Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130302e302f32342d3234203d3e203631313338.roa
File:                     36372e3231302e3130302e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          +xHqaHO06x5qHUsfUFDYa5BgMR4pbWrclhW0jYGIeaQ=
Subject key identifier:   D5:D2:11:16:02:31:2C:0B:F3:7E:3B:36:DE:E3:03:9F:DE:26:D3:F8
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       6C1959F69FEFBE83322A37C18D3F22683AA6BB7F
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130302e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 16 Nov 2022 11:29:07 +0000
ROA not before:           Wed 16 Nov 2022 11:24:07 +0000
ROA not after:            Wed 15 Nov 2023 11:29:07 +0000
asID:                     61138
IP address blocks:        67.210.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:59:f6:9f:ef:be:83:32:2a:37:c1:8d:3f:22:68:3a:a6:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:07 2022 GMT
            Not After : Nov 15 11:29:07 2023 GMT
        Subject: CN=D5D2111602312C0BF37E3B36DEE3039FDE26D3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:5a:9e:41:fb:c2:89:ce:40:b9:d5:63:d1:
                    d1:7b:73:b9:10:1d:98:ca:de:2d:8e:05:a5:bc:48:
                    50:de:54:cc:e5:ff:ee:e8:59:1e:98:5d:be:9e:1d:
                    c7:9d:e2:fb:43:48:13:f7:fc:f6:7f:60:f4:7f:8a:
                    a8:a4:46:6b:c0:19:4b:18:15:bf:3f:e5:55:19:9a:
                    a1:f2:e8:da:f8:e4:80:16:16:2f:3e:4b:1a:e5:f8:
                    31:e6:2b:7e:01:3e:9c:8c:cd:76:22:b1:a3:cd:b0:
                    de:f6:56:ff:df:77:92:12:1c:e4:41:02:3e:86:b2:
                    e8:ad:63:85:f7:5e:40:8a:16:d3:57:70:d7:8f:c1:
                    82:58:dc:2f:de:7c:ba:93:a0:04:ce:cd:6f:df:46:
                    bf:7d:e4:e3:de:db:17:a0:09:f0:33:ef:ce:46:36:
                    b5:4a:bc:eb:b7:bd:2a:a0:8d:b7:ec:d8:22:c7:86:
                    c0:18:b6:e9:c1:13:63:2c:c1:78:eb:2e:6c:90:0e:
                    10:0b:ff:fd:35:76:c4:83:b4:13:31:f2:7d:a9:b7:
                    68:cb:8e:c5:a0:aa:d1:92:a4:68:30:c1:28:8a:d2:
                    92:62:27:fd:12:70:ff:31:e1:9a:27:00:01:73:87:
                    79:e6:51:ed:fa:59:41:f4:a6:0f:2c:db:05:03:1b:
                    7d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:11:16:02:31:2C:0B:F3:7E:3B:36:DE:E3:03:9F:DE:26:D3:F8
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130302e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:66:a5:76:5f:48:d5:c1:ba:c2:c9:a8:9e:5a:e0:95:05:de:
         72:52:c2:67:5c:f7:6f:33:68:11:d7:19:91:b9:ee:6d:ab:14:
         58:b1:55:0f:7e:d1:d5:1f:46:1d:2f:68:ac:30:9e:2d:07:49:
         7b:14:94:6a:e7:af:fd:6d:da:c8:be:dc:b5:c3:35:1f:07:d0:
         1a:d9:35:98:6a:ae:55:81:08:21:6b:2c:e7:f4:9d:5f:d0:a3:
         e3:9d:f1:ff:f2:dd:40:3e:82:26:9a:a1:a8:91:a7:a3:63:9f:
         12:2a:48:25:00:c7:68:c1:5e:cf:0f:e9:8c:b8:26:89:27:0c:
         b4:fc:e3:96:d7:97:2b:ab:17:43:b9:81:00:1a:63:79:23:ce:
         2d:15:f4:da:3e:ff:e9:f0:fc:7e:1c:a4:fd:94:ca:f6:0f:9e:
         13:99:f8:17:0b:c6:ae:9c:8e:33:aa:ba:46:34:0c:7b:31:68:
         8e:38:8d:6b:ca:c2:fd:2a:72:33:20:aa:17:c7:d6:09:6a:3f:
         e7:8f:f8:be:03:76:14:8e:3d:be:85:46:61:a2:ce:29:da:6f:
         8b:a6:f5:75:4c:4f:d6:8d:8f:e3:06:be:16:a2:80:c2:8d:9f:
         e4:00:43:42:3f:a3:6e:75:04:97:4e:5f:f8:f5:a0:4c:1e:6f:
         5f:e2:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----