Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa
File:                     3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa (raw, json)
Hash identifier:          uVDxEyONFyKgwWuJZnTNjp+woy6F0Pz2VYz3EW5hE8c=
Subject key identifier:   A2:DD:11:62:74:7E:06:D9:18:2A:66:78:60:4D:58:CC:CB:E0:20:0C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7630164E39CD85F95CA8470173CECD51B21779B7
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     211061
IP address blocks:        209.200.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:30:16:4e:39:cd:85:f9:5c:a8:47:01:73:ce:cd:51:b2:17:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=A2DD1162747E06D9182A6678604D58CCCBE0200C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:6d:93:33:f0:a4:8c:e1:04:28:98:23:42:
                    dd:b6:be:43:2b:48:bb:13:a3:66:3b:3b:e2:48:58:
                    3e:66:df:6c:b4:82:4a:1e:1f:6d:23:0f:ba:f5:3e:
                    c5:c3:fe:1d:50:43:57:4a:1f:c7:cd:f9:b2:e3:62:
                    cd:c8:10:fc:58:69:3b:dd:6b:22:d8:9f:1d:ea:a6:
                    6f:f6:9f:ce:7d:f6:e2:0b:ab:38:4a:fb:8c:c5:7a:
                    b5:12:8c:8f:2a:a5:38:05:9c:02:5d:0c:e5:fb:19:
                    64:99:59:9d:1a:70:85:4e:1f:51:22:43:33:d2:d9:
                    b8:61:1f:74:93:ee:72:a4:e3:89:59:d4:4d:09:49:
                    7b:9d:8b:ce:8b:78:5e:92:32:f7:88:f4:3a:11:db:
                    11:42:ff:45:15:c8:b5:7c:33:09:81:b8:70:5f:15:
                    c5:dc:ed:23:11:16:db:8c:c7:b9:74:95:a9:c2:5d:
                    25:d5:9e:5b:b4:34:d7:ff:ab:cc:12:01:a6:8a:e7:
                    43:e1:ba:78:ee:eb:ef:b5:de:c5:da:40:60:ee:35:
                    66:61:05:28:0d:01:a6:36:6e:b9:65:32:66:02:86:
                    34:c5:e9:15:9a:bc:11:d1:35:2f:1e:28:98:1f:5d:
                    02:dc:9a:1e:45:f5:d2:21:72:da:60:0f:37:db:46:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DD:11:62:74:7E:06:D9:18:2A:66:78:60:4D:58:CC:CB:E0:20:0C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e20323131303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:b1:c0:d5:77:bd:1c:7e:d4:d4:ea:4d:45:bc:c1:e3:d3:
         1e:37:b6:f4:4b:3a:5e:54:c6:ba:df:a4:9c:52:1f:89:99:d6:
         06:2e:aa:0b:f1:44:ae:bb:b8:0d:b7:98:ef:00:d7:b2:7d:44:
         38:14:44:f5:eb:4e:76:79:0e:09:b0:8a:f9:02:0c:f6:b0:7d:
         a0:70:83:85:e5:fe:d3:69:eb:6b:31:49:0f:a3:20:87:23:72:
         fd:30:32:e7:54:06:4c:0f:51:a4:fb:2b:81:a8:5d:47:bc:6d:
         96:21:92:45:98:b8:fe:70:83:7e:18:52:2d:1c:24:32:38:3f:
         38:e7:a1:8e:47:48:33:7d:1c:bb:90:9b:a0:28:63:5a:97:16:
         ca:02:fb:08:ac:93:d7:18:bc:9e:4a:37:72:a2:07:6e:e2:cd:
         02:69:3b:3b:f6:a0:78:ab:54:c6:59:bb:6c:10:ba:34:0e:c0:
         a7:9a:85:bd:75:d9:ad:b9:ad:da:38:ab:67:de:c6:f9:b1:c7:
         b2:c5:79:e1:a4:cc:05:3a:f7:60:9f:37:8b:d7:1b:15:c3:f5:
         0c:69:48:f5:ba:70:16:d8:12:9b:0d:a2:fe:8c:a7:fb:50:b0:
         fc:1f:5f:c0:a0:dc:32:fa:ad:0f:e4:7b:72:95:64:a8:22:9b:
         d3:4a:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----