Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          KpsJgCveThD3l2REQbU7G/Orm953yQ981Z7w9t7EO7Y=
Subject key identifier:   0F:8B:0C:66:77:C1:21:C3:51:E4:A2:4D:AF:B8:A2:95:A9:76:EA:80
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4D080FCF59A454BF75AF7CCDC8ED1CBF1315E448
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 18 Jul 2022 14:10:08 +0000
ROA not before:           Mon 18 Jul 2022 14:05:08 +0000
ROA not after:            Mon 17 Jul 2023 14:10:08 +0000
asID:                     61317
IP address blocks:        216.97.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:08:0f:cf:59:a4:54:bf:75:af:7c:cd:c8:ed:1c:bf:13:15:e4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:08 2022 GMT
            Not After : Jul 17 14:10:08 2023 GMT
        Subject: CN=0F8B0C6677C121C351E4A24DAFB8A295A976EA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:12:a0:64:f8:a4:e1:12:93:5b:4b:2e:d5:
                    3a:01:e4:53:c2:09:36:38:1d:69:20:2c:90:2a:38:
                    d9:5d:1d:ad:e1:96:21:38:74:3a:99:62:c4:9e:10:
                    d9:bb:e3:39:e5:84:37:f4:b5:23:8f:a1:96:3e:3a:
                    76:7d:01:e3:59:bd:5c:d8:41:f7:49:60:2d:63:08:
                    c6:93:74:26:23:98:89:74:e2:80:d5:5f:2c:3d:8c:
                    74:91:30:2c:36:a8:de:01:cd:2f:50:40:26:ca:26:
                    78:44:55:f0:a9:22:27:f2:52:d8:fd:dc:af:f0:31:
                    28:c8:4f:e8:b1:e6:5f:11:6a:7c:f4:aa:2d:8b:b6:
                    41:21:a9:60:a0:05:bf:e6:8c:38:96:cb:1e:e3:1c:
                    45:c3:99:e2:11:fc:74:a1:8d:e6:bd:03:38:ab:ce:
                    1e:b9:af:30:d1:eb:0d:67:d5:29:b5:4c:07:62:8c:
                    21:f0:2b:78:29:dc:e3:a5:b8:7d:4d:2a:12:6f:e1:
                    4d:95:b8:ae:c6:57:a7:3f:32:8d:e3:4e:ce:62:09:
                    9d:4b:bf:c5:11:42:f9:c2:b4:62:fb:98:3b:e2:f3:
                    9e:88:a2:4f:bd:cc:ed:43:fe:bb:64:69:87:75:32:
                    18:2f:48:e1:01:96:a8:6a:d6:a1:0c:d5:cf:2c:bf:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8B:0C:66:77:C1:21:C3:51:E4:A2:4D:AF:B8:A2:95:A9:76:EA:80
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:37:8a:d7:97:35:47:44:51:e5:e8:a9:fe:a7:fe:0a:bd:
         91:22:ba:34:87:56:ca:50:e1:2c:2b:3a:ab:87:ef:fe:af:80:
         cb:2b:78:95:27:f7:e1:ca:1d:8b:dc:79:21:94:00:9f:d6:a4:
         37:bf:a9:2d:c1:f0:44:50:87:b3:08:2d:1b:b6:4a:9c:ff:41:
         e6:7e:be:05:fb:15:6e:a4:82:51:94:a7:ca:61:ce:68:7e:0a:
         5e:16:55:3c:25:a5:da:d6:66:64:45:2d:7a:2d:2a:52:ef:ef:
         b0:cf:20:b4:ec:68:5d:58:49:12:10:2f:70:c7:be:69:04:e3:
         f2:0e:5d:01:2c:47:9d:f9:01:7b:f1:a8:80:05:6b:9c:f3:6e:
         e3:78:01:96:9f:7d:38:2c:7f:ec:05:70:9f:45:b9:fd:99:8f:
         70:5f:e8:77:50:cf:64:9a:ff:08:61:b6:6f:0d:ba:a5:b5:15:
         e2:28:71:ad:1f:3d:8f:74:0f:20:4f:21:e4:9f:8b:87:29:09:
         05:68:1f:18:9f:a1:b1:3e:c6:07:65:bf:68:90:68:28:e4:1e:
         d6:e7:0d:51:d7:6e:6a:31:7b:6c:75:55:82:5b:55:6b:51:18:
         f2:c5:74:fd:72:30:42:73:24:0e:6c:f7:d8:94:f6:7e:f2:a1:
         dc:b4:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----