Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203436353632.roa
File:                     3231362e39372e3232352e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          aNPzLRTr2KSJnW2tdnJi8hsvE1Pj7iEyo8+0d/GKyIg=
Subject key identifier:   B7:CA:21:4F:08:D9:BC:36:27:B7:2F:9C:A2:72:98:B4:84:EF:43:86
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       5A81977A904F63BD704A64BF09AC25DB0E9B0D39
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203436353632.roa
Signing time:             Mon 18 Jul 2022 14:09:55 +0000
ROA not before:           Mon 18 Jul 2022 14:04:55 +0000
ROA not after:            Mon 17 Jul 2023 14:09:55 +0000
asID:                     46562
IP address blocks:        216.97.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:81:97:7a:90:4f:63:bd:70:4a:64:bf:09:ac:25:db:0e:9b:0d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:55 2022 GMT
            Not After : Jul 17 14:09:55 2023 GMT
        Subject: CN=B7CA214F08D9BC3627B72F9CA27298B484EF4386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:77:c3:c1:75:c5:e8:f4:f3:d4:7c:7a:38:
                    5f:4f:6d:6c:2b:87:dc:68:f9:0f:24:ba:92:30:1f:
                    dc:49:24:e8:97:0c:33:d6:f9:1b:99:bb:38:80:9f:
                    d3:aa:df:fe:bc:60:79:4c:88:4e:8e:20:b9:0a:41:
                    24:df:00:63:e7:bd:9e:b4:26:d4:1f:85:73:38:09:
                    35:c6:a0:0a:53:0c:c6:ad:39:98:98:ce:06:a2:5d:
                    eb:e9:9b:cf:8e:79:f2:7a:b9:99:b5:d8:34:15:91:
                    1b:c0:92:d6:12:80:26:33:3f:e9:e6:94:37:46:3d:
                    a7:19:63:b6:7b:8a:6c:fd:4e:b7:1c:ae:15:2e:61:
                    a7:89:18:ac:a2:9e:90:03:34:74:f7:b2:72:58:d3:
                    82:36:7c:42:69:85:bf:f1:4a:89:82:61:1e:a1:15:
                    58:36:a3:44:69:21:27:26:e1:e5:57:1a:27:6f:4b:
                    98:4a:b4:e9:a9:d3:85:9f:1f:ec:03:bf:b1:ad:dc:
                    95:37:92:31:25:22:0e:9d:a6:db:e4:ac:87:f5:d4:
                    d3:28:33:aa:ad:9f:75:97:e9:55:14:5f:e5:88:72:
                    10:49:a0:31:da:51:e0:c5:66:8c:20:8c:eb:3a:df:
                    fc:4b:13:4c:7b:7c:35:f5:cf:7c:0d:2b:38:9b:e3:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:21:4F:08:D9:BC:36:27:B7:2F:9C:A2:72:98:B4:84:EF:43:86
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:5d:4c:4d:88:5e:e1:4b:c0:df:51:b0:32:ea:e7:2f:ce:
         a2:da:49:0a:0a:43:a5:b9:d5:de:09:29:56:c4:f3:0c:a1:77:
         58:c3:f2:16:aa:7c:36:7d:fd:7c:1b:72:69:71:38:55:c1:43:
         26:e6:f6:a4:95:3e:a9:dc:fb:8e:d3:8f:b2:14:fb:30:fc:59:
         c1:f3:b8:d7:1c:b4:d6:80:02:0c:c1:bf:3e:7f:ff:9f:a1:0b:
         a3:2e:6b:38:30:28:08:6a:47:a7:be:30:66:e5:a7:c7:3b:48:
         16:70:b4:ea:1b:13:0e:91:28:41:d1:f6:29:57:00:3e:50:74:
         71:66:e9:e0:b2:42:1d:e6:02:12:61:fd:d4:04:74:4e:65:a7:
         65:0c:41:aa:36:38:a9:b6:ab:33:4c:1d:98:ae:2c:4d:b4:e5:
         69:23:73:2e:1d:56:aa:4a:53:b7:14:57:0b:d3:b4:e7:28:b0:
         4a:49:1c:bf:37:44:f7:1c:cd:2c:63:73:20:f7:cf:ac:ea:04:
         72:fd:13:24:48:7c:06:6a:e5:a9:2f:4f:80:01:24:ee:f6:61:
         bd:05:f2:55:53:33:f6:01:a1:36:59:29:6a:1e:73:16:f6:cf:
         71:a3:2a:e2:f9:bb:36:b7:3d:c0:23:f7:6b:de:11:f2:2d:94:
         2f:64:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----