Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e203631313338.roa
File:                     3230392e3230302e3235332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          SZO4FiB75TUmD9FtSdm3qFoY0K8mpAWdh5iPIVupJNE=
Subject key identifier:   CE:91:02:4B:7A:6A:97:E2:97:D0:1D:B2:DB:7C:C8:07:1D:72:ED:FC
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3964F2694445AF1B48FBE69855A3DFC5CCBE860F
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 16 Nov 2022 11:29:02 +0000
ROA not before:           Wed 16 Nov 2022 11:24:02 +0000
ROA not after:            Wed 15 Nov 2023 11:29:02 +0000
asID:                     61138
IP address blocks:        209.200.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:64:f2:69:44:45:af:1b:48:fb:e6:98:55:a3:df:c5:cc:be:86:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:02 2022 GMT
            Not After : Nov 15 11:29:02 2023 GMT
        Subject: CN=CE91024B7A6A97E297D01DB2DB7CC8071D72EDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:3c:79:8d:74:ca:cb:8d:a3:e5:43:fd:dd:
                    ca:a1:3d:e4:9a:17:26:e7:48:46:82:67:64:9b:eb:
                    a8:b4:3a:9f:2d:dd:0e:bd:7e:9b:fe:e9:75:fa:d6:
                    50:b3:ee:45:d2:a8:f3:50:bf:5e:fc:95:fc:fd:79:
                    ee:1e:b8:5c:26:84:75:98:6c:b5:54:b8:dd:9f:1b:
                    7f:d0:42:47:19:97:12:0b:0f:f4:d4:2a:58:6d:ec:
                    e7:50:4a:2e:c5:d8:2e:2c:38:fb:30:08:92:f3:25:
                    29:de:d0:86:4a:c0:99:94:72:a1:ab:75:23:d0:29:
                    66:f3:71:41:b2:0f:fe:e9:8c:bb:44:66:67:8c:db:
                    8f:8d:c1:bf:6a:2b:8b:6a:0c:34:3d:3a:cc:f8:92:
                    5b:6b:a6:57:44:fc:b1:0b:0c:98:a5:a3:1f:5c:00:
                    b3:8c:81:e5:fe:b8:41:84:23:e4:fd:ca:36:cb:3c:
                    76:ff:db:64:4d:45:2b:07:7e:c6:91:7e:fd:58:00:
                    57:8f:89:56:3b:61:4f:a1:74:33:ef:b6:50:7f:8d:
                    ca:11:cf:97:ef:d3:51:b2:41:96:19:0a:5a:0c:70:
                    b3:0c:01:15:e9:71:38:b2:dd:b0:f5:43:6a:2d:a5:
                    30:03:4f:9f:63:ae:8e:85:c5:1b:c9:74:9f:86:78:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:02:4B:7A:6A:97:E2:97:D0:1D:B2:DB:7C:C8:07:1D:72:ED:FC
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:99:c2:aa:f3:e1:e7:f0:d9:ab:d7:15:d5:dc:32:03:bf:
         d5:6a:0f:02:79:d3:bb:34:57:16:3b:17:8f:67:be:5b:13:f2:
         49:fb:11:09:4e:89:d6:f5:fd:84:0c:bc:df:90:6e:ca:52:44:
         ae:52:2a:05:8b:0b:78:bb:0b:f0:dc:6d:b8:87:53:0b:5f:22:
         4e:11:1f:9d:09:05:2b:17:f8:27:93:a3:2c:1e:5a:97:d9:98:
         57:36:16:74:e0:00:10:dc:c8:dd:9e:3a:a4:77:9f:61:09:e9:
         05:aa:0c:26:94:98:55:c0:e9:09:4f:cf:e6:b0:df:54:f6:b5:
         15:ea:cd:2c:2f:b9:dc:8f:b7:61:28:69:dd:47:f6:4f:44:2d:
         51:f4:78:c9:5c:be:62:0b:c0:36:97:a0:cf:47:f8:37:af:68:
         74:61:e8:4c:2a:fe:6b:85:e1:67:51:10:27:a4:ae:94:27:86:
         b0:f1:55:8e:05:1f:42:12:29:8d:23:1a:12:a6:ff:48:d3:da:
         87:69:c9:b7:5a:03:6e:08:a2:84:ed:00:52:84:83:d0:1e:fd:
         4b:8a:23:07:db:24:07:94:3e:f6:62:a3:c6:0c:63:a0:9e:25:
         45:96:2d:8b:a3:1a:03:86:13:af:6b:a7:49:46:0a:a6:fa:01:
         cb:6b:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----