71:f1:52:6e:47:6f:7a:d3:d3:50:86:5d:46:ac:7d:b7:aa:33:
         56:1c:f7:20:35:f3:a8:d0:72:54:20:02:9c:16:7e:8e:fb:ec:
         16:0e:21:a0:ba:33:0c:08:89:a9:a7:ce:13:bb:38:f2:31:8f:
         2f:43:c2:99:4c:d5:a5:2f:9f:21:19:20:79:46:0f:7a:2b:fa:
         c1:aa:7c:4a:53:29:cd:e4:62:9d:bc:f5:9f:5d:c6:1a:cc:5e:
         df:02:09:60
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUa1KePm0PccNO1aLNlIU5OJz07b0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTA0WhcNMjMwNzE3MTQxMDA0
WjAzMTEwLwYDVQQDEyg0QkI5QkY0REEyRjU4NTIzNDYwM0MwREFERUZGRkVCQ0Uw
NjA5NDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ3niWml91bM
A6GOz1Ad2XzLXrlYjTfTovr7xejxByoDMqRi+l1KczrXnXaRt4l7TnQvJ/4QKe7e
OGEzw3DCr9YT8DxgK4Rv7rLCGlfyUsGKfGSkDtn3rmjweWcumFLIKxFDCuhaqx60
KNjHfXTz7RCWJpx7yRhwNrshspD289WY+KW79QLlWrp9wIIrBvF1blEschOy9pEF
2AI4CXT9HRmUxrkfepa2IvVN9jGx522nLHcTMvcGyRIvckb/S9Gs5s4Y83oSmJRa
/Okw/wwvtdLJr1suBSfE0y/vLFcm8Ej1MVdRrbRYCEyjLb6XH7G/1S4nwrpZSgBT
SLierwHehwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEu5v02i9YUjRgPA2t7//rzg
YJQlMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjM1MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI/DANBgkqhkiG9w0BAQsF
AAOCAQEAZ4mmdSGl7YL7+iN4uWkanJ/9HGr+1c29HQQf6Wt4GaVIrtsU0v2kAIIZ
C+7lhIEfRYi9j7NjKpMv4suAPTvZ5Gee0TbMXqWInDkXcdhxWYDheIuQAX6IdLcQ
Na/QenoFgcYltU9xNjPMW6WygoG7ZkUwtTyQLaHxoCpjpSHNXklFDBG76pRYEebH
esHMh5QSIOM/woLCI7M3z+c/HPMPhYQ6cfFSbkdvetPTUIZdRqx9t6ozVhz3IDXz
qNByVCACnBZ+jvvsFg4hoLozDAiJqafOE7s48jGPL0PCmUzVpS+fIRkgeUYPeiv6
wap8SlMpzeRinbz1n13GGsxe3wIJYA==
-----END CERTIFICATE-----