Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3235302e302f32332d3233203d3e203634363636.roa
File:                     34352e34312e3235302e302f32332d3233203d3e203634363636.roa (raw, json)
Hash identifier:          CohzWZmcC0oJsHu4FmNeglSXwv+hmTKfEPG7doDmrjk=
Subject key identifier:   C0:38:BD:3B:39:99:55:01:16:EC:BB:EE:19:88:3B:13:55:83:14:48
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       14877F366E52CCAFF8A8783307B69DDECCD33A47
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3235302e302f32332d3233203d3e203634363636.roa
Signing time:             Fri 21 Oct 2022 16:15:25 +0000
ROA not before:           Fri 21 Oct 2022 16:10:25 +0000
ROA not after:            Fri 20 Oct 2023 16:15:25 +0000
asID:                     64666
IP address blocks:        45.41.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:87:7f:36:6e:52:cc:af:f8:a8:78:33:07:b6:9d:de:cc:d3:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 21 16:10:25 2022 GMT
            Not After : Oct 20 16:15:25 2023 GMT
        Subject: CN=C038BD3B3999550116ECBBEE19883B1355831448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:14:e3:fb:97:64:03:61:55:15:34:e2:60:
                    fb:fc:41:4c:da:7a:8a:dc:fb:97:37:83:d0:a8:bc:
                    99:4f:6f:96:76:83:44:dd:fc:8b:ee:55:2d:2b:08:
                    98:e0:32:bd:f0:5b:8c:8b:d3:5c:68:24:bc:45:28:
                    d3:bd:df:e2:22:d2:33:98:ec:97:4d:5a:57:b3:d8:
                    72:e9:77:69:83:53:1a:72:fc:0c:c4:ec:6a:2f:e4:
                    3c:c0:39:16:1c:85:fd:ca:ce:1c:51:90:15:9e:fc:
                    8b:a4:e8:a4:ba:35:dc:23:7c:7c:07:d5:60:fb:6e:
                    b6:72:25:a6:d6:e0:54:08:e2:8d:2f:f2:25:1f:9a:
                    7b:00:16:fb:25:87:7a:05:d8:84:7b:12:64:93:93:
                    e1:dd:0f:cc:65:02:00:14:be:15:9f:e3:6e:d3:bf:
                    c3:c2:c4:0c:68:10:2b:1b:28:97:ea:3a:a5:1a:80:
                    b6:e7:08:f1:3b:86:c4:df:7f:d5:17:cf:40:8a:a3:
                    39:a2:c9:44:26:8c:e5:89:73:61:58:d0:bc:f4:5a:
                    69:68:9d:bd:67:1c:f3:a1:84:96:a8:8e:34:55:21:
                    27:0e:67:2b:0a:1f:04:68:57:79:2c:e7:cc:fb:ea:
                    47:cf:8f:07:51:c5:07:4d:6e:45:0d:b0:86:29:74:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:38:BD:3B:39:99:55:01:16:EC:BB:EE:19:88:3B:13:55:83:14:48
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/34352e34312e3235302e302f32332d3233203d3e203634363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:db:4d:c8:04:3c:55:b7:57:05:8e:67:52:fd:a3:6b:d2:d3:
         9c:6c:81:44:1f:6f:36:b3:15:b2:d0:f0:a9:7f:c4:ce:b7:f9:
         94:80:0a:ba:4c:22:1a:f4:a9:91:05:11:5a:df:f6:8a:1c:13:
         3c:97:ba:8a:c0:50:0c:4e:6d:ac:b9:49:71:07:07:30:ec:ad:
         70:1d:1f:99:dc:e4:4f:8f:bb:9b:f5:87:19:a6:58:89:05:58:
         11:e4:35:52:34:ca:66:6b:5c:1a:97:da:a5:4b:f8:15:26:6b:
         ad:fd:d1:41:82:75:fc:41:6b:87:82:53:8e:27:44:d3:c4:b4:
         4e:9c:23:8a:06:cf:fd:3c:f7:06:ab:e3:ab:31:fd:a1:d3:ca:
         00:bd:9f:e5:3a:c8:c4:e6:bb:ab:59:a5:ee:33:4b:2e:8d:c1:
         e2:1c:7b:6f:88:e1:52:06:29:69:d7:5f:7c:e2:0b:64:42:ee:
         c1:a1:09:7a:c1:c1:62:1e:b3:00:16:50:cf:5d:db:4b:95:8f:
         2b:5b:90:63:fd:b2:43:8b:0f:15:32:1e:b3:88:ba:82:33:c0:
         98:61:04:3b:3a:ff:e5:b0:4e:97:23:61:ba:18:70:a7:d7:80:
         a3:f6:f3:1f:bd:2a:89:1d:3a:bf:1f:71:4c:d8:1e:65:63:23:
         6e:ee:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----