Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          bz70sIl4BXWnFNIjzs3rgvdZK42+RLOsHdhWfBC1oP0=
Subject key identifier:   04:29:59:00:F0:E0:DD:59:50:99:12:8F:39:0F:C8:F2:01:30:BC:4B
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       08B76CE6CFFB7B00BF5ECB2D573BAAA574AF6C7A
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS212238.roa
Signing time:             Tue 15 Nov 2022 13:46:41 +0000
ROA not before:           Tue 15 Nov 2022 13:41:41 +0000
ROA not after:            Tue 14 Nov 2023 13:46:41 +0000
asID:                     212238
IP address blocks:        64.50.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:6c:e6:cf:fb:7b:00:bf:5e:cb:2d:57:3b:aa:a5:74:af:6c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 15 13:41:41 2022 GMT
            Not After : Nov 14 13:46:41 2023 GMT
        Subject: CN=04295900F0E0DD595099128F390FC8F20130BC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:1b:a0:48:56:b1:63:d7:fc:ba:d1:f4:35:
                    ce:c6:a9:24:87:7f:14:1e:b4:45:70:7d:38:bb:32:
                    e9:57:c2:8e:d6:57:18:31:8d:f0:e5:47:61:a3:4b:
                    55:89:e0:a2:8c:b9:f0:12:26:e4:a1:b0:8d:0f:a4:
                    cb:82:53:19:67:6d:fb:1c:49:7e:dc:0e:25:80:9e:
                    54:c0:f2:38:49:f0:68:13:58:15:28:36:03:31:3b:
                    da:bf:24:e1:6e:74:7e:93:95:7b:71:47:2f:17:a6:
                    28:cb:28:d9:b7:dc:b2:ea:91:68:69:b0:a0:67:9e:
                    d8:94:e5:e2:d3:3a:08:77:0c:72:f6:fb:cf:94:87:
                    2c:69:14:ba:c0:0d:d3:0e:25:91:34:3a:ed:c7:e6:
                    1e:4d:88:ea:6a:51:db:9d:2e:d1:89:be:56:85:3c:
                    8f:4d:ee:97:21:95:9a:d6:14:fc:23:35:53:68:3d:
                    08:29:74:d6:88:ce:38:ab:c1:bf:5e:93:45:e4:71:
                    fc:df:ef:ae:92:f2:2c:e6:d0:08:82:72:38:10:e1:
                    9f:4d:21:b0:b1:03:85:21:24:83:a0:57:fe:76:12:
                    88:8e:68:d9:94:81:43:7b:c1:16:c6:10:b4:16:93:
                    88:6c:31:3b:c2:9e:bd:ec:ca:27:98:64:32:82:44:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:59:00:F0:E0:DD:59:50:99:12:8F:39:0F:C8:F2:01:30:BC:4B
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:25:58:5f:b9:cb:b7:e9:b2:90:69:06:b8:d2:fc:bb:68:d5:
         7a:03:14:22:e7:10:3b:c8:f3:d9:7d:35:d9:1f:32:48:30:39:
         15:11:7b:fa:29:10:b5:1b:05:3a:02:52:c3:5e:6e:22:4e:3f:
         37:a8:80:be:29:55:17:46:92:fe:1d:88:7f:25:19:92:4b:5b:
         24:a8:1b:58:e2:7b:db:be:7e:27:19:6c:3b:23:7b:43:9a:bc:
         63:a0:eb:16:8d:ee:98:86:56:cb:13:2c:75:18:ed:f9:9d:5b:
         6e:54:27:2b:05:c2:ae:0f:95:34:7b:bf:0e:b5:67:29:31:cf:
         eb:4f:47:61:c1:76:f2:3f:b0:19:eb:64:39:60:1c:af:96:98:
         a8:b1:69:72:5c:4e:a2:d4:6b:14:4d:d0:eb:3a:1f:e6:13:4f:
         40:f6:ab:d8:f1:4f:be:6e:cf:5c:8c:ae:5b:5e:ac:8e:80:f0:
         0c:45:a2:0f:30:29:e5:07:f4:08:8b:e3:7b:61:49:a9:8a:76:
         fd:14:cf:e7:31:1c:5d:b4:e5:54:8f:47:38:aa:e9:8d:80:87:
         ef:84:ba:24:af:d3:65:4d:91:ec:8b:17:02:c0:37:2c:7b:f4:
         f3:33:db:3a:1b:b7:3d:94:3e:9d:fb:f3:a0:ba:82:65:12:00:
         bb:79:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----