Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa
File:                     3231362e39372e3233302e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          nLcPx3lOTfDzm9cVlEzYoNODZoSqSCbzU0KN3EVkdyU=
Subject key identifier:   B9:5E:80:B5:68:FC:F8:2D:2B:70:2F:46:1B:B5:97:6B:83:FC:D0:13
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0ECE713CD3CB963E83592513DA36A5675E49ACE2
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 16 Nov 2022 11:29:02 +0000
ROA not before:           Wed 16 Nov 2022 11:24:02 +0000
ROA not after:            Wed 15 Nov 2023 11:29:02 +0000
asID:                     61138
IP address blocks:        216.97.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ce:71:3c:d3:cb:96:3e:83:59:25:13:da:36:a5:67:5e:49:ac:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:02 2022 GMT
            Not After : Nov 15 11:29:02 2023 GMT
        Subject: CN=B95E80B568FCF82D2B702F461BB5976B83FCD013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:fe:fc:d2:64:49:73:b0:6f:26:73:72:72:
                    68:d6:7b:95:26:e6:cc:d9:e7:66:32:57:11:6a:72:
                    b8:c4:6e:d3:7f:97:63:df:52:02:c5:19:81:03:d5:
                    51:47:6c:2a:70:a5:26:51:20:8d:26:b1:35:2b:c3:
                    e9:7d:f8:e0:55:49:ba:b0:d6:fa:f0:0d:d8:98:bc:
                    10:5f:6f:92:5a:79:30:ef:c9:5f:83:81:b5:23:c9:
                    e3:78:2c:ce:cf:8f:3e:33:62:93:50:fe:44:da:d1:
                    01:4e:e0:73:2d:d4:ba:11:fc:3e:ea:bc:44:57:39:
                    3f:c0:c3:b5:aa:48:ea:a3:b8:b5:07:2c:9a:f4:d6:
                    dc:1a:34:a0:c6:38:c9:09:9a:1c:ac:77:f0:7b:dd:
                    f2:d9:88:2e:7f:1f:a3:db:63:e6:cd:ba:b1:10:23:
                    35:10:8b:99:fa:48:c3:3c:14:17:79:02:97:0c:4f:
                    93:11:a9:2d:24:d0:08:2b:ac:99:cd:c4:9e:d7:ab:
                    1b:9f:a6:39:d6:41:28:02:bb:9a:cd:19:20:a6:7c:
                    98:76:d4:fd:5a:10:63:01:bc:5f:6e:64:ba:cf:86:
                    a4:7d:1a:61:c1:bc:c4:06:52:e9:aa:c7:f2:ed:4b:
                    90:1b:da:a5:fd:08:5a:2f:f7:ec:0d:17:f1:8b:22:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5E:80:B5:68:FC:F8:2D:2B:70:2F:46:1B:B5:97:6B:83:FC:D0:13
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233302e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:28:87:48:2f:e9:4c:8f:db:25:15:01:07:a6:6b:a0:2d:0d:
         aa:38:fa:b2:85:ef:b4:39:0d:5a:4f:88:85:e9:d0:d4:d9:79:
         f1:7f:cf:5c:70:0c:d5:e3:8e:25:95:c7:9f:99:71:19:40:77:
         c8:56:0a:34:e0:bd:68:83:35:47:54:9b:2e:80:ed:3f:33:b7:
         81:9f:1a:b2:c3:eb:0a:05:f3:a5:fc:b9:b7:79:8e:f8:28:fe:
         51:a7:9e:1b:d3:0f:56:99:39:fc:62:78:d4:a7:48:11:77:aa:
         88:ec:7f:72:84:09:8d:9d:7b:61:cd:6e:02:2b:41:d5:c3:87:
         25:cf:0d:5d:8b:b0:0e:8a:b3:50:b3:2b:22:25:24:60:3d:5e:
         33:a3:7a:a7:d2:a9:85:0d:f7:e9:a3:60:0f:2f:1f:1f:82:04:
         cf:31:cc:f4:05:f5:c5:01:2b:27:aa:17:ad:28:bc:6b:c1:b1:
         ca:98:3f:4f:63:f9:7a:1f:93:22:10:91:51:5e:1f:cd:33:8d:
         37:8b:37:55:1e:5f:8c:08:e7:75:ca:a1:d6:79:54:8a:25:14:
         e5:33:9d:f0:37:3c:80:e2:2b:b6:70:9b:ba:7e:81:fd:6b:49:
         ba:a0:09:cc:e9:b0:34:82:3b:95:74:22:66:a6:c5:a3:a2:f2:
         3c:9f:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----