Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3233362e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          aqMdeOSbzx78aWOrduKB7dCZYAhD+FpYdhmdKlQhWJA=
Subject key identifier:   14:AA:A7:47:66:DB:24:7A:C8:83:64:06:92:C1:C9:B1:7B:9D:3C:75
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       6369EC28FBEB3655207A4CBE2B4764C6394FF117
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:10:09 +0000
ROA not before:           Mon 18 Jul 2022 14:05:09 +0000
ROA not after:            Mon 17 Jul 2023 14:10:09 +0000
asID:                     1239
IP address blocks:        216.97.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:69:ec:28:fb:eb:36:55:20:7a:4c:be:2b:47:64:c6:39:4f:f1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:09 2022 GMT
            Not After : Jul 17 14:10:09 2023 GMT
        Subject: CN=14AAA74766DB247AC883640692C1C9B17B9D3C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:6c:fc:12:c2:66:dc:74:cf:fa:b6:d1:15:
                    4b:fe:25:a4:d4:67:5f:b0:7b:97:f6:5b:46:50:22:
                    dd:79:49:57:d2:d4:01:7c:08:1d:35:3d:2b:f7:93:
                    26:11:d8:1e:b4:fe:39:81:38:05:04:e3:25:1c:7e:
                    b7:4d:37:46:8b:71:77:1e:02:88:bd:cf:93:f9:30:
                    89:cf:f2:a8:6f:be:20:2a:65:f0:47:96:28:7d:7c:
                    bd:8a:a7:d3:23:32:2f:df:96:6e:8f:78:1e:87:c7:
                    bc:d0:a9:e4:f5:56:02:18:42:d9:41:0b:0c:a7:bd:
                    fa:29:71:b6:34:f9:31:f5:6e:43:e9:a2:b3:fc:e3:
                    65:5d:f8:f3:d7:f4:15:6d:1c:f5:3e:da:57:38:bd:
                    c6:1d:f6:cc:26:ff:ae:5d:64:9f:88:4e:76:f5:60:
                    76:eb:ae:7b:d1:01:46:b4:c2:61:5c:15:5c:f8:09:
                    a6:96:dc:73:c8:3e:f8:52:f1:7c:2e:ac:cf:98:2c:
                    2d:7b:1d:e4:f8:e2:ec:9b:a6:ca:05:9a:fb:93:15:
                    86:21:80:f1:14:9b:50:18:2c:e0:9d:ca:32:cb:ac:
                    bf:39:c5:05:ff:2d:76:34:97:4d:4a:49:c7:f8:1e:
                    93:88:ea:8c:84:c9:b9:1e:0c:01:ec:49:2d:84:09:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:A7:47:66:DB:24:7A:C8:83:64:06:92:C1:C9:B1:7B:9D:3C:75
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:84:09:8a:38:66:23:f2:dd:e8:a1:d1:8b:49:36:10:16:48:
         2b:29:d7:09:bf:77:b8:3b:72:b3:a9:28:1d:51:b1:f5:9f:4f:
         cd:36:4b:68:6e:c9:c0:68:65:20:26:ca:0d:1c:31:2e:ad:ac:
         17:f0:71:75:c3:ac:1a:ac:b1:d3:46:32:c7:50:33:e3:60:e1:
         aa:ce:f9:b5:5c:31:8a:15:b0:c8:a3:56:9f:81:5d:55:f6:60:
         de:f2:08:07:17:07:7a:a8:37:a8:36:23:ac:63:35:05:7c:cb:
         28:38:c2:42:12:a5:8b:ca:7c:9a:0b:70:ab:a8:ec:8a:2b:c6:
         3e:49:7c:1c:83:f9:ba:ff:0d:fd:20:04:5a:fa:d2:36:a8:67:
         a1:36:3f:51:58:d6:54:2b:87:6f:01:7b:3e:42:08:48:f9:ec:
         f9:3e:45:ab:ec:e3:06:bf:0c:34:25:ea:4e:f9:c1:1a:45:4e:
         39:36:22:cd:dc:b6:c8:c2:d0:92:22:9c:3e:dc:c4:40:ff:f8:
         f4:12:67:f7:d4:ca:48:18:db:8e:9e:56:4c:ab:f8:f1:90:c7:
         bf:b2:e9:21:af:9d:ed:c3:54:b8:44:9f:ed:84:6c:df:ea:32:
         54:7e:39:3f:bf:01:71:5b:04:3a:43:99:aa:c9:05:5a:bb:8f:
         f3:ee:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----