Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231322e302f32342d3234203d3e203434343836.roa
File:                     3231362e3232372e3231322e302f32342d3234203d3e203434343836.roa (raw, json)
Hash identifier:          yZE4i6bZQ+n7nGBIYDDjs8b3exyCFbp9aK2HBhvhTW8=
Subject key identifier:   EC:C1:C3:10:FF:3E:90:03:67:6E:5C:8F:21:18:83:7F:67:8B:BE:B0
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       5630A59FE18A9F30675D2960BA0EE92DFA3E8322
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231322e302f32342d3234203d3e203434343836.roa
Signing time:             Wed 16 Nov 2022 11:29:07 +0000
ROA not before:           Wed 16 Nov 2022 11:24:07 +0000
ROA not after:            Wed 15 Nov 2023 11:29:07 +0000
asID:                     44486
IP address blocks:        216.227.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:30:a5:9f:e1:8a:9f:30:67:5d:29:60:ba:0e:e9:2d:fa:3e:83:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:07 2022 GMT
            Not After : Nov 15 11:29:07 2023 GMT
        Subject: CN=ECC1C310FF3E9003676E5C8F2118837F678BBEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:98:e9:34:50:7a:b8:71:f0:8c:77:20:a5:
                    92:9b:45:df:08:9d:fe:8e:f1:ca:db:d0:49:c5:de:
                    2a:ff:35:6d:33:8a:da:f6:1a:a2:f7:01:80:5c:a3:
                    a8:8c:74:10:74:a6:56:45:7d:ae:28:9c:0c:86:74:
                    c1:23:ba:44:0f:84:10:c1:dc:33:e1:b3:18:69:4b:
                    87:4d:00:4e:20:8d:e9:30:03:4e:6a:1f:8a:82:c2:
                    2a:bc:9b:fa:98:90:a3:1a:d8:87:0d:67:39:fb:9d:
                    e0:0c:ed:01:2b:9a:1f:b2:98:8d:f1:c1:7c:e7:4a:
                    2f:a9:b1:fc:f1:6c:f5:35:c5:ad:6a:62:81:60:8a:
                    4f:d2:99:4b:14:27:07:c1:2b:ae:b4:40:66:59:d3:
                    61:66:4a:f1:cf:04:96:06:28:59:13:35:8c:93:12:
                    39:b3:9b:9a:08:b0:c2:7d:88:de:00:53:02:00:49:
                    5b:5a:37:5d:4c:d1:ec:8e:f4:4e:ab:04:5c:7d:a7:
                    91:71:51:dd:32:11:18:6b:6d:83:1e:a9:81:35:f5:
                    d7:b4:d7:2c:22:a7:42:4d:18:f1:00:dd:d2:77:5d:
                    04:19:85:47:8b:2a:f5:bd:78:26:12:38:fb:2e:24:
                    50:86:aa:6f:50:5e:a2:03:1e:25:21:c7:33:a0:ff:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:C3:10:FF:3E:90:03:67:6E:5C:8F:21:18:83:7F:67:8B:BE:B0
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231322e302f32342d3234203d3e203434343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:c1:dd:9a:c8:de:c2:0c:d0:95:5f:d2:d1:91:ec:fd:15:
         b5:4e:8f:0b:c5:cd:78:96:2a:13:a6:97:ff:2f:8d:be:5f:7c:
         02:7d:e0:91:a4:e8:f6:08:58:73:b5:b7:39:4d:43:d6:ff:5a:
         e7:d8:73:b3:85:f6:67:a4:94:a2:ba:69:ba:93:a7:10:5b:8b:
         ba:dc:b8:64:c5:c1:8d:3d:44:56:84:57:8f:87:73:e9:79:69:
         0f:46:c3:9f:4a:b3:d2:49:2a:4a:4a:3a:cf:84:95:79:76:17:
         20:eb:cb:b5:bf:9f:da:3e:08:39:1f:d3:57:c6:e4:87:f0:da:
         00:4b:7c:ee:c8:7b:59:e3:66:f6:2d:02:b1:07:d3:bf:6b:14:
         cc:e5:e6:8f:35:27:a8:d0:23:7e:e9:a8:39:c5:78:23:b6:78:
         d3:a5:8d:f9:1b:f7:73:66:ab:c0:ce:cb:b5:01:da:18:9b:2a:
         9a:90:75:5c:d6:db:33:15:75:da:7d:ba:5b:7c:33:e9:04:eb:
         28:61:68:f5:f0:08:ba:96:d8:94:bb:3e:48:cd:64:4a:b9:89:
         5b:a6:7a:e2:77:fd:ca:78:9c:e0:7e:5c:65:59:d1:f8:04:db:
         ca:c6:2f:17:2c:09:9f:55:72:a0:e5:e7:66:1c:54:e1:88:7a:
         25:ff:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----