Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          MJxh2ibz3UZyhMtweLFgn+yNCGRbnxzTWl1KuJl6Sr4=
Subject key identifier:   EC:DB:61:36:00:B9:78:51:3D:A1:F1:80:11:61:DF:EC:66:1C:4D:02
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       21862CADD52F3636352F89DF3C9555CACBD0F9A1
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 18 Jul 2022 14:09:55 +0000
ROA not before:           Mon 18 Jul 2022 14:04:55 +0000
ROA not after:            Mon 17 Jul 2023 14:09:55 +0000
asID:                     7018
IP address blocks:        209.200.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:86:2c:ad:d5:2f:36:36:35:2f:89:df:3c:95:55:ca:cb:d0:f9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:55 2022 GMT
            Not After : Jul 17 14:09:55 2023 GMT
        Subject: CN=ECDB613600B978513DA1F1801161DFEC661C4D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:8f:65:f7:10:df:91:39:c2:ac:cb:14:a0:
                    ee:9b:cc:b9:c1:90:55:d9:77:0f:6f:92:e6:47:8c:
                    bb:d0:29:91:a4:fb:45:e3:e7:b0:98:05:fb:c2:2f:
                    e1:8f:b5:b0:93:a4:cb:c5:21:03:02:ff:a1:7e:8e:
                    e1:e1:23:7d:c9:95:5d:5f:90:66:5b:3d:6c:c9:22:
                    d4:c5:32:90:7c:17:66:d1:67:0e:f5:21:8f:74:53:
                    08:0b:c0:7b:2f:f6:5d:be:46:77:7b:01:d8:71:88:
                    ef:d1:ef:2c:0e:37:dd:4e:ea:4a:55:b3:b8:cb:ce:
                    54:ac:1c:ed:ab:f7:7b:bd:ac:11:8c:fa:5a:d4:3f:
                    6f:2b:4d:58:46:2d:a9:c1:7f:70:00:cc:da:04:d7:
                    2e:15:b0:ef:d2:58:80:96:5e:f2:eb:b5:10:9d:90:
                    0d:b8:3b:42:54:0c:d9:a2:2f:7b:94:29:16:70:26:
                    5b:cd:f6:2f:22:ad:c2:7b:07:88:49:90:7b:19:17:
                    95:12:7c:41:56:94:11:d6:c6:c1:a0:40:1c:09:a7:
                    f4:46:fc:18:85:14:bb:76:b2:0a:42:83:90:72:57:
                    ef:7d:86:98:9d:41:32:bb:24:7d:66:69:32:c7:66:
                    b9:9d:a8:ee:77:b1:6b:f5:94:a0:16:0e:75:2a:9d:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DB:61:36:00:B9:78:51:3D:A1:F1:80:11:61:DF:EC:66:1C:4D:02
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:9e:fa:a9:67:d6:36:d4:d6:a9:2d:43:f0:d1:09:c3:6d:
         9f:48:c1:29:5a:0f:3d:66:9b:cd:0e:60:49:0d:ea:ac:02:81:
         1c:d3:3b:c8:25:0d:24:5e:9a:40:65:78:bd:88:7e:c9:df:a3:
         6c:e1:6b:64:de:2a:d8:36:0a:85:f8:be:64:67:40:96:bf:c9:
         36:bd:3a:ff:f0:48:ac:78:e8:13:6c:59:eb:39:7e:f6:f8:fe:
         6d:46:e0:74:42:6a:2f:da:65:a4:5d:2c:53:ac:3c:49:5d:f0:
         a6:c3:36:1a:7b:31:34:57:4c:b4:fd:74:ca:16:7e:ea:0f:89:
         08:ba:ad:45:8b:a0:1d:f5:9b:27:9b:9d:19:d9:5d:fd:88:81:
         db:01:e6:6d:3c:4a:5f:6d:9b:c7:40:d8:35:3b:a9:a2:4d:31:
         0d:55:ab:ca:db:7e:2b:86:3e:b5:bc:82:99:f8:7a:17:ce:d1:
         25:14:d6:33:94:5c:aa:4b:fe:1d:46:5c:47:84:92:ea:c9:91:
         3a:50:fc:c5:f1:fd:52:c1:60:ff:41:86:d9:aa:a6:c9:53:9d:
         be:ec:1c:11:3f:26:f4:93:a9:ea:29:32:cf:ac:eb:e3:9b:59:
         28:e4:80:19:f5:11:7a:3a:58:16:65:39:31:f4:36:91:05:ff:
         cf:2c:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----