Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa
File:                     36372e3231302e3130382e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          LhlnpxlA+Rkwx8GHQPSwGS4Z2yQ9oRQjXzd6F4cksko=
Subject key identifier:   B2:D3:CA:59:E0:5B:6A:BC:91:7F:46:A4:D0:45:54:02:00:F2:B0:BA
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4D27E16CB314EBAA715D72B17819A0297BC89573
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa
Signing time:             Mon 18 Jul 2022 14:10:05 +0000
ROA not before:           Mon 18 Jul 2022 14:05:05 +0000
ROA not after:            Mon 17 Jul 2023 14:10:05 +0000
asID:                     49999
IP address blocks:        67.210.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:27:e1:6c:b3:14:eb:aa:71:5d:72:b1:78:19:a0:29:7b:c8:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:05 2022 GMT
            Not After : Jul 17 14:10:05 2023 GMT
        Subject: CN=B2D3CA59E05B6ABC917F46A4D045540200F2B0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:61:82:2f:9f:9e:80:1e:9d:ea:0d:75:96:
                    5d:a0:73:43:2b:44:e5:b1:56:41:41:19:4a:7d:3d:
                    d6:0e:42:ba:e6:87:15:3b:6e:86:1a:47:e2:a7:56:
                    35:6f:5b:70:a3:a9:60:b1:3f:4e:f7:6e:b7:af:1f:
                    e0:8e:cc:c1:0a:a5:2b:e2:8a:24:e1:1f:c6:79:df:
                    74:6d:46:6c:b6:7d:e6:cf:99:9b:09:cc:3c:b4:fa:
                    22:ac:5d:9e:a2:9b:ef:4f:dd:d6:d6:3e:9a:1e:8a:
                    bd:5d:9e:db:b3:3f:2f:bd:69:d5:29:2f:5f:20:67:
                    52:19:d9:1a:dc:c5:71:97:3a:51:4b:f7:0c:b7:46:
                    01:7c:a6:64:56:3a:02:29:7e:4f:95:7e:00:98:10:
                    1a:cc:d1:78:d6:ff:c8:fc:e5:89:ac:f9:01:14:16:
                    cc:24:c9:55:15:9d:f8:7f:dc:3d:17:ff:e4:ba:f8:
                    e4:27:4c:37:6a:87:2f:bd:6f:ae:e7:16:8c:21:be:
                    ab:d1:b2:da:9d:29:f6:45:5e:0b:75:5d:89:dc:aa:
                    5f:ec:d8:61:5b:95:2c:e9:50:88:74:b6:fe:26:8c:
                    73:7b:91:c2:84:c7:6e:90:11:fe:6a:0c:6f:4a:47:
                    d8:4b:6b:34:73:10:bf:6b:7d:af:be:5d:f2:25:3a:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:CA:59:E0:5B:6A:BC:91:7F:46:A4:D0:45:54:02:00:F2:B0:BA
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:dc:a6:f6:a7:4a:f4:4b:3f:44:57:9d:69:aa:a3:21:66:
         f0:e3:02:20:0b:8e:00:0e:4d:1f:2c:d4:37:54:9e:14:bb:4b:
         9d:c4:e3:71:48:94:be:7d:e6:1a:a9:20:d5:55:bf:61:b1:5c:
         c1:bd:7c:d0:9a:fc:7b:a0:74:33:85:fd:cf:d7:33:85:8f:07:
         00:62:5f:8b:5e:3f:c8:35:a6:a4:03:bf:61:19:eb:b7:25:e6:
         67:58:58:6b:a9:96:9d:79:b6:9a:e6:68:53:5e:fe:1c:68:bb:
         1f:09:96:75:ee:5f:bf:ae:db:9b:ce:6a:ba:fc:f6:1d:b9:a9:
         eb:2b:77:61:16:20:8e:ff:b3:26:02:80:1e:44:5d:8a:ff:1e:
         44:7e:6c:f5:1a:71:6d:33:5c:ef:53:ab:24:e6:f1:a2:7a:cf:
         5d:77:be:a8:f0:ad:6e:60:ea:61:83:64:57:0f:dc:06:56:bc:
         73:f2:e8:fd:1a:da:24:be:c8:a3:0a:02:8a:07:a3:46:93:98:
         08:c2:9e:17:05:96:c0:ad:06:ee:63:1a:fd:df:09:00:0e:56:
         7b:5b:c2:5c:62:26:7e:c4:b0:bd:54:9a:6d:41:ab:55:f3:0c:
         30:5c:dc:3f:63:dc:a7:66:15:05:85:35:09:d1:84:89:50:86:
         b9:7c:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----