Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          DwKnsgdiJFOdKjSYfhlhIzBJ/jQ3WvRTPJLrX45hOGE=
Subject key identifier:   26:BE:F1:47:6E:E1:C4:1D:57:2B:6A:25:D1:F0:DD:DD:68:F5:C9:2B
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7B4DF36FD530B2C128D29D7F0BFA6E312C7A0D2C
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 18 Jul 2022 14:10:04 +0000
ROA not before:           Mon 18 Jul 2022 14:05:04 +0000
ROA not after:            Mon 17 Jul 2023 14:10:04 +0000
asID:                     61317
IP address blocks:        216.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:f3:6f:d5:30:b2:c1:28:d2:9d:7f:0b:fa:6e:31:2c:7a:0d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:04 2022 GMT
            Not After : Jul 17 14:10:04 2023 GMT
        Subject: CN=26BEF1476EE1C41D572B6A25D1F0DDDD68F5C92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:8e:7d:6e:59:45:04:13:b8:a9:ae:7f:6f:
                    cc:2b:e0:a8:62:bb:bd:8b:bb:2b:7c:12:7d:eb:f6:
                    17:a7:8f:ea:f5:99:a0:fe:47:ee:ef:3e:92:18:5e:
                    1e:7d:e9:e3:bb:36:72:19:84:36:e3:b2:c4:55:3a:
                    c4:f9:1c:76:20:44:42:38:c8:54:48:88:d7:18:7e:
                    40:36:e6:0b:a9:de:8b:f3:df:2b:eb:33:1b:4d:f5:
                    e4:e7:40:e0:e4:11:5d:d0:4e:97:6c:75:0a:9a:13:
                    7a:6e:4a:5d:b5:5a:67:23:24:17:3a:19:b5:72:5f:
                    73:a4:25:5e:d7:5c:d5:b1:ec:ab:08:92:48:f0:7c:
                    e5:70:0a:87:95:de:2e:fd:39:59:32:a5:d0:c6:84:
                    15:a0:6e:d4:c5:7c:64:1c:fd:41:77:82:af:0d:86:
                    08:d8:81:5f:cd:bf:ad:10:7a:e8:cd:24:75:f1:bb:
                    ab:99:d7:7e:a6:f5:67:b0:ca:93:e4:e4:9d:d3:d5:
                    af:0c:f9:b3:54:fa:ef:f0:af:1e:25:ed:8f:a1:32:
                    00:31:fd:90:4a:95:3b:6c:73:65:ae:14:a5:6a:58:
                    73:af:d4:b3:2e:62:70:7d:ec:23:2f:45:0c:3b:0d:
                    bd:3b:24:ba:86:b1:46:27:ce:ac:14:4e:fa:c9:23:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BE:F1:47:6E:E1:C4:1D:57:2B:6A:25:D1:F0:DD:DD:68:F5:C9:2B
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:f5:ad:28:d6:ae:58:01:e2:fd:cc:f1:2e:cf:b2:0b:9e:
         29:f0:a1:40:dd:b3:4e:36:ee:71:78:1b:9d:0d:de:47:1d:07:
         0f:d2:27:22:42:18:ea:a3:a9:25:5d:32:2f:e6:73:61:36:8a:
         c8:61:81:99:f3:86:47:76:f6:33:1a:0f:3d:7b:b5:57:c2:2e:
         2a:d5:7e:e6:20:fb:e6:6b:37:89:54:a4:92:70:a6:4a:2b:e6:
         d5:1a:b5:02:99:1e:88:67:a5:53:3f:d7:43:37:55:6a:45:4b:
         0a:f2:29:77:01:76:cd:6b:9c:81:70:27:b7:eb:27:08:c9:bf:
         65:f6:c3:e1:4a:0d:65:08:b8:8c:05:7c:f3:f4:a0:04:35:78:
         4b:35:45:d1:6d:49:89:72:3b:b9:6b:98:15:64:da:1e:78:76:
         87:93:0f:31:0f:dd:47:06:49:1d:74:40:e7:2d:35:bb:7b:a5:
         9e:68:c5:4e:b9:f4:55:aa:3b:77:d7:ad:cf:0e:e7:3d:d3:d4:
         02:55:6c:05:47:c3:5c:ff:48:fa:9b:55:a4:04:64:52:ad:63:
         29:22:ef:d3:f5:d5:67:60:b7:cd:ba:88:ff:61:59:90:59:56:
         6d:1d:5a:5a:10:17:02:1f:41:f0:93:28:e5:49:5a:c1:64:d2:
         64:c1:45:72
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUe03zb9UwssEo0p1/C/puMSx6DSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNTA0WhcNMjMwNzE3MTQxMDA0
WjAzMTEwLwYDVQQDEygyNkJFRjE0NzZFRTFDNDFENTcyQjZBMjVEMUYwRERERDY4
RjVDOTJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXiOfW5ZRQQT
uKmuf2/MK+CoYru9i7srfBJ96/YXp4/q9Zmg/kfu7z6SGF4efenjuzZyGYQ247LE
VTrE+Rx2IERCOMhUSIjXGH5ANuYLqd6L898r6zMbTfXk50Dg5BFd0E6XbHUKmhN6
bkpdtVpnIyQXOhm1cl9zpCVe11zVseyrCJJI8HzlcAqHld4u/TlZMqXQxoQVoG7U
xXxkHP1Bd4KvDYYI2IFfzb+tEHrozSR18burmdd+pvVnsMqT5OSd09WvDPmzVPrv
8K8eJe2PoTIAMf2QSpU7bHNlrhSlalhzr9SzLmJwfewjL0UMOw29OyS6hrFGJ86s
FE76ySP3BQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCa+8Udu4cQdVytqJdHw3d1o
9ckrMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzEzNjJlMzkzNzJlMzIzMjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh4jANBgkqhkiG9w0BAQsF
AAOCAQEAZtL1rSjWrlgB4v3M8S7PsgueKfChQN2zTjbucXgbnQ3eRx0HD9InIkIY
6qOpJV0yL+ZzYTaKyGGBmfOGR3b2MxoPPXu1V8IuKtV+5iD75ms3iVSkknCmSivm
1Rq1ApkeiGelUz/XQzdVakVLCvIpdwF2zWucgXAnt+snCMm/ZfbD4UoNZQi4jAV8
8/SgBDV4SzVF0W1JiXI7uWuYFWTaHnh2h5MPMQ/dRwZJHXRA5y01u3ulnmjFTrn0
Vao7d9etzw7nPdPUAlVsBUfDXP9I+ptVpARkUq1jKSLv0/XVZ2C3zbqI/2FZkFlW
bR1aWhAXAh9B8JMo5UlawWTSZMFFcg==
-----END CERTIFICATE-----