Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa
File:                     3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          WLU/87Bqt/GGOF4SBEgf+mjC82ins0MCkvZcEcoxYqk=
Subject key identifier:   6D:1B:BF:DA:79:83:33:80:0D:99:B1:3B:D6:31:71:2E:B4:C4:A9:BF
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       12444C417827E175FEE7BC05E487B242B3FF8573
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:59 +0000
ROA not before:           Mon 18 Jul 2022 14:04:59 +0000
ROA not after:            Mon 17 Jul 2023 14:09:59 +0000
asID:                     1239
IP address blocks:        216.227.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:44:4c:41:78:27:e1:75:fe:e7:bc:05:e4:87:b2:42:b3:ff:85:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:59 2022 GMT
            Not After : Jul 17 14:09:59 2023 GMT
        Subject: CN=6D1BBFDA798333800D99B13BD631712EB4C4A9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:1a:5e:51:41:e2:1f:57:f6:6d:09:b0:31:
                    6d:d5:0a:69:dc:d7:1e:14:fe:07:52:df:71:51:d4:
                    79:f2:8c:73:a0:fb:34:d2:5e:65:b3:ec:68:f7:b5:
                    c1:7a:2d:67:36:0d:4d:07:34:a3:c6:15:4f:58:c1:
                    46:4f:2b:b0:ee:ce:5d:f3:67:1f:6f:a8:75:2b:25:
                    bd:4f:0f:c3:f4:88:6a:82:96:a3:96:b1:3f:93:d6:
                    9e:52:da:15:00:e1:83:31:fb:18:71:b1:62:f6:63:
                    00:22:16:3e:92:42:dd:f2:22:e2:99:65:8c:40:57:
                    43:7d:2e:07:ba:c7:30:5c:77:d9:34:16:5c:93:83:
                    7e:2a:c8:fb:39:d0:37:86:1d:c8:b6:6d:66:9d:b8:
                    a9:6f:55:89:9d:87:25:05:cd:f3:6c:f6:74:46:bf:
                    65:74:9a:06:3a:b7:ab:50:a1:ac:7f:c9:82:51:f1:
                    e9:f8:fd:86:fa:66:48:f5:fa:cc:a8:c8:7b:17:0f:
                    7d:95:a1:d8:7e:53:8d:21:3c:b6:53:b9:46:74:2f:
                    bf:2f:f3:9a:4d:47:60:b8:b2:a9:29:64:c0:89:9b:
                    92:52:b3:2d:6e:b9:f0:45:4f:b2:44:12:7b:81:7b:
                    b4:0b:be:dd:de:0e:9d:eb:c7:7b:8f:b3:01:13:01:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:BF:DA:79:83:33:80:0D:99:B1:3B:D6:31:71:2E:B4:C4:A9:BF
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:2e:ef:40:a3:79:b1:20:a1:bb:3c:1c:92:e6:ac:38:68:
         39:47:a3:21:f5:a7:10:16:35:36:5f:86:ce:17:78:27:59:1a:
         15:79:9c:15:ad:a3:ec:ed:a1:12:8b:69:94:24:dd:f8:e5:fd:
         4b:92:e6:9d:35:aa:ec:38:6d:ae:09:26:c7:45:7b:08:05:85:
         27:9b:a7:c3:22:56:9c:78:6a:e4:41:29:8d:f6:7a:dc:08:2c:
         e0:90:d4:1a:95:cd:74:a4:4f:aa:21:e3:40:3a:b0:c8:8f:81:
         05:99:4a:73:52:3b:88:73:50:14:fa:60:ac:c4:13:e9:09:b8:
         65:06:93:f0:c1:28:fd:76:6b:1c:4d:76:c8:22:6b:14:1d:13:
         03:8f:59:0d:7f:65:9d:2d:0d:7d:fa:6d:ce:3c:7e:4d:df:02:
         17:6a:d7:c6:83:01:51:53:c5:3c:92:58:05:8a:93:d1:9c:e4:
         20:23:09:cc:7b:e4:83:06:cb:44:76:f3:8e:cc:f1:b8:27:3d:
         20:ce:95:b7:f8:8a:8e:db:82:80:b6:73:f0:0a:59:61:07:d2:
         7b:f6:08:be:f8:49:0c:a8:a9:60:98:58:a1:e0:b2:54:7b:b6:
         c4:9f:e7:27:e8:c4:cb:90:c4:65:86:82:7f:7c:37:8e:36:f5:
         ba:59:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----