Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132342e302f32322d3234203d3e20323131353835.roa
File:                     36372e3231302e3132342e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          rQC9r9Dy42C5rT/SLCVhpgDyrw0/Bqb6w9hUYrTRLO4=
Subject key identifier:   1B:94:4A:DD:9B:26:81:2B:39:75:F8:34:02:A1:C5:31:9E:5D:3D:E0
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       37353F0949ECA7BA9F934A157A4BD1AB0AE4F1F5
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132342e302f32322d3234203d3e20323131353835.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     211585
IP address blocks:        67.210.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:35:3f:09:49:ec:a7:ba:9f:93:4a:15:7a:4b:d1:ab:0a:e4:f1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=1B944ADD9B26812B3975F83402A1C5319E5D3DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:c3:b2:73:16:b0:4f:a0:7f:dc:aa:40:3c:
                    74:4f:5d:16:63:a0:4e:ae:5c:78:35:d7:e2:97:a2:
                    16:3d:b3:73:d2:a1:de:7c:00:9a:30:78:87:2a:b2:
                    7a:4a:36:e9:48:59:dd:ad:9b:6b:c8:bf:80:b1:a6:
                    79:fa:74:67:ae:7c:aa:c7:79:4c:c5:33:15:ad:58:
                    40:82:f3:d3:27:97:df:22:29:52:fc:e8:dd:82:38:
                    47:c8:98:6a:cb:a1:09:db:48:70:fe:79:6e:f8:0c:
                    c2:03:26:26:0d:81:97:48:7d:e6:e5:02:7c:f3:8f:
                    de:e9:f0:a3:5d:d9:57:62:0f:b3:97:e1:47:84:80:
                    bc:bf:bf:83:df:29:96:6f:f9:97:91:df:f2:30:c0:
                    e5:a9:1e:08:84:2e:ae:36:68:fd:05:4e:c1:6a:db:
                    ba:04:c9:9f:03:c3:fd:50:b0:b8:0c:7e:20:be:a5:
                    10:f4:93:82:d6:3a:49:76:63:9f:7b:7d:16:64:26:
                    7e:60:e6:98:0a:77:20:d8:e8:69:ff:c7:58:ed:5b:
                    36:59:8c:de:26:b2:08:58:ed:9f:5b:62:a5:14:79:
                    bf:7f:83:96:2c:ef:a0:db:00:94:03:77:d1:b5:02:
                    af:08:3b:dd:82:a6:cf:42:48:74:fa:a1:15:1b:7f:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:94:4A:DD:9B:26:81:2B:39:75:F8:34:02:A1:C5:31:9E:5D:3D:E0
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e3132342e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:71:db:0b:61:1d:4e:1b:10:6b:d2:6c:c7:85:f1:f6:4d:
         1c:09:fd:ba:02:36:8a:ad:89:2e:93:63:7e:9b:cd:4a:17:ec:
         1c:0c:a7:8c:9f:56:95:4b:8e:4f:3b:c3:1e:fd:cf:79:96:33:
         1d:60:ce:79:70:d1:74:3c:24:bb:aa:88:3e:34:6e:59:db:48:
         4f:bb:6f:f5:a0:96:7d:cc:00:16:5d:41:46:bc:c3:6c:b0:8a:
         3c:c4:98:f9:96:e0:1e:5b:92:da:20:0b:dc:87:ba:b8:1e:f5:
         50:d7:f2:cf:d3:65:e7:7c:4c:df:36:b9:bb:f3:ed:6b:66:90:
         d2:3e:9e:65:e1:4e:fb:5a:46:fd:cb:06:af:f7:0e:fa:68:66:
         8f:2d:96:43:3f:09:cf:29:dd:f0:7a:1e:c3:fe:0f:4b:5e:c4:
         cf:4d:97:37:0c:51:14:16:f5:1e:9c:72:47:4f:5f:56:66:f3:
         14:dd:c9:61:6a:52:54:17:1c:91:d2:ee:f3:43:cf:0d:4c:83:
         63:e5:f0:d2:e9:c3:c6:8e:5d:32:a5:2e:36:6c:88:cc:a2:97:
         79:a6:6f:1e:f9:c7:3f:2c:f9:a3:e0:b9:60:a3:80:72:8b:81:
         41:fb:ca:d4:0f:13:10:9b:47:f0:f5:7b:de:1c:60:59:b4:8a:
         6a:36:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----