Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
File:                     3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          bv1qfI1qR+WOoPMyjnAEo7+nOKgEDhtBFT3TBjzs/yI=
Subject key identifier:   AF:4F:C7:4D:16:0B:48:CA:2B:64:DC:72:4D:53:F3:3D:00:92:F6:7D
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7FEE97957CAE683CCFAE0A74CC28979A640284AF
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     1239
IP address blocks:        216.227.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:97:95:7c:ae:68:3c:cf:ae:0a:74:cc:28:97:9a:64:02:84:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=AF4FC74D160B48CA2B64DC724D53F33D0092F67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:95:65:bd:75:55:29:66:6e:0e:09:1a:e1:
                    d3:3c:94:15:a7:1e:f7:81:79:07:45:c8:ef:23:bd:
                    c4:26:2c:be:0a:de:1b:ef:c5:8d:04:0c:03:bf:fd:
                    b7:60:8b:51:2b:40:d6:62:7c:b9:0d:03:34:1c:5c:
                    46:c2:73:a9:a8:c4:75:6e:db:1c:cc:f1:a8:2c:f7:
                    3b:ce:1d:60:42:6e:7c:e1:cb:f5:bf:3d:3c:62:0f:
                    d8:62:52:75:9f:41:48:b4:15:8d:cf:87:7e:2e:3a:
                    7a:06:54:05:12:7e:f7:13:9c:76:15:f9:39:ab:26:
                    4e:2a:43:c5:52:4b:4f:30:15:2a:ed:f2:d9:66:a6:
                    47:96:3a:0e:05:10:f7:c0:32:9e:38:de:1d:6d:f7:
                    3d:e9:48:7b:62:cb:47:1b:ab:f7:d3:78:d3:5c:22:
                    e7:ed:c3:a3:68:cd:02:29:73:bc:db:5c:bb:b5:2b:
                    55:42:6a:7e:d1:d3:cf:b3:52:d1:94:11:ef:17:e7:
                    88:ac:5c:3a:3e:0f:58:d3:bf:51:4e:8b:8b:c6:4e:
                    41:eb:35:13:0e:b4:be:eb:53:02:63:82:da:e6:1a:
                    36:2f:44:43:a8:45:97:42:5c:36:4d:ec:1f:35:aa:
                    05:16:08:d0:5f:82:13:91:2e:56:e8:f6:d5:c4:02:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4F:C7:4D:16:0B:48:CA:2B:64:DC:72:4D:53:F3:3D:00:92:F6:7D
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:3f:54:6b:c0:e5:23:5f:ad:02:13:45:83:15:a9:3d:f5:
         e3:57:c6:8d:f5:0d:12:c7:c0:dd:62:9b:47:c9:c0:91:3e:30:
         d3:51:5c:4f:40:f9:62:99:44:ca:4c:ea:83:31:19:98:0b:f6:
         42:23:30:1c:2f:24:e6:c0:31:d2:aa:6d:0e:c2:6b:f5:c2:92:
         0a:ea:7c:22:8d:ed:8d:d7:9c:ab:c0:6c:67:6c:35:2e:b4:77:
         2c:a4:ed:5b:b6:24:51:62:af:38:d8:2c:57:0e:b5:b1:45:5f:
         e5:7f:c4:77:87:cf:71:d0:e5:ab:5c:fe:94:4e:7c:f7:05:e7:
         d7:89:6d:32:e0:9e:3e:fa:a2:7d:e7:55:ca:e1:33:aa:1b:6a:
         20:46:a6:b0:ba:c6:d4:2c:b1:75:48:18:43:ef:93:e9:6d:ce:
         af:cd:6b:dd:2a:d5:53:62:93:5d:d0:6d:74:a9:c0:3b:6e:ff:
         1d:97:8c:b6:ce:84:69:42:29:36:93:48:ba:bf:e1:b5:99:db:
         62:e5:17:de:6f:f3:0c:89:e7:25:81:42:96:7d:68:c8:3a:3f:
         93:8d:26:9b:15:53:71:bd:88:0b:a3:22:35:e0:13:92:f9:e5:
         82:6a:97:d5:9c:a2:de:a8:d5:bb:ed:56:70:af:fe:bc:65:03:
         0f:87:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----