Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa
File:                     38392e33352e39342e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          pVLHZotrNkSRD0D033L6JS64bndtbIymTUYfr+IoLY4=
Subject key identifier:   61:D2:5D:97:67:4E:D2:A1:5B:56:8D:F6:C4:E3:9E:EA:CC:59:9E:47
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       786474E6FE8ABBC8453C2D58302C41CD5C99659E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:50 +0000
ROA not before:           Mon 18 Jul 2022 14:04:50 +0000
ROA not after:            Mon 17 Jul 2023 14:09:50 +0000
asID:                     1239
IP address blocks:        89.35.94.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:64:74:e6:fe:8a:bb:c8:45:3c:2d:58:30:2c:41:cd:5c:99:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:50 2022 GMT
            Not After : Jul 17 14:09:50 2023 GMT
        Subject: CN=61D25D97674ED2A15B568DF6C4E39EEACC599E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:03:59:c5:85:81:70:5f:6c:aa:6f:48:38:
                    e3:ec:19:cc:fe:9f:d5:e2:e7:16:c1:68:e6:91:72:
                    17:b1:87:a8:3c:f1:97:1e:a8:b4:34:9d:93:78:ac:
                    80:88:64:75:47:92:5c:af:7f:27:78:70:f7:1c:8a:
                    e8:c9:59:17:01:7b:ac:3d:e3:98:3e:5e:87:e8:1e:
                    4d:7b:41:2f:f2:8e:e9:14:57:45:96:4a:04:eb:e8:
                    68:14:26:46:f6:56:97:01:ba:ca:d3:0c:bc:8a:98:
                    20:73:31:30:06:9e:08:70:21:04:b8:b6:9b:8e:07:
                    be:0c:30:77:79:4d:fa:54:a4:68:81:8f:e7:7a:b6:
                    bd:58:3a:f8:97:97:f9:32:10:19:86:d6:46:c5:c6:
                    5d:ac:a3:a8:20:4b:50:60:03:42:87:2d:13:fc:4c:
                    95:30:4a:46:e6:28:09:af:80:4f:12:f5:05:90:2c:
                    5a:6c:e9:76:06:71:bf:30:cf:9f:5f:6b:85:e0:76:
                    c8:10:a6:f2:95:7b:04:27:38:ad:10:d6:46:9a:7e:
                    64:ab:ce:8f:80:da:33:ee:3c:e9:8f:55:17:4b:04:
                    73:53:53:38:d1:88:bb:a2:00:79:e8:f7:28:6b:8d:
                    f8:70:ae:33:33:0b:b7:d1:f4:21:47:55:2c:32:8d:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:5D:97:67:4E:D2:A1:5B:56:8D:F6:C4:E3:9E:EA:CC:59:9E:47
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:82:84:15:25:0c:fd:49:ed:e0:65:65:d1:2f:3c:98:05:
         bc:48:44:12:45:01:4b:0a:fb:ae:b9:60:c2:c8:0f:cf:e4:ad:
         b4:d4:83:31:bf:53:de:44:8b:3b:27:0b:f1:67:9f:3a:ab:ec:
         27:ce:60:db:ba:66:df:36:0b:be:14:4e:b9:42:a5:d4:f3:bb:
         4c:13:83:f0:97:d6:97:8c:da:05:7c:6e:17:fc:5f:1e:33:10:
         9d:11:ff:7a:5c:c2:d6:69:0e:50:9c:b6:3e:5c:9c:52:f0:20:
         a0:8e:4d:ee:e6:44:5e:5f:96:e5:ed:9b:b3:8f:cd:e9:63:fc:
         85:77:df:b2:16:34:cc:0d:2e:e4:48:42:cf:63:a9:e8:5c:fb:
         b6:8c:31:f2:66:d1:59:7b:77:0d:07:6e:7a:77:5f:9a:1a:24:
         af:10:ae:68:8d:e9:f0:66:75:42:99:bb:70:5a:92:53:03:cc:
         dd:b9:3b:97:4c:5b:0c:c9:de:07:bc:b6:b8:bc:2c:9d:a8:06:
         0f:b1:97:62:01:2c:77:21:81:06:83:13:c0:cd:da:74:bd:1c:
         26:7b:7f:82:19:ae:1d:92:de:97:dc:08:87:86:61:ca:fc:f8:
         b6:93:1e:92:4b:eb:88:ae:fd:5e:41:33:48:79:72:1b:b6:fe:
         c0:7c:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----