Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa
File:                     3231362e39372e3233312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          Etpe9FZVQeiLk0Qwf6WkoBljW8PstwpLA42h0dbRWig=
Subject key identifier:   12:31:8C:A2:D0:E6:54:A7:B8:CF:6D:7A:AD:E2:C3:FD:71:15:0E:2F
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       2414ABB756A5EB58D7D5303ABC3F15518090976C
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:02 +0000
ROA not before:           Wed 16 Nov 2022 11:24:02 +0000
ROA not after:            Wed 15 Nov 2023 11:29:02 +0000
asID:                     49999
IP address blocks:        216.97.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:ab:b7:56:a5:eb:58:d7:d5:30:3a:bc:3f:15:51:80:90:97:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:02 2022 GMT
            Not After : Nov 15 11:29:02 2023 GMT
        Subject: CN=12318CA2D0E654A7B8CF6D7AADE2C3FD71150E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:82:0d:48:8a:a0:1f:31:2d:00:b5:e2:c2:
                    83:f1:ea:fd:37:59:29:fe:10:61:1d:38:02:8c:6f:
                    ee:7a:6e:cd:99:91:14:e3:c5:a6:fa:70:95:9d:0b:
                    3d:ed:c0:58:42:47:ce:df:c7:07:19:30:99:2e:09:
                    d9:f1:e1:6b:c6:8e:21:cd:5f:e4:9b:cd:bc:fb:96:
                    c8:31:66:5d:2f:2f:fc:a0:60:0f:fe:05:58:88:6b:
                    d0:61:b3:f2:fe:d1:74:aa:e0:c0:4e:b1:37:a9:7f:
                    13:37:c7:ee:30:c1:9f:ae:ca:60:29:50:cd:f5:31:
                    fe:7f:22:43:5a:1c:6d:4a:fb:72:2f:51:45:a2:6c:
                    82:bd:94:64:f2:50:4f:06:04:f5:27:1f:0d:cc:94:
                    85:52:b1:38:2b:fe:91:c7:b7:4b:0c:89:fc:8f:4d:
                    98:4b:e9:42:8d:13:76:92:1a:f5:b6:38:6d:c2:3e:
                    64:56:77:05:b4:af:9a:bd:ef:9e:85:6a:1d:f6:b2:
                    3c:b1:35:c4:70:c4:9f:a0:a6:9b:17:58:5e:70:64:
                    cd:09:de:67:85:9a:2f:87:9d:43:c9:69:d2:67:a1:
                    d7:b4:af:52:3b:b1:3c:84:61:0b:18:c1:5b:8b:1f:
                    38:c5:fa:f7:40:bc:45:bd:26:3a:97:60:c0:5a:85:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:31:8C:A2:D0:E6:54:A7:B8:CF:6D:7A:AD:E2:C3:FD:71:15:0E:2F
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:7e:26:e0:76:0d:61:e4:2c:ab:df:5b:59:e6:15:09:6e:
         e8:7c:53:6f:c6:01:2d:7c:0a:3a:39:39:e0:d8:ee:80:6a:ad:
         fa:86:bd:73:dd:16:48:3a:59:ee:8b:5a:f1:6a:77:0a:fb:90:
         d9:5d:80:9c:f6:16:98:55:6e:ff:01:77:73:22:05:06:59:39:
         07:5f:e8:f0:cc:0e:a4:80:90:f3:34:fc:47:8e:d0:8a:66:00:
         98:d4:7f:07:b1:24:73:ec:93:86:c8:17:97:66:09:09:72:c6:
         bb:48:15:ab:6d:ff:44:01:6f:71:1b:4d:1f:89:41:e9:fb:1c:
         3d:b7:ad:0a:e6:57:4a:ae:38:17:13:de:d9:8c:57:a4:21:08:
         1e:13:72:84:b9:b8:c6:ea:bb:26:76:8a:4c:d8:c0:b6:61:9e:
         b4:41:07:68:42:fe:db:ef:92:1c:52:b4:b9:ce:01:e3:6a:a5:
         69:b7:c1:01:fd:3a:16:af:d7:29:7b:29:82:71:a4:43:14:4c:
         fd:a5:50:a9:0b:fc:17:12:d6:9c:de:83:a8:f9:39:3f:29:c0:
         16:8d:6d:6d:30:25:4a:4b:0c:a2:25:7d:68:0d:27:a6:fc:5d:
         9a:c3:3d:ab:be:fd:e2:a7:5b:ab:c8:cc:6b:84:0e:c6:63:44:
         5a:12:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----