Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa
File:                     3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          gzqkwJBF/d3B7lusQcibHq6c2oXawKBOqeqYSTF1bQE=
Subject key identifier:   2D:C9:9F:C1:65:87:93:36:AA:38:7E:F4:44:0F:B2:38:67:09:F3:1E
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4E36F03DF763628992382D80EAD030536CE89107
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     211585
IP address blocks:        216.97.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:36:f0:3d:f7:63:62:89:92:38:2d:80:ea:d0:30:53:6c:e8:91:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=2DC99FC165879336AA387EF4440FB2386709F31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:21:fd:bb:e7:f5:10:8b:6b:bb:31:88:a3:
                    e6:86:54:8b:79:3a:06:37:b1:fc:4f:3a:49:e5:a8:
                    3d:9f:19:3e:df:0f:3e:00:21:a7:b9:25:f8:72:c4:
                    b9:9d:7d:d9:fe:01:ec:5c:22:3c:9c:db:02:65:aa:
                    5f:94:a1:01:cd:01:a3:1a:fb:b9:7f:fb:3d:e9:d7:
                    b5:3e:a6:72:b9:85:be:68:9b:db:cf:d7:f3:23:1c:
                    2b:ae:65:6b:6b:09:8b:6d:90:06:f0:d5:45:90:aa:
                    99:bc:e6:46:73:47:07:55:4d:c5:c2:dc:04:1e:fe:
                    75:a0:7c:8c:15:34:26:e6:34:78:50:3c:a8:d0:05:
                    aa:39:2f:c7:60:ab:38:76:01:ef:ee:29:aa:cd:10:
                    d4:1b:5a:51:60:3a:8e:66:14:68:9d:a7:04:79:a9:
                    98:52:bb:d7:d6:75:d5:fb:6c:28:bd:d4:ef:0e:05:
                    d0:d4:ab:91:49:ec:8a:18:56:c9:20:bf:cf:cc:78:
                    7b:6c:a0:32:52:38:84:34:4d:4e:f1:f4:68:5f:c6:
                    e0:56:ba:41:25:09:01:f1:05:73:11:5f:0b:38:ae:
                    24:dc:2e:6f:7f:37:f3:ec:79:00:8a:50:51:87:f1:
                    e0:e2:13:12:e6:13:cf:b5:09:ed:7d:4c:33:bd:46:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:9F:C1:65:87:93:36:AA:38:7E:F4:44:0F:B2:38:67:09:F3:1E
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:7e:79:13:5a:82:9d:1f:15:9b:d0:13:4e:af:51:2d:99:
         e0:c4:cd:f6:29:4c:6e:20:43:9d:20:5f:d8:03:ba:81:b6:29:
         3d:22:4b:86:79:86:86:0d:9d:f6:cf:cb:fe:b4:f3:28:4e:72:
         fe:9d:69:33:ee:71:f0:3e:61:2a:f5:bd:87:5e:35:bb:d2:b3:
         57:0d:e8:b1:b9:1e:c6:ac:9c:0d:82:f8:ab:ec:e1:cf:9a:4d:
         55:ed:d5:db:86:4b:6d:6a:db:69:9b:41:c6:6b:48:b2:de:b1:
         93:82:bc:1b:fa:cc:9a:4e:39:db:b1:ad:68:55:f1:58:88:65:
         4c:d3:2a:1c:87:af:4e:fc:16:89:aa:93:38:58:91:2d:f9:ed:
         49:7d:e6:6d:43:1a:26:02:ce:40:53:1d:f1:70:b2:3c:3d:ef:
         b9:69:d2:2a:33:03:33:29:e8:8a:3c:6b:5b:9f:30:df:18:a1:
         b2:bf:03:78:56:36:b5:50:3a:bd:64:ac:24:87:8e:47:24:f1:
         ad:d3:41:93:7a:e6:ea:0d:ea:21:79:10:12:05:ff:d2:cd:f2:
         ce:6d:7f:75:35:bb:e9:bd:1c:79:27:14:10:bf:ce:b1:36:8b:
         39:25:e3:c5:37:71:f5:d2:f7:95:cf:46:40:da:f7:c6:7a:6d:
         c1:8b:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----