Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          MaAh8ULYvx0eTftWjhVrlJpXrtzUHq3yhBKD9nzUkZI=
Subject key identifier:   94:01:5C:A8:31:D5:09:2F:19:3B:BF:29:6E:B0:65:6C:91:EC:D1:DE
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4DBD062D8FCE5948F99B25F141047C84872A4E33
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa
Signing time:             Mon 18 Jul 2022 14:09:50 +0000
ROA not before:           Mon 18 Jul 2022 14:04:50 +0000
ROA not after:            Mon 17 Jul 2023 14:09:50 +0000
asID:                     46562
IP address blocks:        209.200.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:06:2d:8f:ce:59:48:f9:9b:25:f1:41:04:7c:84:87:2a:4e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:50 2022 GMT
            Not After : Jul 17 14:09:50 2023 GMT
        Subject: CN=94015CA831D5092F193BBF296EB0656C91ECD1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:06:dd:22:25:c8:85:91:0a:93:e5:51:9f:
                    3c:62:a3:b9:1f:ad:f3:cf:6f:15:5d:eb:56:3a:13:
                    57:48:3b:8f:f4:81:e2:80:0a:7e:75:0f:13:8c:ec:
                    09:04:be:19:d4:bc:02:94:5d:35:97:6f:cc:04:c6:
                    58:55:bb:78:a3:a1:78:1a:80:d4:9e:bb:57:e6:ef:
                    1a:72:14:d7:d1:30:77:9f:74:fd:e2:cb:b2:7b:9b:
                    83:72:f9:a4:ab:bc:5e:ab:c2:86:eb:e6:8a:53:45:
                    b9:12:8f:da:4c:a8:a9:a7:dc:bb:f8:08:25:ff:5f:
                    79:ee:df:e0:c7:bd:84:92:20:e1:7e:59:ae:43:02:
                    e8:5b:46:d7:d4:d4:72:ca:c1:f1:72:fe:fe:16:22:
                    a3:4d:34:df:20:7e:73:10:17:4b:0c:b8:b5:01:c8:
                    ce:9f:31:17:66:70:8a:e0:e6:d9:3d:db:6d:8d:28:
                    8e:0f:4d:b1:63:a2:96:05:d5:69:5f:9f:25:81:c8:
                    55:f7:b9:8c:78:60:89:a2:54:84:ac:05:21:00:8a:
                    c4:71:e5:e1:1a:01:b2:97:1c:43:01:8c:9a:0a:3d:
                    74:7b:bc:fe:a3:a0:7c:2b:18:09:4f:e3:a4:57:46:
                    a8:65:f0:91:ba:b0:95:bb:ae:34:00:65:67:6f:f8:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:01:5C:A8:31:D5:09:2F:19:3B:BF:29:6E:B0:65:6C:91:EC:D1:DE
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:6b:ae:06:6d:fc:df:36:58:ed:d2:52:9a:b6:c1:0c:69:
         b7:00:9f:87:87:be:60:b7:01:66:21:2c:8c:63:04:08:3d:de:
         a3:14:2a:91:ca:57:33:e4:40:df:5e:58:02:1c:b6:e4:f1:17:
         6a:bf:3f:1d:46:c9:f5:bf:48:44:eb:a8:40:8b:e4:05:14:13:
         34:cf:8d:e1:a8:68:01:51:5f:7f:3f:d9:7e:a7:4c:25:48:97:
         f8:e8:f5:2e:92:08:6c:b4:84:b6:e7:dd:d2:2c:bf:10:e5:8a:
         17:05:fb:3e:3a:fd:69:c5:19:b8:51:33:f7:a7:6c:34:73:95:
         45:45:f5:5a:4b:37:ae:35:5f:d3:15:1d:c1:d0:92:e6:3a:08:
         57:c3:40:3c:a8:75:c0:2c:f9:56:14:5d:fa:b9:a5:6a:19:39:
         d2:80:0e:46:6c:dd:da:0f:ea:be:61:fa:01:13:be:b9:60:7a:
         fb:1d:10:0d:e1:ce:10:58:22:fe:88:92:72:9e:fd:3c:49:17:
         82:f1:38:e5:d7:34:81:fd:25:ff:ce:0c:12:92:5f:a5:7f:45:
         58:cb:78:72:96:3f:8e:17:0c:52:5e:f5:a6:0a:1b:f6:13:52:
         9e:79:84:e4:b9:06:2c:c6:a9:dc:7a:9a:87:d6:1b:1c:46:ba:
         7c:d5:c6:80
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUTb0GLY/OWUj5myXxQQR8hIcqTjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNDUwWhcNMjMwNzE3MTQwOTUw
WjAzMTEwLwYDVQQDEyg5NDAxNUNBODMxRDUwOTJGMTkzQkJGMjk2RUIwNjU2Qzkx
RUNEMURFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaQG3SIlyIWR
CpPlUZ88YqO5H63zz28VXetWOhNXSDuP9IHigAp+dQ8TjOwJBL4Z1LwClF01l2/M
BMZYVbt4o6F4GoDUnrtX5u8achTX0TB3n3T94suye5uDcvmkq7xeq8KG6+aKU0W5
Eo/aTKipp9y7+Agl/1957t/gx72EkiDhflmuQwLoW0bX1NRyysHxcv7+FiKjTTTf
IH5zEBdLDLi1AcjOnzEXZnCK4ObZPdttjSiOD02xY6KWBdVpX58lgchV97mMeGCJ
olSErAUhAIrEceXhGgGylxxDAYyaCj10e7z+o6B8KxgJT+OkV0aoZfCRurCVu640
AGVnb/i1fwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJQBXKgx1QkvGTu/KW6wZWyR
7NHeMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM2MzUzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjkMA0GCSqGSIb3DQEB
CwUAA4IBAQCLkGuuBm383zZY7dJSmrbBDGm3AJ+Hh75gtwFmISyMYwQIPd6jFCqR
ylcz5EDfXlgCHLbk8Rdqvz8dRsn1v0hE66hAi+QFFBM0z43hqGgBUV9/P9l+p0wl
SJf46PUukghstIS2593SLL8Q5YoXBfs+Ov1pxRm4UTP3p2w0c5VFRfVaSzeuNV/T
FR3B0JLmOghXw0A8qHXALPlWFF36uaVqGTnSgA5GbN3aD+q+YfoBE765YHr7HRAN
4c4QWCL+iJJynv08SReC8Tjl1zSB/SX/zgwSkl+lf0VYy3hylj+OFwxSXvWmChv2
E1KeeYTkuQYsxqncepqH1hscRrp81caA
-----END CERTIFICATE-----