Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231352e302f32342d3234203d3e203535313534.roa
File:                     3231362e3232372e3231352e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          mHT+/uhd/GMkqrsY8nL3bKgNksmfT8aLqe0tvb/4xvM=
Subject key identifier:   3D:50:CB:41:8B:34:F8:50:D1:86:06:20:4C:FA:6B:E0:6D:84:C1:50
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1E1FD9B3C27AF6D5CFDE51C2D29F583C50CEE9A3
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231352e302f32342d3234203d3e203535313534.roa
Signing time:             Mon 18 Jul 2022 14:09:52 +0000
ROA not before:           Mon 18 Jul 2022 14:04:52 +0000
ROA not after:            Mon 17 Jul 2023 14:09:52 +0000
asID:                     55154
IP address blocks:        216.227.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1f:d9:b3:c2:7a:f6:d5:cf:de:51:c2:d2:9f:58:3c:50:ce:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:52 2022 GMT
            Not After : Jul 17 14:09:52 2023 GMT
        Subject: CN=3D50CB418B34F850D18606204CFA6BE06D84C150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:7d:62:50:ee:0d:c6:b6:6d:95:bb:09:59:
                    83:39:38:24:58:d9:92:1e:09:55:c1:10:d7:41:d8:
                    4e:95:ff:da:c6:d8:a4:bf:8b:09:78:88:9c:9f:a7:
                    d9:01:8d:9a:b6:c8:fe:80:cb:95:ee:06:e4:74:86:
                    a9:df:27:7b:f3:83:77:9c:3f:02:83:84:90:66:f0:
                    1f:f8:08:9a:52:d8:2c:11:d0:b2:90:c0:a2:b3:42:
                    1b:a4:66:cf:99:3d:46:07:6b:be:10:1c:1e:d1:4f:
                    be:e2:9c:d3:b1:22:a9:95:00:5d:7d:89:03:78:04:
                    40:86:d9:29:f9:2e:b4:c7:1e:89:3d:ef:e9:e8:b2:
                    4d:d3:89:b6:8c:51:70:d8:a9:39:ce:3a:80:c0:e9:
                    ad:9c:ee:6f:92:e0:61:d8:b5:77:41:01:f2:17:99:
                    a3:61:1c:3d:4a:0b:36:4f:20:6c:7c:85:75:c0:54:
                    a6:ea:6d:26:5a:56:bf:5e:e6:13:96:4a:fc:c6:a7:
                    2e:11:ee:54:64:56:e8:69:21:20:19:9d:d4:d1:38:
                    74:96:0b:a7:1f:10:e8:31:1f:d1:12:6a:7c:80:04:
                    46:74:6f:cd:b9:85:fd:17:76:bd:50:50:09:7c:d8:
                    04:d6:ea:ad:87:7b:26:2f:27:68:fd:dd:2a:7f:a4:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:CB:41:8B:34:F8:50:D1:86:06:20:4C:FA:6B:E0:6D:84:C1:50
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231352e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:31:d7:6c:98:b8:19:67:a6:be:06:2d:41:2b:82:e7:70:5b:
         c0:52:c2:a1:13:4a:a6:7d:46:22:9a:21:76:5c:28:57:99:77:
         18:2d:a5:af:81:60:5c:8b:a6:6b:86:c3:31:56:33:89:07:84:
         20:3f:85:e6:b3:9b:fc:c6:54:7d:d6:d6:2a:2b:c6:f8:96:39:
         65:ab:4e:92:a8:7a:c3:97:5b:72:32:65:fc:e4:05:b4:68:8e:
         5c:0e:ae:5b:4d:f8:b4:66:63:71:ef:83:2f:a5:e4:b3:54:dc:
         90:52:5c:b9:70:c8:72:c7:a6:a8:48:a1:db:23:67:44:d9:e9:
         9a:1d:84:21:f0:f4:4d:39:ba:b0:9d:30:88:5a:8d:0c:b6:4a:
         f1:7d:b1:13:0b:4c:79:a1:a8:08:c2:55:da:de:a8:84:f9:cd:
         2d:63:92:c8:81:5a:62:62:8a:74:5a:b5:3a:58:2e:e9:2f:0b:
         5c:23:47:8a:7f:8b:78:c5:0f:a8:37:d9:1c:f7:7c:29:58:8e:
         6b:69:19:a0:d4:82:b1:c4:ed:31:84:df:7f:7b:33:ba:1b:5b:
         52:ed:e9:a7:22:fc:a7:97:47:92:8a:55:ed:90:1d:56:64:06:
         97:ae:cd:b5:70:cd:52:e7:37:bb:98:1b:6b:9f:79:18:4a:e6:
         e8:9f:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----