Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
File:                     36372e3231302e39362e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          Y1E+lx4uJJM2HGl0oSIi655jEZ+z7Ron/1fn4El2cgM=
Subject key identifier:   7B:17:11:9F:8D:9F:D0:63:D0:45:82:F0:E6:42:99:7F:D6:81:EF:C3
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       014ECE297FD6E6237EAEB9AA33F79B50813A2C85
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     49999
IP address blocks:        67.210.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:ce:29:7f:d6:e6:23:7e:ae:b9:aa:33:f7:9b:50:81:3a:2c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=7B17119F8D9FD063D04582F0E642997FD681EFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:14:ec:e0:a5:09:9c:44:f2:00:89:bb:7f:
                    81:3e:ec:de:91:da:65:1e:f8:51:d5:6f:64:a1:3a:
                    33:64:b5:b9:96:52:9e:43:78:d7:ff:c2:37:5d:8a:
                    5a:a6:26:4c:21:e7:33:65:f3:73:50:58:6b:58:c5:
                    40:51:c4:16:3d:d3:ad:1c:5b:ef:47:81:81:d5:74:
                    87:8f:cb:99:4b:30:9d:35:e2:4b:34:c1:86:cd:bc:
                    74:0d:16:4c:31:ba:04:2b:05:52:25:97:48:cb:50:
                    94:07:da:ba:a8:2b:23:de:e4:fd:58:f1:3a:8f:74:
                    7f:fe:f9:63:86:e1:cd:76:2d:ea:ed:1c:3a:32:77:
                    80:89:00:ba:f6:f9:8f:0c:ff:1c:25:c5:93:d2:52:
                    d2:cd:93:a8:ec:2b:a9:66:12:78:e3:b3:7b:99:79:
                    37:b0:12:2a:ce:aa:69:03:64:4c:4e:51:3a:51:cd:
                    60:6c:88:a4:6c:e9:b2:3c:d6:76:06:63:ef:d3:73:
                    2f:46:54:aa:ba:0e:ba:61:81:c6:5d:25:98:25:57:
                    65:14:98:20:96:25:1f:7c:c7:ea:9d:ec:ea:3f:9d:
                    b4:78:71:ed:48:f8:e2:e8:b7:0b:e5:4e:83:eb:7f:
                    09:08:04:a0:88:b4:dc:0f:af:c7:fe:00:26:05:33:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:11:9F:8D:9F:D0:63:D0:45:82:F0:E6:42:99:7F:D6:81:EF:C3
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:aa:95:0d:67:ba:21:8e:ce:bd:ef:1c:a8:02:40:6a:de:
         18:70:c2:ac:b6:02:80:21:a4:2c:79:c1:78:a3:6a:4c:eb:63:
         e5:18:f3:b1:e8:f3:30:07:ee:3b:0f:be:37:a8:db:20:78:0c:
         e1:7e:ed:02:25:0f:3f:9c:2a:b5:e2:c1:fc:57:4c:dc:21:a2:
         41:7c:37:30:2a:a1:5d:4e:99:f1:36:c1:b1:5a:b3:bf:70:ba:
         0a:5e:d7:8c:9e:b0:5f:5b:85:f2:71:f8:d5:f7:91:0f:d2:6e:
         d5:e6:6f:2d:26:09:ec:24:6d:1f:8b:bc:3f:1f:78:44:4e:bc:
         aa:ed:7c:82:09:d2:26:d8:d2:0f:da:88:72:dc:17:37:2e:b8:
         04:64:96:ce:90:86:54:c5:18:0a:40:10:4f:77:9e:92:7d:7e:
         96:e2:00:a5:e6:42:5d:da:7f:88:0e:4e:4a:ed:ec:27:a4:4a:
         a3:a7:3b:8d:27:8b:3d:e7:63:05:46:a1:0e:34:b6:62:8b:36:
         4c:12:fc:ea:f7:07:06:20:b8:52:b7:1f:0d:11:aa:f8:8c:c4:
         33:45:63:3d:3d:de:b9:09:56:2c:79:ba:09:be:ed:81:4e:84:
         4c:d4:0e:3c:83:18:40:da:5b:41:b7:38:13:40:62:5a:c7:f0:
         9a:9e:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----