Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Qsyvb1WLfKT9v77/qKeL461PuiITOTfO+yhUQuBKuFA=
Subject key identifier:   87:FC:69:27:5E:1B:BB:10:8D:FB:60:D8:10:63:11:54:49:90:26:2D
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       18D05304718F005DB936BBC42CD658437BFAA997
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 18 Jul 2022 14:10:12 +0000
ROA not before:           Mon 18 Jul 2022 14:05:12 +0000
ROA not after:            Mon 17 Jul 2023 14:10:12 +0000
asID:                     61317
IP address blocks:        216.97.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d0:53:04:71:8f:00:5d:b9:36:bb:c4:2c:d6:58:43:7b:fa:a9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:12 2022 GMT
            Not After : Jul 17 14:10:12 2023 GMT
        Subject: CN=87FC69275E1BBB108DFB60D8106311544990262D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:d4:ca:fb:ae:5c:ca:4a:1a:42:82:0d:67:
                    52:4e:f5:b2:fa:76:57:5c:2e:cf:ac:8b:cb:14:5b:
                    63:15:6d:e6:45:a5:0d:04:11:61:dd:06:60:13:f3:
                    39:7d:e3:12:ba:e9:13:82:3e:e9:8d:56:f7:30:07:
                    f7:37:f6:ed:1b:03:8b:be:82:06:75:b8:09:25:56:
                    f4:c0:02:ec:76:4e:25:a4:7a:86:05:93:4b:66:07:
                    48:77:cf:c4:bc:e5:44:ee:1e:fb:be:99:06:1f:48:
                    0d:20:77:9b:d2:33:30:ad:4d:39:e0:be:4c:34:4d:
                    b5:c4:1b:5e:e7:62:f2:4b:0e:63:aa:96:e6:dc:39:
                    dd:00:09:0a:e8:5e:53:7e:15:6e:d1:26:e0:47:8c:
                    4e:ab:bd:b7:57:a0:bd:5f:eb:1e:2b:ac:21:64:ab:
                    cb:40:5a:c3:ce:5a:e2:e2:65:98:e2:76:ac:54:95:
                    77:7c:78:0c:c3:f9:54:2f:5a:f4:91:97:4e:2d:d7:
                    96:01:d8:c9:22:fa:c0:9d:bc:2f:63:52:51:ce:e8:
                    c3:6d:39:15:af:73:ce:47:7c:2e:4f:bb:09:00:49:
                    47:6b:43:23:01:1b:92:f9:72:4b:f7:79:8e:6e:cf:
                    9f:1a:86:78:18:04:1f:62:21:a2:db:bf:ff:6d:84:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FC:69:27:5E:1B:BB:10:8D:FB:60:D8:10:63:11:54:49:90:26:2D
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:b3:ae:52:aa:54:b7:28:0e:bf:bb:c3:ff:96:89:d9:28:
         3c:c5:ea:85:ba:b0:3a:00:f4:a2:0b:be:3b:52:5d:2e:5b:6e:
         ee:57:38:ec:10:83:62:ff:1f:6e:b1:bd:62:ce:17:8f:66:9b:
         5b:28:70:de:9c:88:1a:7d:88:90:1e:53:44:de:d7:d1:b3:cd:
         48:b1:bb:4b:ce:9c:bc:bc:b6:da:2b:14:73:57:0b:fc:f1:93:
         d7:26:75:c3:a3:e9:3a:82:3f:de:d7:12:8d:57:b8:bf:7e:96:
         07:68:10:d6:83:e2:70:3d:26:8e:ac:68:e5:db:75:fc:1a:48:
         58:07:17:63:2c:e5:ba:73:27:07:ae:fc:af:88:1d:6e:57:52:
         09:62:21:40:8e:88:75:bb:ac:09:59:2f:56:a8:ae:ed:38:b4:
         d1:ea:d5:46:2c:bc:21:e5:6b:38:15:da:4c:fa:31:eb:c5:0a:
         38:bf:98:ed:df:de:96:fb:97:91:c3:c6:10:ea:63:a6:75:a3:
         7b:2c:28:d9:fe:60:95:63:21:fb:48:b5:dd:1f:ef:77:6b:35:
         95:67:1d:a9:36:5b:05:36:98:20:11:69:4d:f3:73:12:32:3e:
         d9:d9:9b:db:c8:51:35:e8:2d:dc:f4:6c:87:90:11:2f:38:e2:
         fb:69:f3:16
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGNBTBHGPAF25NrvELNZYQ3v6qZcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTEyWhcNMjMwNzE3MTQxMDEy
WjAzMTEwLwYDVQQDEyg4N0ZDNjkyNzVFMUJCQjEwOERGQjYwRDgxMDYzMTE1NDQ5
OTAyNjJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcnUyvuuXMpK
GkKCDWdSTvWy+nZXXC7PrIvLFFtjFW3mRaUNBBFh3QZgE/M5feMSuukTgj7pjVb3
MAf3N/btGwOLvoIGdbgJJVb0wALsdk4lpHqGBZNLZgdId8/EvOVE7h77vpkGH0gN
IHeb0jMwrU054L5MNE21xBte52LySw5jqpbm3DndAAkK6F5TfhVu0SbgR4xOq723
V6C9X+seK6whZKvLQFrDzlri4mWY4nasVJV3fHgMw/lUL1r0kZdOLdeWAdjJIvrA
nbwvY1JRzujDbTkVr3POR3wuT7sJAElHa0MjARuS+XJL93mObs+fGoZ4GAQfYiGi
27//bYQ9PwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIf8aSdeG7sQjftg2BBjEVRJ
kCYtMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzEzNjJlMzkzNzJlMzIzMjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh4TANBgkqhkiG9w0BAQsF
AAOCAQEAir6zrlKqVLcoDr+7w/+WidkoPMXqhbqwOgD0ogu+O1JdLltu7lc47BCD
Yv8fbrG9Ys4Xj2abWyhw3pyIGn2IkB5TRN7X0bPNSLG7S86cvLy22isUc1cL/PGT
1yZ1w6PpOoI/3tcSjVe4v36WB2gQ1oPicD0mjqxo5dt1/BpIWAcXYyzlunMnB678
r4gdbldSCWIhQI6IdbusCVkvVqiu7Ti00erVRiy8IeVrOBXaTPox68UKOL+Y7d/e
lvuXkcPGEOpjpnWjeywo2f5glWMh+0i13R/vd2s1lWcdqTZbBTaYIBFpTfNzEjI+
2dmb28hRNegt3PRsh5ARLzji+2nzFg==
-----END CERTIFICATE-----