Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa
File:                     3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          1AKO3lijnWMstOb7nm8LN9m5KHfp8FM5cgVfTSAnj7s=
Subject key identifier:   27:21:1D:CF:F7:93:32:C0:4E:55:5B:8E:F7:1D:0E:76:EF:53:E3:5F
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       649B373F0703D86F6A822DF708AA65F4EF2BE0E0
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:02 +0000
ROA not before:           Wed 16 Nov 2022 11:24:02 +0000
ROA not after:            Wed 15 Nov 2023 11:29:02 +0000
asID:                     49999
IP address blocks:        216.227.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9b:37:3f:07:03:d8:6f:6a:82:2d:f7:08:aa:65:f4:ef:2b:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:02 2022 GMT
            Not After : Nov 15 11:29:02 2023 GMT
        Subject: CN=27211DCFF79332C04E555B8EF71D0E76EF53E35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:02:59:7b:1f:c0:87:ca:29:87:ea:3c:dd:
                    4c:18:d7:b3:ac:09:44:41:00:e2:52:07:f0:25:5c:
                    ce:f6:2b:85:c8:66:4d:4d:df:a2:51:23:dc:fb:99:
                    39:65:e4:d8:bf:23:9c:10:a7:a0:c2:74:32:fc:9b:
                    12:21:46:fc:ed:b1:a9:ab:ed:a2:1c:1c:d0:77:70:
                    13:27:1d:f2:52:a7:64:e1:77:43:30:cc:70:14:01:
                    f8:22:73:ba:2a:9e:25:20:1a:e2:92:56:a1:c5:29:
                    54:5b:26:dc:e6:15:62:a7:d4:34:fa:04:98:04:f6:
                    5d:48:2b:43:33:30:64:1f:33:74:0e:fd:46:34:01:
                    aa:c8:d1:04:28:5c:d2:34:1a:4f:87:d9:fe:24:f0:
                    16:3c:17:ed:41:65:5c:a2:fe:40:f0:96:44:f7:ce:
                    51:90:1b:59:41:ac:18:4b:3a:f9:a4:97:de:f0:62:
                    6e:7c:37:f0:15:12:e3:77:6c:33:92:83:eb:0d:f0:
                    5e:0a:e6:74:3f:92:22:cf:ba:5a:80:30:5b:59:7e:
                    9f:2b:2e:7d:cc:61:54:0a:f6:d8:68:82:f9:c7:88:
                    7e:8b:76:71:9c:02:77:d5:66:d3:46:ab:54:df:d4:
                    2c:44:29:1e:3f:72:fe:07:2b:63:f0:15:c8:c5:06:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:21:1D:CF:F7:93:32:C0:4E:55:5B:8E:F7:1D:0E:76:EF:53:E3:5F
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:b5:27:b8:1a:74:ae:7a:f4:1d:3b:dc:f7:6c:42:c2:82:
         c0:70:7e:57:ab:17:41:14:c1:14:17:82:b7:ad:bc:d5:38:b8:
         4f:83:5d:5c:81:82:b5:91:45:15:5e:af:52:99:74:2b:28:2e:
         4f:80:00:23:53:52:5f:0a:80:9a:eb:24:ff:78:41:b2:2e:40:
         81:04:62:74:9b:a2:95:46:22:fd:53:0b:11:97:75:26:64:3e:
         95:16:76:3d:10:da:1c:9f:21:6a:79:21:31:11:b6:d4:d9:a4:
         1a:7c:2e:98:fd:8b:1c:37:63:dc:4f:3f:c5:40:f3:ad:ae:1d:
         c7:e0:5c:06:73:e8:f8:43:dd:76:8e:44:f2:dd:f3:ba:68:2f:
         90:a9:a3:91:6c:de:d2:66:c4:19:a3:cd:d9:83:61:31:a8:9d:
         79:af:7f:a7:fa:ad:a7:e4:29:4a:61:e0:28:39:10:b4:a2:8e:
         9b:d9:bb:bd:52:55:57:5a:c1:6e:e8:35:ea:2d:71:50:ca:a5:
         73:c1:14:6e:d2:66:a4:55:81:d6:c7:f1:58:68:0b:a5:9d:5e:
         5f:fe:4c:cd:ef:06:ab:ff:01:1a:c5:b9:b6:10:a9:53:81:1e:
         07:f5:b6:0d:bb:70:b6:c9:48:dc:25:68:2d:e1:65:a5:70:fc:
         db:29:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----