Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
File:                     3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa (raw, json)
Hash identifier:          t25K4KJhrTdJeHGYd8vHb8Efj9nvWfpT59Ipf+IsEvk=
Subject key identifier:   3A:DB:D4:2A:AF:67:38:D5:C6:80:7F:19:A8:9E:E2:DF:0B:03:7F:0E
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       14090B306C749F83C5ACDFA20398431042B0F308
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     210654
IP address blocks:        216.97.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:09:0b:30:6c:74:9f:83:c5:ac:df:a2:03:98:43:10:42:b0:f3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=3ADBD42AAF6738D5C6807F19A89EE2DF0B037F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:56:7b:e3:39:d0:ef:80:66:3a:32:b1:75:
                    e4:d6:6c:c6:46:09:9c:df:63:27:db:06:67:f8:da:
                    39:1a:fb:30:8b:f4:49:1b:ef:65:99:73:fb:d2:a5:
                    03:19:ab:1a:1f:b2:83:e9:33:8d:5d:e6:ea:41:1d:
                    fe:98:3b:4c:7d:6c:9a:3a:19:c3:71:f6:5b:67:b7:
                    dd:cb:ec:2e:2f:71:fd:d3:4d:c8:0c:79:e7:ae:2e:
                    98:e3:04:a8:6d:e7:7b:3b:c2:84:8d:9f:4f:fa:0d:
                    1a:90:b4:83:98:cc:d6:d4:26:d7:16:cc:b9:b4:a9:
                    86:3d:34:0f:70:fe:cf:30:d0:4d:d0:70:3e:ae:5c:
                    8b:15:d0:3e:9f:5e:e3:b6:54:94:d7:de:68:27:7a:
                    24:2f:03:fd:38:b5:59:27:ee:40:ac:81:83:3d:be:
                    47:af:a4:e2:6d:9e:52:50:75:c0:76:ee:94:17:5a:
                    24:73:18:05:b3:be:1e:78:c4:58:60:06:d6:7b:fa:
                    b3:7c:93:23:08:d0:92:6f:82:ac:d6:de:ed:66:2e:
                    42:22:b9:a7:61:85:8d:11:f9:98:9a:0b:2d:e5:72:
                    80:ee:2a:17:3f:9d:ba:11:d1:49:8c:6b:90:e4:1e:
                    1d:53:a0:3d:42:c4:92:f0:c2:28:ca:b1:e2:b1:40:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:D4:2A:AF:67:38:D5:C6:80:7F:19:A8:9E:E2:DF:0B:03:7F:0E
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:8a:35:46:f3:d5:c6:85:2c:23:4f:2b:d8:29:35:1d:34:
         29:70:68:e5:8f:a0:d1:bc:02:e3:35:df:48:a9:86:42:9e:b9:
         fa:28:c7:0b:32:65:d4:81:e1:ff:4c:64:01:30:6a:c8:c2:70:
         0f:9a:6a:9d:1c:c2:05:de:5e:57:e8:e5:19:99:55:4f:17:64:
         b7:88:d2:0c:fc:3e:fd:cc:49:ec:39:a2:10:9b:0e:0d:fc:c7:
         1f:48:8b:06:ac:98:18:b8:4f:9d:71:d4:70:c6:e5:0b:cc:96:
         3b:95:f5:e8:a0:ae:3c:70:7a:ad:4d:5a:68:39:6d:3f:e8:ca:
         64:06:c4:8a:e0:39:42:17:7b:d1:f2:49:50:30:64:3d:e5:95:
         78:84:60:0d:f6:d5:4c:45:07:72:c7:0b:2c:f3:ac:4e:f3:34:
         ff:46:45:22:0e:d6:1f:a7:2d:f2:8b:64:b4:7e:de:9c:0a:be:
         4e:5c:53:ed:d9:07:80:f8:95:e3:db:23:87:fe:2d:fe:36:01:
         13:e0:c4:60:84:e7:db:3f:58:7c:b6:83:f2:d9:65:26:fc:90:
         ba:66:af:96:25:9f:35:45:e9:cf:8d:51:25:94:94:ba:b1:b5:
         f0:14:d3:0d:26:1a:87:0b:d2:38:b1:9f:32:39:c7:60:a9:f1:
         4b:80:3f:08
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFAkLMGx0n4PFrN+iA5hDEEKw8wgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA2WhcNMjMxMTE1MTEyOTA2
WjAzMTEwLwYDVQQDEygzQURCRDQyQUFGNjczOEQ1QzY4MDdGMTlBODlFRTJERjBC
MDM3RjBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9VWe+M50O+A
ZjoysXXk1mzGRgmc32Mn2wZn+No5Gvswi/RJG+9lmXP70qUDGasaH7KD6TONXebq
QR3+mDtMfWyaOhnDcfZbZ7fdy+wuL3H9003IDHnnri6Y4wSobed7O8KEjZ9P+g0a
kLSDmMzW1CbXFsy5tKmGPTQPcP7PMNBN0HA+rlyLFdA+n17jtlSU195oJ3okLwP9
OLVZJ+5ArIGDPb5Hr6TibZ5SUHXAdu6UF1okcxgFs74eeMRYYAbWe/qzfJMjCNCS
b4Ks1t7tZi5CIrmnYYWNEfmYmgst5XKA7ioXP526EdFJjGuQ5B4dU6A9QsSS8MIo
yrHisUBDmwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDrb1CqvZzjVxoB/Gaie4t8L
A38OMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzEzNjJlMzkzNzJlMzIzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMwMzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GHkMA0GCSqGSIb3DQEB
CwUAA4IBAQB/pYo1RvPVxoUsI08r2Ck1HTQpcGjlj6DRvALjNd9IqYZCnrn6KMcL
MmXUgeH/TGQBMGrIwnAPmmqdHMIF3l5X6OUZmVVPF2S3iNIM/D79zEnsOaIQmw4N
/McfSIsGrJgYuE+dcdRwxuULzJY7lfXooK48cHqtTVpoOW0/6MpkBsSK4DlCF3vR
8klQMGQ95ZV4hGAN9tVMRQdyxwss86xO8zT/RkUiDtYfpy3yi2S0ft6cCr5OXFPt
2QeA+JXj2yOH/i3+NgET4MRghOfbP1h8toPy2WUm/JC6Zq+WJZ81RenPjVEllJS6
sbXwFNMNJhqHC9I4sZ8yOcdgqfFLgD8I
-----END CERTIFICATE-----