Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3232382e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Pp7p1sLGhbq0Q4mK3JpFbdzslzdpXYh68KK4zhbYCt4=
Subject key identifier:   42:8A:A8:61:21:5A:26:F5:85:26:9E:D2:0B:DE:AE:2F:32:D4:E2:F9
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       6AD37A8720377D4432D8552C8600391A19D1952C
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     1239
IP address blocks:        216.97.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d3:7a:87:20:37:7d:44:32:d8:55:2c:86:00:39:1a:19:d1:95:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=428AA861215A26F585269ED20BDEAE2F32D4E2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:dc:da:66:e7:93:77:65:bc:6a:44:72:0a:
                    36:1f:56:5b:19:35:48:3f:b1:22:af:9a:8c:74:4d:
                    01:06:29:ca:2e:ce:b3:a8:87:c8:c6:a2:81:0c:e8:
                    3d:44:a3:9a:f5:51:d0:08:72:79:2f:4d:c6:29:c3:
                    2e:f3:cb:f4:54:04:42:3f:49:6c:8f:6c:f1:16:3e:
                    1e:00:e5:24:90:10:79:68:46:b3:02:10:45:b2:1c:
                    87:45:7a:73:56:69:0f:3a:03:02:dc:cd:63:00:d6:
                    d9:36:45:d0:4c:c8:47:ef:db:12:98:59:15:13:72:
                    af:0d:ca:b5:88:94:be:9f:91:e2:a3:90:91:4b:dc:
                    6c:5e:36:3d:ce:ea:bb:66:ed:d7:a7:48:a0:db:7c:
                    3d:ac:bb:48:f5:d0:6a:fb:0d:30:a3:25:40:ca:8b:
                    97:d4:40:9c:41:98:28:d2:25:29:cd:ef:07:93:ee:
                    f0:c5:af:7c:43:01:5e:e3:63:33:0d:25:ee:22:29:
                    86:a5:c3:a4:ea:b5:6f:9e:04:2e:f5:94:dc:ed:e3:
                    66:b7:ce:33:09:25:96:e8:0c:f3:fc:a7:88:45:a9:
                    33:6f:b7:58:3c:50:33:64:33:cc:dd:b2:b0:7b:4c:
                    fb:60:e6:15:e2:ff:b8:01:1f:cf:4a:02:b5:1a:ca:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8A:A8:61:21:5A:26:F5:85:26:9E:D2:0B:DE:AE:2F:32:D4:E2:F9
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:e5:cd:21:08:c8:f4:79:ca:4d:e2:4d:ab:f8:ba:79:18:
         c9:b6:ff:91:5f:55:1c:50:82:9d:d7:f3:64:91:58:65:79:a2:
         32:cc:bb:df:df:57:1f:a7:c8:09:5d:65:25:11:49:8a:95:66:
         b6:cb:b2:9f:5e:ce:4b:57:ca:16:01:c1:f2:86:05:e4:aa:87:
         d4:32:5a:30:44:8b:c1:a9:2d:e9:09:15:41:78:04:cf:f4:e0:
         36:3c:28:ae:57:10:ca:b4:06:8d:53:12:f8:de:e2:c7:d9:91:
         6c:b2:4f:69:78:54:3e:3b:47:66:c1:a2:4c:28:01:3c:87:cd:
         f4:b2:bf:77:35:e5:3f:de:07:a7:0b:4a:ae:16:09:75:ac:15:
         d6:f3:03:a3:13:65:af:04:32:9f:b2:c8:19:e7:56:7a:ce:09:
         a1:06:f6:cb:64:6a:61:02:f0:c4:34:1e:0c:45:91:09:3d:67:
         d8:ee:e9:b9:80:88:ce:95:71:b4:6c:b0:be:3b:17:1a:45:d9:
         ed:dc:98:f8:e6:49:6b:c4:e4:46:4c:3d:38:fe:dc:30:a2:8a:
         3d:d5:c5:62:81:19:d2:2a:46:f3:16:fd:fc:b9:a5:f9:75:a4:
         fa:67:1d:a9:3c:a8:97:7f:f5:b3:39:c9:66:14:0f:7d:79:34:
         6c:93:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----