Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132302e302f32322d3234203d3e20323039373337.roa
File:                     36372e3231302e3132302e302f32322d3234203d3e20323039373337.roa (raw, json)
Hash identifier:          jK8J8/ge72ekjHQ5sl4o2uP4rNbKEdQx/CkaKwLbJFY=
Subject key identifier:   5F:D3:5E:2C:9D:A6:25:67:A4:AB:C6:C4:95:8D:B8:C2:83:D2:B0:B9
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       750A28264E7701B6D2B72DA8A3DA556727610126
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132302e302f32322d3234203d3e20323039373337.roa
Signing time:             Wed 14 Sep 2022 17:02:35 +0000
ROA not before:           Wed 14 Sep 2022 16:57:35 +0000
ROA not after:            Wed 13 Sep 2023 17:02:35 +0000
asID:                     209737
IP address blocks:        67.210.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0a:28:26:4e:77:01:b6:d2:b7:2d:a8:a3:da:55:67:27:61:01:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Sep 14 16:57:35 2022 GMT
            Not After : Sep 13 17:02:35 2023 GMT
        Subject: CN=5FD35E2C9DA62567A4ABC6C4958DB8C283D2B0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:85:5c:48:a5:c5:fa:7e:71:1f:07:6e:b6:
                    bd:de:90:b3:77:75:04:28:b7:4f:f0:2b:49:9d:4f:
                    b0:7f:c7:69:bc:ad:e3:dc:51:50:00:98:f8:de:e7:
                    a6:4c:c7:56:94:ce:c5:dd:fe:b2:0c:74:fa:1e:40:
                    23:db:6d:6e:2f:fc:1f:7d:6d:c3:e5:b7:c1:4a:52:
                    ed:2e:07:0c:b2:0c:dc:e3:ce:d1:cc:9c:cf:cd:85:
                    20:9d:32:d5:92:b4:18:52:0a:85:24:03:7b:68:07:
                    a2:36:b7:cf:fe:46:1d:fe:fe:da:2a:d0:ec:10:15:
                    5c:eb:a4:59:b2:3c:43:ef:2a:02:a6:e5:bc:7e:11:
                    7a:d0:ca:e2:69:c1:7d:82:97:7e:08:3a:7e:7c:a9:
                    39:eb:92:3f:6f:93:4b:62:56:ed:20:85:40:52:df:
                    3d:ab:1f:98:18:2c:9b:6c:f9:82:d0:9a:4e:b1:3f:
                    cb:43:c0:1d:47:af:ec:d1:7a:07:28:64:b8:fe:a5:
                    a5:78:ba:83:14:53:b8:73:c5:4c:f0:48:4c:b0:52:
                    bf:c7:7e:cb:9e:10:bc:86:65:24:7f:56:ca:6a:61:
                    ad:fb:46:62:33:52:ed:a9:5b:a2:76:f9:d6:dd:13:
                    3c:85:78:ad:9e:de:57:13:ed:71:44:70:ae:ab:41:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:5E:2C:9D:A6:25:67:A4:AB:C6:C4:95:8D:B8:C2:83:D2:B0:B9
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132302e302f32322d3234203d3e20323039373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:2f:27:34:19:f1:39:b6:73:9b:9d:9f:df:e2:d6:67:7a:
         34:c1:a6:7c:65:e1:15:05:7f:71:e7:7f:d0:af:09:33:e8:3a:
         f0:55:be:42:d1:30:cc:e0:bc:56:9a:25:c1:fb:6b:15:5a:80:
         74:16:bd:af:c0:aa:ab:64:40:51:4e:40:ff:43:d6:85:5e:a5:
         24:ea:0b:8b:3c:ff:49:69:fb:9c:0e:1e:71:cb:9c:f1:38:18:
         58:ba:43:c5:d8:1c:5e:70:c1:c8:da:aa:fd:7b:06:10:5d:8e:
         89:47:7e:9e:93:26:89:56:91:57:83:71:21:74:93:60:e9:49:
         86:06:2d:4d:e9:b7:42:c4:27:e1:c8:a2:77:6e:e5:5e:8f:8e:
         70:7b:b3:af:4e:66:77:d1:47:b6:d4:c4:c9:a4:f1:0c:67:41:
         b6:9d:e6:0f:25:1d:10:6c:de:96:f8:31:9c:67:12:54:3b:d2:
         41:d3:6e:07:d4:a5:dd:b5:e2:1b:a2:57:8d:d1:7e:dc:32:a6:
         4b:ad:12:be:40:15:3d:38:19:9a:94:24:d2:d0:8f:5a:c2:ef:
         a4:46:e9:4d:82:c6:11:88:27:09:aa:fd:2d:32:7d:61:eb:e6:
         b5:c8:96:40:15:a0:1e:ff:99:49:1c:75:69:51:34:a8:17:31:
         a1:76:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----