Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa
File:                     3231362e39372e3233382e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          49doKfNoxM6pGRzA9iy8KAHenyTqclr+sigxZWJaoOw=
Subject key identifier:   F0:84:9B:78:0D:67:DA:B3:0F:DD:25:8D:F9:AE:97:64:D4:9A:3D:7C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       0886F6347085CCAB7FD3F5CF527A823E2A9081F8
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa
Signing time:             Mon 18 Jul 2022 14:10:01 +0000
ROA not before:           Mon 18 Jul 2022 14:05:01 +0000
ROA not after:            Mon 17 Jul 2023 14:10:01 +0000
asID:                     7029
IP address blocks:        216.97.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:86:f6:34:70:85:cc:ab:7f:d3:f5:cf:52:7a:82:3e:2a:90:81:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:01 2022 GMT
            Not After : Jul 17 14:10:01 2023 GMT
        Subject: CN=F0849B780D67DAB30FDD258DF9AE9764D49A3D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:7f:93:8a:d4:cd:e0:8c:b6:fa:86:5a:03:
                    cc:b7:3c:08:0e:3b:d1:59:12:9f:ff:af:64:ab:3b:
                    a5:c1:40:4a:c1:fa:d0:10:9f:24:42:72:ee:ab:1d:
                    b7:cb:4f:4c:2b:82:96:f9:97:11:a3:fd:70:94:be:
                    2b:94:d3:3f:b8:7e:35:67:92:e8:81:a5:e2:c4:cb:
                    9a:2d:77:20:a6:86:b5:b6:f2:95:b3:df:9a:ec:56:
                    dd:53:c1:59:69:c2:e8:c7:67:42:10:7d:0f:0d:d2:
                    38:6d:69:aa:af:cb:c2:af:b9:10:15:8f:47:3d:19:
                    fa:28:6e:11:61:d1:2c:0c:33:8b:69:67:2e:81:68:
                    b0:96:b4:ec:98:16:c6:c5:b3:cd:7e:c2:9d:07:81:
                    40:f0:5c:aa:04:9a:d9:93:b7:29:e3:83:21:87:0d:
                    5c:d4:74:a0:f5:05:b0:c4:6f:82:18:68:cd:e7:3a:
                    c6:52:ff:80:31:11:1d:27:20:37:9b:47:7f:f4:6c:
                    35:c2:e2:81:9c:8c:31:ff:71:3d:80:c7:f5:1d:71:
                    92:35:9d:6d:0e:b4:29:1d:9a:ff:a1:cb:21:e5:59:
                    a8:9d:6d:4f:15:dd:33:50:98:18:9d:c8:dd:dd:fa:
                    08:af:ca:5f:0b:cf:c8:54:53:b1:7c:0a:13:6b:c4:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:9B:78:0D:67:DA:B3:0F:DD:25:8D:F9:AE:97:64:D4:9A:3D:7C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:fc:80:c7:a8:14:2b:11:dc:45:a8:d1:19:0c:58:1c:cf:
         86:eb:67:16:8f:47:97:47:a3:c6:6f:fa:a8:90:a4:a6:b9:d1:
         22:09:64:5f:58:99:fe:6c:ce:e4:bc:7e:9c:0d:8b:44:98:7a:
         dd:a0:6e:06:cc:40:cd:7f:f3:aa:24:ee:40:20:98:cc:3e:5d:
         f5:8b:68:f0:17:ca:ec:b1:9d:98:90:12:17:df:dc:0a:35:bf:
         64:08:e2:f0:51:06:9d:e5:fd:c5:a6:82:84:ba:db:12:34:49:
         57:a6:1f:b7:c5:f3:42:04:17:d8:6f:66:6a:5e:f8:96:59:36:
         8d:75:52:50:4a:55:51:dc:80:19:18:e5:b7:e0:fa:50:d4:33:
         ab:36:c1:dd:7c:61:75:09:4e:2f:57:7f:d4:f0:de:e0:35:6b:
         8d:80:a1:5a:fe:ac:ab:f5:ed:56:b0:e7:8f:d1:7e:f6:b5:4d:
         d2:4e:03:27:37:39:7f:59:3b:a9:4c:dd:b2:33:44:be:e5:d1:
         86:07:22:2f:87:2f:5a:85:a1:b5:f0:91:51:1a:17:8a:e1:43:
         24:cd:22:8c:25:6d:a4:08:05:18:70:51:43:fb:8a:dd:90:a6:
         bb:3e:e0:fd:5a:26:56:05:10:0d:09:a5:49:8e:a2:d6:db:be:
         b0:51:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----