Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa
File:                     3231362e39372e3233322e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          QLJjDLM9GUNvFiRZK0RZeegLAsIzm7gqZwS85eEqnJc=
Subject key identifier:   A1:82:90:5A:59:84:9B:B6:BF:39:90:AC:42:73:E3:41:45:B0:A8:B2
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0955205FC92B382BFF1B7EA12357F1D7F71DEE4C
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     49999
IP address blocks:        216.97.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:20:5f:c9:2b:38:2b:ff:1b:7e:a1:23:57:f1:d7:f7:1d:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=A182905A59849BB6BF3990AC4273E34145B0A8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:94:cc:f6:29:46:b4:04:14:47:e1:f9:cc:
                    69:a9:aa:41:2f:dd:f5:50:f0:9f:64:3e:a8:76:a3:
                    ff:22:33:9e:af:43:1c:96:4f:e8:99:9f:03:2e:5c:
                    3f:ca:d4:3c:ac:fe:5d:ab:f4:18:0e:5a:dd:e2:d6:
                    14:ee:40:48:fe:6c:7c:45:f1:be:5a:e6:d8:ae:cb:
                    09:13:eb:dd:90:32:79:f5:aa:8c:b5:09:0b:91:7b:
                    7f:d2:c5:c5:5e:e5:b6:5c:1d:63:74:1f:cd:02:59:
                    0e:6b:96:70:5a:9e:50:14:62:1c:b5:8d:20:0f:b7:
                    6d:f2:34:62:b2:ad:d7:f1:88:3b:02:f0:f6:02:9f:
                    dd:1b:3f:d9:b2:3f:5f:9d:15:b3:c2:c9:0e:bb:3f:
                    c5:9f:65:83:d2:5c:cc:ab:4b:ea:e3:bb:16:35:49:
                    80:fc:61:c0:ed:93:9e:13:71:51:9c:83:f3:72:3e:
                    14:f8:9e:44:b0:85:e9:09:b9:d6:4a:f4:50:6a:db:
                    eb:76:0b:ff:e5:6c:c3:e6:d8:66:82:a8:6a:9b:c9:
                    4a:d9:9c:88:48:b0:8e:fb:e1:51:bf:d8:31:51:dd:
                    95:71:da:44:2e:6d:90:45:2e:4c:da:8c:4d:62:aa:
                    4c:d7:93:a0:70:4f:ab:39:5a:b5:5a:1a:02:4b:27:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:90:5A:59:84:9B:B6:BF:39:90:AC:42:73:E3:41:45:B0:A8:B2
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233322e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:23:05:7b:d0:97:3d:ed:3f:a8:f6:a8:6a:e8:52:4e:26:5f:
         8f:85:e0:77:c1:74:bc:92:83:cc:87:c4:2a:2f:8a:d7:02:60:
         e5:88:41:e8:b2:4e:4d:e2:b4:01:a5:24:a0:4e:2b:7a:9e:e8:
         86:50:de:97:4e:14:62:ef:83:b5:15:7e:72:d9:a9:64:6f:ca:
         71:85:3e:c1:22:3b:2f:1b:fb:38:38:67:7a:ca:de:ac:14:6e:
         18:14:fd:4f:11:e4:ce:f3:b5:3e:33:d5:b2:c9:0e:4c:3d:16:
         d7:30:d7:d9:4a:0f:05:27:ab:54:4c:ac:0a:88:64:60:47:d3:
         64:8a:24:d0:36:29:b2:33:48:e2:b3:02:1f:aa:74:45:e7:ff:
         76:1e:e7:47:9e:4b:bf:ce:e6:58:93:6c:a2:ab:44:63:36:a4:
         d3:30:37:10:11:0b:14:d2:ff:63:b6:ab:30:5b:6c:1e:5e:a1:
         35:77:41:bb:6e:c1:0c:6d:7b:71:f4:19:59:b0:30:83:de:a1:
         eb:68:be:1f:19:a5:a8:81:9b:13:22:a3:b1:46:46:93:fe:59:
         31:bd:ca:5b:e8:ec:d1:90:4d:a8:ff:b7:96:23:76:cc:29:f7:
         c2:01:24:ce:42:fa:2d:eb:40:4e:2d:65:d8:f1:03:cc:ae:2a:
         ae:40:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----