Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa
File:                     3231362e39372e3232362e302f32342d3234203d3e203237363330.roa (raw, json)
Hash identifier:          PS3ax8keNYBDEnY72kw0o4drPJWDETX9/oq/RmI+aBw=
Subject key identifier:   DA:B0:95:8C:08:D9:12:EC:3F:0C:3C:B7:14:DE:F6:44:F6:38:F2:26
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       37BE988F7F5DFDE337BB85ABBC1B620849460733
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa
Signing time:             Mon 18 Jul 2022 14:10:00 +0000
ROA not before:           Mon 18 Jul 2022 14:05:00 +0000
ROA not after:            Mon 17 Jul 2023 14:10:00 +0000
asID:                     27630
IP address blocks:        216.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:98:8f:7f:5d:fd:e3:37:bb:85:ab:bc:1b:62:08:49:46:07:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:00 2022 GMT
            Not After : Jul 17 14:10:00 2023 GMT
        Subject: CN=DAB0958C08D912EC3F0C3CB714DEF644F638F226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:1a:07:45:bb:f1:ad:2c:a1:52:9f:75:53:
                    c3:af:d3:dc:9c:1b:57:bb:7c:cb:de:11:0f:2e:e7:
                    b6:55:4f:12:50:7a:12:44:a2:39:43:39:21:26:28:
                    ce:ab:cc:80:42:81:9d:e8:d1:cb:ea:d5:91:08:75:
                    f0:bc:c4:e7:43:fc:55:a8:ce:eb:ab:e3:17:8d:29:
                    dc:38:11:03:50:38:c1:b1:4c:52:11:48:90:cc:59:
                    d3:fe:3c:2c:1d:d6:55:eb:16:7f:3a:6c:97:55:e3:
                    c7:bc:af:e1:23:78:e1:5e:4e:30:69:cc:54:35:b3:
                    cb:e0:e8:7c:69:64:45:52:9d:7c:11:ee:9a:00:b2:
                    05:8c:71:90:2f:b4:29:9c:db:69:11:7d:bb:b0:a4:
                    e7:bc:bd:42:a3:1a:97:d0:50:ed:8a:9e:18:82:12:
                    37:44:4d:7c:e0:5c:de:d9:94:e7:7e:0c:3a:a9:1c:
                    38:59:69:f7:0c:da:e0:f1:c7:3f:eb:7b:2b:51:f7:
                    ba:01:bf:37:59:57:f6:fe:51:1e:e8:2a:ee:f7:e5:
                    5b:d4:9a:04:25:6c:45:8a:7f:ff:4c:6b:b5:d7:52:
                    a4:9e:d0:ad:87:b1:5e:02:6a:26:82:59:ee:8d:74:
                    43:31:5d:10:5c:ed:49:e8:58:93:60:f8:41:c6:1c:
                    8a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:95:8C:08:D9:12:EC:3F:0C:3C:B7:14:DE:F6:44:F6:38:F2:26
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:93:16:3b:01:19:fa:75:c3:0f:01:dd:ae:88:10:b8:fb:
         2e:1a:69:f1:83:49:20:60:93:6d:f1:1b:be:31:7b:60:a2:b0:
         d5:94:fc:1f:b2:ce:9f:2a:27:62:72:f8:a4:e9:33:a2:c4:ec:
         ec:ef:d0:02:4c:65:fc:a7:37:8d:ea:4b:ab:2f:02:96:c5:ff:
         b2:44:f8:1a:3b:17:b2:e8:68:7d:bc:f0:86:9a:4e:e2:ac:9b:
         f8:80:f6:40:29:e3:be:f9:69:d0:b6:09:ac:0b:21:2c:9b:51:
         c9:4b:b5:ba:ac:ef:27:ea:1b:73:22:ee:31:ab:ef:e6:7d:fb:
         b9:eb:6a:bc:7e:2f:0f:df:1b:55:e8:b6:de:a4:62:f6:01:e8:
         ba:f2:23:4d:e7:1f:22:43:6c:4f:ec:90:e7:b7:c1:eb:5b:b6:
         37:6c:79:aa:8c:cb:10:42:ad:09:02:ec:4e:43:04:07:d5:90:
         0c:fb:9b:37:5a:02:3d:78:74:94:b5:f4:7d:92:77:11:cc:af:
         25:e0:f2:a9:39:5d:b7:8e:94:94:db:27:65:5b:17:90:05:c1:
         41:1e:c3:15:08:ad:2c:ba:52:79:0d:45:4f:64:56:ad:8b:a0:
         c7:e8:43:d6:11:6b:f5:82:44:82:da:6a:44:37:85:bb:2e:92:
         f5:ff:82:01
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUN76Yj39d/eM3u4WrvBtiCElGBzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTAwWhcNMjMwNzE3MTQxMDAw
WjAzMTEwLwYDVQQDEyhEQUIwOTU4QzA4RDkxMkVDM0YwQzNDQjcxNERFRjY0NEY2
MzhGMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3IaB0W78a0s
oVKfdVPDr9PcnBtXu3zL3hEPLue2VU8SUHoSRKI5QzkhJijOq8yAQoGd6NHL6tWR
CHXwvMTnQ/xVqM7rq+MXjSncOBEDUDjBsUxSEUiQzFnT/jwsHdZV6xZ/OmyXVePH
vK/hI3jhXk4wacxUNbPL4Oh8aWRFUp18Ee6aALIFjHGQL7QpnNtpEX27sKTnvL1C
oxqX0FDtip4YghI3RE184Fze2ZTnfgw6qRw4WWn3DNrg8cc/63srUfe6Ab83WVf2
/lEe6Cru9+Vb1JoEJWxFin//TGu111KkntCth7FeAmomglnujXRDMV0QXO1J6FiT
YPhBxhyKOQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNqwlYwI2RLsPww8txTe9kT2
OPImMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzEzNjJlMzkzNzJlMzIzMjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNzM2MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh4jANBgkqhkiG9w0BAQsF
AAOCAQEAh8iTFjsBGfp1ww8B3a6IELj7Lhpp8YNJIGCTbfEbvjF7YKKw1ZT8H7LO
nyonYnL4pOkzosTs7O/QAkxl/Kc3jepLqy8ClsX/skT4GjsXsuhofbzwhppO4qyb
+ID2QCnjvvlp0LYJrAshLJtRyUu1uqzvJ+obcyLuMavv5n37uetqvH4vD98bVei2
3qRi9gHouvIjTecfIkNsT+yQ57fB61u2N2x5qozLEEKtCQLsTkMEB9WQDPubN1oC
PXh0lLX0fZJ3EcyvJeDyqTldt46UlNsnZVsXkAXBQR7DFQitLLpSeQ1FT2RWrYug
x+hD1hFr9YJEgtpqRDeFuy6S9f+CAQ==
-----END CERTIFICATE-----