Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203434343836.roa
File:                     3231362e39372e3232342e302f32342d3234203d3e203434343836.roa (raw, json)
Hash identifier:          9X0/EWuG//U+KCbNZrZdfK2rrHVKO7lRq+nGcTgQnxw=
Subject key identifier:   95:3F:32:B8:C6:09:64:72:61:89:F5:AF:1A:4B:41:6F:2A:2A:EB:37
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       63A97F812D5436EB21F2150FE9C244F550C0C602
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203434343836.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     44486
IP address blocks:        216.97.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a9:7f:81:2d:54:36:eb:21:f2:15:0f:e9:c2:44:f5:50:c0:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=953F32B8C60964726189F5AF1A4B416F2A2AEB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:3a:fa:6f:fb:83:16:44:59:21:71:c8:9d:
                    a2:6a:f2:d9:64:00:3f:be:40:26:16:4b:03:e0:20:
                    f2:64:1c:b2:90:ee:73:c7:3e:d8:59:ed:2e:08:32:
                    83:13:6d:8d:39:5c:47:26:46:32:68:dc:f6:0f:40:
                    3b:ec:98:32:fd:ec:f9:a6:57:70:d8:54:a1:69:d9:
                    fa:ea:e4:e2:de:56:8f:e7:6f:f7:18:03:30:42:04:
                    55:f3:25:f7:c6:60:69:7b:ee:e0:96:af:b4:24:a9:
                    f3:37:b3:14:60:ca:99:82:c1:74:d0:10:b8:4b:17:
                    a0:0a:f5:e0:6b:77:b0:96:27:92:bc:4d:ff:f9:6f:
                    2c:53:ae:73:2c:7e:12:09:70:a1:9a:4f:92:bf:e7:
                    8f:07:e8:16:a3:a8:8a:e5:c0:22:cc:ba:72:c4:a8:
                    c5:b3:b3:a2:b8:72:00:32:ee:a9:58:68:69:d0:ee:
                    58:3d:32:6f:44:55:51:13:34:e6:e6:90:ba:e0:d2:
                    8a:8c:c6:df:1d:5a:26:f2:31:53:4c:5b:12:94:76:
                    ed:30:15:10:e2:20:71:c7:14:7d:0b:18:53:7e:aa:
                    4d:a1:3f:b6:af:2c:5b:71:e9:ec:44:e0:04:b3:b7:
                    c2:ae:97:b1:f8:67:06:e3:ce:cf:49:f5:f6:08:bc:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:32:B8:C6:09:64:72:61:89:F5:AF:1A:4B:41:6F:2A:2A:EB:37
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203434343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:5e:f3:73:d6:ca:fc:1f:12:4d:d5:3b:b8:45:0d:a6:e3:
         8e:6b:23:f8:62:4e:20:bf:a3:87:04:89:4e:53:24:8a:e9:40:
         80:ff:03:14:c3:8b:03:34:5b:08:b6:7d:90:a6:d7:99:de:61:
         bc:2b:4e:cc:9b:46:61:70:9f:ce:fd:e6:0c:26:e1:cf:78:8d:
         c1:82:5c:4f:ef:b9:ad:6a:da:63:8f:73:ec:32:9f:04:3c:33:
         5a:96:73:46:83:3b:fc:c9:68:8c:d2:c0:26:fd:df:86:8e:37:
         44:a2:e4:5d:86:b9:a1:3b:48:37:0d:65:58:2b:9c:27:d9:cd:
         b2:a8:a6:26:b7:54:96:14:f0:a8:e5:ef:2a:f0:eb:34:24:ab:
         b0:17:19:96:35:ff:be:be:eb:81:ab:c3:c7:2f:b5:92:88:86:
         cb:6f:34:7d:eb:fc:9a:54:59:81:51:75:9f:2d:32:dc:8e:09:
         44:dd:3e:c5:48:49:49:17:d2:40:17:0e:80:78:9d:69:02:af:
         9c:5c:25:37:0e:5e:d3:ca:c5:48:1d:aa:ad:20:60:7a:42:59:
         46:16:4e:e1:5f:44:df:76:6f:cc:7f:0c:d2:0d:6e:81:c0:80:
         f6:ba:7b:12:9b:c6:3b:74:7a:97:f2:03:35:56:5a:5d:0d:7e:
         60:58:91:26
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUY6l/gS1UNush8hUP6cJE9VDAxgIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA0WhcNMjMxMTE1MTEyOTA0
WjAzMTEwLwYDVQQDEyg5NTNGMzJCOEM2MDk2NDcyNjE4OUY1QUYxQTRCNDE2RjJB
MkFFQjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VM6+m/7gxZE
WSFxyJ2iavLZZAA/vkAmFksD4CDyZByykO5zxz7YWe0uCDKDE22NOVxHJkYyaNz2
D0A77Jgy/ez5pldw2FShadn66uTi3laP52/3GAMwQgRV8yX3xmBpe+7glq+0JKnz
N7MUYMqZgsF00BC4SxegCvXga3ewlieSvE3/+W8sU65zLH4SCXChmk+Sv+ePB+gW
o6iK5cAizLpyxKjFs7OiuHIAMu6pWGhp0O5YPTJvRFVREzTm5pC64NKKjMbfHVom
8jFTTFsSlHbtMBUQ4iBxxxR9CxhTfqpNoT+2ryxbcensROAEs7fCrpex+GcG487P
SfX2CLwBGQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJU/MrjGCWRyYYn1rxpLQW8q
Kus3MB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzEzNjJlMzkzNzJlMzIzMjM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh4DANBgkqhkiG9w0BAQsF
AAOCAQEAQLle83PWyvwfEk3VO7hFDabjjmsj+GJOIL+jhwSJTlMkiulAgP8DFMOL
AzRbCLZ9kKbXmd5hvCtOzJtGYXCfzv3mDCbhz3iNwYJcT++5rWraY49z7DKfBDwz
WpZzRoM7/MlojNLAJv3fho43RKLkXYa5oTtINw1lWCucJ9nNsqimJrdUlhTwqOXv
KvDrNCSrsBcZljX/vr7rgavDxy+1koiGy280fev8mlRZgVF1ny0y3I4JRN0+xUhJ
SRfSQBcOgHidaQKvnFwlNw5e08rFSB2qrSBgekJZRhZO4V9E33ZvzH8M0g1ugcCA
9rp7EpvGO3R6l/IDNVZaXQ1+YFiRJg==
-----END CERTIFICATE-----