Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
File:                     36372e3231302e39372e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          5gEY1bQKNFCjpAL3EOF4HobGXLP9+zESsdeA6/xtJFg=
Subject key identifier:   1F:6B:C2:89:2E:67:22:CB:47:2B:8C:84:B9:9A:53:08:04:DB:55:27
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       70B3A48331C268298FCBEDCD2C53FDEFF117D4E8
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     55154
IP address blocks:        67.210.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b3:a4:83:31:c2:68:29:8f:cb:ed:cd:2c:53:fd:ef:f1:17:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=1F6BC2892E6722CB472B8C84B99A530804DB5527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:91:b4:76:36:da:db:d2:71:38:14:b4:3f:
                    4c:cf:1d:cf:55:e8:db:d6:d2:84:b5:7a:68:6e:98:
                    0b:ca:84:72:da:8e:82:cc:4e:c0:fb:d0:9c:5b:a0:
                    3e:d4:a5:11:b2:b8:01:dc:50:d6:97:55:1f:af:46:
                    7a:a4:4d:76:e9:5f:3c:d6:b0:8f:23:67:39:f7:ed:
                    ae:66:5a:4d:5f:6b:42:55:40:90:ab:65:83:9e:1f:
                    3e:48:c7:31:4a:e6:37:0f:bf:df:1e:05:f5:fa:ab:
                    f5:da:bb:6f:00:f6:64:3a:23:d3:6b:6d:76:09:4f:
                    f0:67:79:c1:a4:71:88:68:bd:29:84:3e:f5:6f:6e:
                    71:e8:44:ac:a8:21:9e:13:51:23:9d:b8:bb:18:2b:
                    86:60:aa:28:ed:df:5f:af:7a:41:91:4c:8e:a0:05:
                    33:14:b5:c5:e0:bf:50:d5:44:fd:9f:9b:55:c7:fa:
                    1f:77:cc:a2:cd:a4:88:2f:c1:69:18:d6:7e:63:b8:
                    50:d6:b4:71:9a:5d:d1:b2:40:80:86:85:39:4f:7e:
                    c5:69:b5:4b:a4:aa:cd:85:31:92:9b:8e:da:d3:d7:
                    0a:13:55:bc:0e:98:ca:d1:ed:fa:89:90:db:ae:66:
                    df:d4:69:aa:7a:6f:0b:61:23:2f:5a:4c:b9:d1:fa:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:C2:89:2E:67:22:CB:47:2B:8C:84:B9:9A:53:08:04:DB:55:27
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:63:7e:bf:fb:cd:d9:c4:b3:9f:f5:f6:b9:ad:76:2b:59:af:
         a0:22:dd:77:63:f9:ee:ee:42:7b:2e:ad:d9:67:a6:95:fd:2d:
         97:23:af:e9:6d:a5:65:c0:4a:e1:1e:12:f2:aa:f3:62:71:b8:
         d8:63:f7:66:c5:02:87:65:f9:82:72:f6:7a:5c:35:17:31:2c:
         63:e2:5a:6f:b1:c0:7a:07:18:6d:84:f4:24:d9:4c:ee:e1:dc:
         c1:e3:23:64:62:8f:1c:fc:1c:f9:5e:33:50:60:46:c5:2f:7a:
         51:5e:f4:c0:3d:1f:ce:30:30:4a:83:98:38:04:c0:ec:8d:fe:
         91:39:bc:a8:85:51:69:65:02:18:99:3b:6b:97:47:1a:52:f3:
         50:db:6c:02:77:9d:a6:6f:29:14:08:34:25:7f:43:0d:9f:78:
         28:7c:a5:6e:fb:82:ac:fe:b1:ce:95:88:71:27:27:43:7a:71:
         1d:e4:71:9e:4d:84:81:05:e1:19:dc:c6:0f:26:b4:e9:cc:ac:
         0a:85:1a:41:15:72:9b:4b:88:53:e2:46:bd:03:ab:00:b3:6b:
         8d:be:ca:20:ee:7f:e1:fd:19:58:6f:53:ca:7e:7c:91:20:63:
         f0:3f:56:33:62:d2:79:17:c3:7e:5e:61:07:93:3b:0d:0c:45:
         5d:c1:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----