Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa
File:                     3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          /WLNYTSWDYYdxi3FkIoE+/iTVwlmvkVuHpj/q5+TLOY=
Subject key identifier:   0A:A1:22:D0:3F:25:7A:A2:18:70:36:B1:08:8C:0D:EE:DD:BC:10:DA
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       55A10C9BE66CCA43BC7B45EA522FF548628730A5
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa
Signing time:             Mon 18 Jul 2022 14:10:12 +0000
ROA not before:           Mon 18 Jul 2022 14:05:12 +0000
ROA not after:            Mon 17 Jul 2023 14:10:12 +0000
asID:                     49999
IP address blocks:        216.227.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a1:0c:9b:e6:6c:ca:43:bc:7b:45:ea:52:2f:f5:48:62:87:30:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:12 2022 GMT
            Not After : Jul 17 14:10:12 2023 GMT
        Subject: CN=0AA122D03F257AA2187036B1088C0DEEDDBC10DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:5c:ad:e4:8d:ab:16:ab:f4:96:d1:34:0f:
                    48:66:a6:b4:87:8d:7f:30:1e:34:79:76:77:24:67:
                    47:67:d5:c9:66:bf:00:5d:8d:46:e4:8e:5d:ed:a5:
                    a1:c8:24:6d:a9:f7:d4:26:71:ff:45:7b:bb:f3:0f:
                    f1:51:6f:6c:17:3d:86:83:52:d4:e7:64:de:d5:ea:
                    50:27:92:bf:2d:07:d1:5a:d4:7f:6e:4d:a8:85:1b:
                    c7:80:5d:72:29:92:65:11:cf:e0:99:42:d2:30:c0:
                    24:b3:b6:90:3e:f1:b6:56:08:1b:6f:c7:38:1e:af:
                    6b:dd:51:e9:28:d0:4e:1c:df:f8:46:71:ad:62:30:
                    f5:a1:41:42:6a:92:c7:19:9c:82:5d:59:ca:1c:dc:
                    de:12:07:25:2d:0a:c8:4a:90:00:ac:e2:b6:46:7e:
                    93:1c:b7:3b:fa:af:59:5e:e6:aa:9e:e8:77:cf:7a:
                    65:70:e0:4c:35:b2:12:53:a2:4d:c9:41:69:55:ed:
                    75:64:36:7f:1d:fb:ce:d8:3a:2a:3a:bb:60:af:47:
                    28:0e:6e:0b:a7:5f:12:72:5a:13:d6:5f:a9:36:44:
                    6d:02:ce:2c:cf:59:da:33:ab:79:bc:d9:3c:fb:34:
                    d4:46:24:c4:e0:8d:c3:34:ca:2b:43:82:18:9a:cb:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A1:22:D0:3F:25:7A:A2:18:70:36:B1:08:8C:0D:EE:DD:BC:10:DA
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:56:00:51:19:5a:af:66:2a:b2:7a:22:81:db:9b:f4:43:da:
         d9:e8:11:6b:07:d8:ac:a1:7b:4a:41:63:5b:f9:21:87:53:69:
         4f:df:cf:8f:52:34:62:3d:34:ce:6f:e0:3b:62:8f:02:93:3f:
         95:0d:30:3b:22:0e:0a:7f:c6:d9:ef:21:9b:73:e1:60:d1:9c:
         5f:53:8f:6e:1f:96:dc:e5:79:96:bf:24:06:de:e6:32:da:98:
         40:04:30:ba:9f:9c:a7:eb:fe:76:90:1d:a4:c1:9e:61:f9:27:
         15:3a:fc:32:6c:ab:ff:89:74:55:5b:8d:e7:6e:5a:9b:d3:4c:
         36:91:a5:94:90:a9:a4:ff:8c:14:16:9c:67:64:21:6e:33:0f:
         a5:56:a0:fc:8e:96:fd:c0:4a:9a:db:55:bf:aa:40:06:5e:31:
         fd:9c:38:f7:e0:fb:eb:c7:38:de:82:10:a1:ac:3c:9c:98:b9:
         ca:3d:92:04:06:5a:2c:90:03:45:4c:79:1d:51:50:e3:ef:1e:
         dc:58:2b:b8:98:3f:f9:9b:a1:b8:89:4a:ec:a1:38:f0:ce:43:
         14:6b:2c:00:72:e0:63:63:8b:db:9e:3f:92:8d:4c:11:69:cb:
         1e:17:68:af:75:a7:fa:4c:f4:98:eb:82:eb:50:d4:77:ee:c2:
         ad:d3:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----