Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa
File:                     36342e35302e3136342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          a7P/VctVjPjTfbASWSp9wiD9Vsy0HeD8YOj1vJni2vQ=
Subject key identifier:   2F:CB:8D:D7:0C:B7:69:05:70:97:9B:B2:00:55:97:AE:F9:63:84:50
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       65FF72C17EDD118D44E52618624D9A6AE167E829
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 16 Nov 2022 11:29:03 +0000
ROA not before:           Wed 16 Nov 2022 11:24:03 +0000
ROA not after:            Wed 15 Nov 2023 11:29:03 +0000
asID:                     212238
IP address blocks:        64.50.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ff:72:c1:7e:dd:11:8d:44:e5:26:18:62:4d:9a:6a:e1:67:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:03 2022 GMT
            Not After : Nov 15 11:29:03 2023 GMT
        Subject: CN=2FCB8DD70CB7690570979BB2005597AEF9638450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:47:e1:9b:4c:34:4e:6d:7b:a2:4b:da:75:
                    60:05:b8:9c:7b:72:c2:4f:fa:8e:ee:92:b0:c1:a8:
                    97:1e:4c:f5:54:06:25:8f:b5:de:23:cf:31:f2:25:
                    d0:ff:2c:6e:47:b5:7e:00:7f:a8:1b:fe:39:fd:ef:
                    80:d0:fe:77:a8:25:f4:fe:7e:97:0d:93:94:2a:73:
                    f5:ef:65:f7:d7:76:6c:45:3d:08:03:33:a5:7a:bd:
                    f4:83:a9:54:1f:de:ce:66:c9:c7:43:e5:f7:a9:e8:
                    1e:42:8b:bd:10:bc:94:e3:44:f8:ba:b2:b5:91:57:
                    99:4f:11:36:7b:f8:13:03:8d:60:6e:eb:50:bf:ba:
                    27:4a:64:d7:9d:c9:7c:9b:bf:7b:b2:20:4e:3e:b0:
                    f6:84:6f:c8:86:d2:e8:da:5c:cf:72:bd:af:b6:5f:
                    fc:cd:6d:92:bb:74:c2:83:7d:93:d7:5d:86:f0:6d:
                    2e:8b:26:c1:38:c0:cf:bc:23:0a:a8:a6:dc:cf:79:
                    bb:05:7a:45:b5:a3:0f:0a:b0:fa:f8:3a:b9:3a:ed:
                    dc:50:36:44:9e:1d:31:49:2e:36:09:33:5c:9b:09:
                    a3:c7:93:51:12:e5:43:5a:97:24:b4:82:bb:78:c8:
                    72:d2:9b:38:51:ce:eb:38:ba:ee:fc:ac:7a:45:33:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:8D:D7:0C:B7:69:05:70:97:9B:B2:00:55:97:AE:F9:63:84:50
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136342e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:80:34:1c:22:90:9f:99:38:40:c5:e2:43:02:ed:43:ac:
         07:0a:51:0c:c7:fb:ad:87:d6:ae:0b:39:7f:17:a6:a0:0c:1b:
         19:a6:af:eb:03:ad:6b:49:4c:2e:71:4d:1e:e1:44:36:18:e1:
         ac:3d:83:f6:73:b3:ab:ca:df:06:ca:0d:85:04:bd:84:d9:b3:
         33:5a:78:fd:a2:69:b2:b0:66:bf:19:5b:7c:44:b5:4f:f7:04:
         0c:51:66:10:11:f0:6a:d7:eb:87:1b:f2:a6:c0:31:d2:9a:2a:
         c5:7d:e5:7b:98:ae:6a:8b:55:a8:af:23:77:1a:71:a5:29:47:
         9e:eb:7a:5c:ca:ce:83:20:8c:c1:25:1b:d9:b6:95:eb:5d:09:
         52:43:71:57:82:5f:45:78:77:b7:d2:36:34:45:26:50:c8:45:
         6b:f3:02:47:bb:a8:d5:11:4d:2d:c3:d2:7b:d4:12:7b:db:60:
         f1:74:99:32:7d:15:59:95:c7:b5:cc:87:b2:02:42:a7:50:cb:
         5c:ed:8a:8c:da:79:cd:26:9b:7c:a2:83:0d:a0:21:49:db:8b:
         be:d6:9c:f7:47:47:1b:d2:64:80:33:82:43:f3:20:45:52:c3:
         0d:da:6e:da:ea:46:ab:bf:c8:d0:72:86:c2:b2:83:db:c3:b6:
         e3:02:fc:6f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUZf9ywX7dEY1E5SYYYk2aauFn6CkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDAzWhcNMjMxMTE1MTEyOTAz
WjAzMTEwLwYDVQQDEygyRkNCOERENzBDQjc2OTA1NzA5NzlCQjIwMDU1OTdBRUY5
NjM4NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X9H4ZtMNE5t
e6JL2nVgBbice3LCT/qO7pKwwaiXHkz1VAYlj7XeI88x8iXQ/yxuR7V+AH+oG/45
/e+A0P53qCX0/n6XDZOUKnP172X313ZsRT0IAzOler30g6lUH97OZsnHQ+X3qege
Qou9ELyU40T4urK1kVeZTxE2e/gTA41gbutQv7onSmTXncl8m797siBOPrD2hG/I
htLo2lzPcr2vtl/8zW2Su3TCg32T112G8G0uiybBOMDPvCMKqKbcz3m7BXpFtaMP
CrD6+Dq5Ou3cUDZEnh0xSS42CTNcmwmjx5NREuVDWpcktIK7eMhy0ps4Uc7rOLru
/Kx6RTO6iQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC/LjdcMt2kFcJebsgBVl675
Y4RQMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzM2MzQyZTM1MzAyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEAypDANBgkqhkiG9w0BAQsF
AAOCAQEAMHuANBwikJ+ZOEDF4kMC7UOsBwpRDMf7rYfWrgs5fxemoAwbGaav6wOt
a0lMLnFNHuFENhjhrD2D9nOzq8rfBsoNhQS9hNmzM1p4/aJpsrBmvxlbfES1T/cE
DFFmEBHwatfrhxvypsAx0poqxX3le5iuaotVqK8jdxpxpSlHnut6XMrOgyCMwSUb
2baV610JUkNxV4JfRXh3t9I2NEUmUMhFa/MCR7uo1RFNLcPSe9QSe9tg8XSZMn0V
WZXHtcyHsgJCp1DLXO2KjNp5zSabfKKDDaAhSduLvtac90dHG9JkgDOCQ/MgRVLD
Ddpu2upGq7/I0HKGwrKD28O24wL8bw==
-----END CERTIFICATE-----