Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235342e302f32342d3234203d3e203630373231.roa
File:                     3230392e3230302e3235342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          dYrTZlshyX2DxftYgeUPm57fP0e6DwU4yVx6+n5+cA0=
Subject key identifier:   71:F0:05:E5:93:F4:F9:98:76:DF:9C:10:D0:54:44:D3:2A:AD:69:9C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4ACC14DA5E0B75A3E3D8FC5D48751969F7B33334
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235342e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 25 Nov 2022 04:15:11 +0000
ROA not before:           Fri 25 Nov 2022 04:10:11 +0000
ROA not after:            Fri 24 Nov 2023 04:15:11 +0000
asID:                     60721
IP address blocks:        209.200.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:14:da:5e:0b:75:a3:e3:d8:fc:5d:48:75:19:69:f7:b3:33:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 25 04:10:11 2022 GMT
            Not After : Nov 24 04:15:11 2023 GMT
        Subject: CN=71F005E593F4F99876DF9C10D05444D32AAD699C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:73:e0:49:00:8c:93:c1:00:0a:09:74:94:
                    79:0b:46:dc:83:2b:73:20:76:bf:35:a7:b8:01:26:
                    95:eb:3f:d0:b7:91:14:82:de:e2:a2:97:56:51:d0:
                    4b:50:bd:f8:05:55:3c:9b:f2:36:72:3b:37:ed:2f:
                    e4:28:ff:d8:3b:56:8a:13:4b:53:1a:f0:90:02:28:
                    11:d6:e2:a5:d2:6c:2a:42:9d:33:a1:0a:52:0d:7a:
                    90:df:ab:dc:f0:a8:43:f8:16:5b:23:71:54:1d:c4:
                    4a:a5:18:7b:6a:65:83:9e:5c:60:dc:da:d1:03:7d:
                    4c:e9:65:b0:cc:6a:99:15:5c:88:c2:1e:89:e6:52:
                    69:ef:e9:11:1d:65:f2:e0:6e:6a:5a:34:75:10:b4:
                    f8:5b:ca:b5:d0:27:dd:18:84:0f:35:bb:b2:51:b7:
                    41:a6:32:eb:50:84:bd:d8:44:12:38:d4:09:ab:42:
                    ef:02:79:6e:c0:6f:8d:55:d8:0a:e9:68:1f:e0:b3:
                    33:4b:04:69:d2:c4:8d:cd:94:f2:7e:b9:eb:39:4f:
                    3b:52:4e:90:14:81:63:e8:6b:f4:5c:06:68:e2:cc:
                    91:cf:56:b1:92:2d:4a:5d:6e:3a:98:30:56:18:d8:
                    53:92:a5:2a:7d:ac:6c:6e:d6:7a:39:b4:4d:a2:31:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F0:05:E5:93:F4:F9:98:76:DF:9C:10:D0:54:44:D3:2A:AD:69:9C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235342e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:86:b4:e0:a2:02:8c:5a:94:b6:8d:4a:3b:c7:36:de:33:
         83:bb:18:7a:49:76:44:9d:6b:ad:18:8d:0e:ed:13:e6:d5:9b:
         2e:2f:ef:41:0e:3d:a5:61:c9:4f:89:e3:0c:32:ba:b4:2e:e5:
         f0:46:2f:e4:c9:08:4a:46:c5:49:5c:77:9f:88:9b:d0:5f:b9:
         0a:d5:96:b6:c9:5a:77:df:cd:7e:3b:91:80:73:11:cf:fc:be:
         76:55:f5:d8:9d:bb:82:c2:3b:85:eb:7a:c7:fa:33:0f:69:3c:
         f1:ad:f2:2f:e2:53:8a:32:70:a3:2b:9f:4d:dd:17:10:05:c4:
         eb:83:6c:f0:fc:a9:a3:08:6f:a2:03:9d:39:a2:ae:62:76:77:
         45:86:cf:1e:7e:d8:83:b9:cb:e7:12:e7:bb:e9:8e:34:04:31:
         6b:e6:c1:00:79:6a:b3:70:c2:f2:ca:32:fc:bd:f0:f3:aa:4a:
         f2:b9:a5:86:66:b6:6c:e8:b8:74:8a:b6:f4:e0:8b:b2:7f:ca:
         99:d1:fd:9c:8e:89:db:fd:58:b6:a0:5d:64:6f:d4:a3:91:78:
         83:b4:5b:b4:2d:f5:62:a8:10:11:31:48:00:94:fb:c0:c8:a5:
         8f:60:f6:5f:4a:cd:fc:4f:cd:ef:10:db:e3:90:ff:0c:68:57:
         6c:fe:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----