Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa
File:                     3231362e39372e3233342e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          ZudDE+32hfHDeWwfbWMzyCszkqOo3Nl+FINp1p6FAVI=
Subject key identifier:   97:AF:67:F0:3D:51:54:83:CD:67:1D:AC:0B:6C:D1:E8:CB:C8:42:83
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       44CFD6691BB7C26D00EB0235F13327207A6130A2
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa
Signing time:             Mon 18 Jul 2022 14:09:57 +0000
ROA not before:           Mon 18 Jul 2022 14:04:57 +0000
ROA not after:            Mon 17 Jul 2023 14:09:57 +0000
asID:                     7029
IP address blocks:        216.97.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cf:d6:69:1b:b7:c2:6d:00:eb:02:35:f1:33:27:20:7a:61:30:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:57 2022 GMT
            Not After : Jul 17 14:09:57 2023 GMT
        Subject: CN=97AF67F03D515483CD671DAC0B6CD1E8CBC84283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:29:fd:c3:d9:11:2b:c1:49:92:c5:bb:76:
                    6c:c1:1e:d1:0a:16:fa:6d:63:7e:5d:9c:78:23:f0:
                    74:17:31:75:5a:a5:5e:93:f7:97:83:ba:d1:b0:53:
                    f7:e1:95:25:13:4c:19:05:6e:34:6f:7e:00:ad:55:
                    5e:cb:1b:84:b6:0f:f3:8f:4b:cc:e0:da:ac:5d:53:
                    26:76:49:10:cf:a6:59:e7:92:15:44:5a:5d:fe:be:
                    3d:4c:4f:b8:5d:f6:65:89:83:92:25:d1:8f:52:ee:
                    b5:c0:1f:04:47:27:6f:60:bd:e1:42:09:15:fd:9e:
                    23:f1:1a:80:1d:a0:c5:2f:7c:3d:fc:e2:a4:1b:75:
                    e5:22:2a:4a:e4:e9:ff:60:14:ab:3c:eb:cd:65:d6:
                    74:a7:57:78:fd:65:20:51:1e:a1:45:3b:b9:42:d9:
                    cb:23:ea:d3:ea:e6:73:77:a1:74:36:8f:15:52:c9:
                    06:76:f2:66:72:5f:4b:db:ac:a0:66:e7:c2:c1:06:
                    74:32:c9:51:6a:b7:b8:61:9d:00:93:f4:00:c9:ef:
                    ab:fc:99:98:7c:00:a2:64:12:0a:0e:d0:37:7c:d2:
                    17:e6:0f:ce:96:40:c7:d0:3e:f5:1d:c8:42:2d:8e:
                    cc:54:cd:0a:26:8e:c0:7a:98:19:c2:44:db:ce:31:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:67:F0:3D:51:54:83:CD:67:1D:AC:0B:6C:D1:E8:CB:C8:42:83
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:44:ed:d9:84:17:8d:f4:23:c8:e0:0c:a4:95:60:f1:a2:
         31:42:97:f4:3a:b4:33:1e:8f:68:77:91:07:ad:fd:62:1b:94:
         93:c0:86:01:f1:d4:c3:f9:0a:2c:70:01:f5:d0:62:83:ee:16:
         65:df:76:b9:85:54:4f:c1:42:52:0c:fb:21:97:cf:fa:3f:ea:
         32:7e:97:bc:8b:6c:73:7a:1e:50:34:ab:ff:80:c9:cf:5f:bb:
         b1:61:d8:5b:60:56:76:9b:e7:9d:d4:99:fd:ee:4d:c2:43:95:
         14:82:45:6f:86:66:48:4b:ac:a2:11:be:57:53:82:44:a0:13:
         3b:02:31:4d:af:4d:54:f5:30:4c:40:ef:04:c0:41:b2:cc:73:
         ac:e2:8a:95:7b:a5:c0:da:05:83:93:d4:05:4c:30:03:da:64:
         c9:3d:8b:aa:b9:d8:f7:47:d7:b7:12:e8:5f:0b:91:90:74:90:
         4e:eb:47:48:e5:a9:85:19:48:55:db:2e:62:d2:0e:20:46:77:
         5f:01:0e:64:cf:e5:03:c9:19:3e:fd:a3:4d:ec:0a:2b:3f:82:
         a9:57:a7:6e:a4:35:08:98:10:0d:76:c3:51:45:35:77:0d:4b:
         64:22:df:d6:5d:f1:e7:f4:c7:fd:68:e7:d6:85:18:59:b6:a1:
         0a:ac:b1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----