Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203436353733.roa (raw, json)
Hash identifier:          yfKXapM9790KmJdYK3795zuayggVG9K/7mbYkT7zzxo=
Subject key identifier:   7C:E3:67:2B:5E:AD:70:30:9A:25:C8:CD:90:78:D5:07:55:43:A4:DE
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       42888450D6CA1D9D64BB0194928D88AB85B44033
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
Signing time:             Tue 12 Jul 2022 05:47:34 +0000
ROA not before:           Tue 12 Jul 2022 05:42:34 +0000
ROA not after:            Tue 11 Jul 2023 05:47:34 +0000
asID:                     46573
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:88:84:50:d6:ca:1d:9d:64:bb:01:94:92:8d:88:ab:85:b4:40:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:34 2022 GMT
            Not After : Jul 11 05:47:34 2023 GMT
        Subject: CN=7CE3672B5EAD70309A25C8CD9078D5075543A4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:3b:42:24:f8:72:0e:f3:b7:b4:bd:87:2f:
                    11:c3:55:ee:1c:7b:71:60:24:5c:bf:b8:5c:5e:bf:
                    0c:67:41:23:5c:ce:a9:8a:b2:67:f7:e6:2b:66:83:
                    19:fb:e4:82:80:ab:2b:15:fb:f2:c0:b2:28:00:08:
                    91:08:e9:d4:58:5d:dd:0c:b8:9e:68:f7:ba:e4:ba:
                    1f:6a:9f:53:52:8d:a0:33:3d:ef:f6:36:c4:74:7e:
                    0e:b9:9e:dd:23:59:e3:ad:90:ce:3d:e8:0e:f0:ac:
                    9e:3e:0b:be:88:81:fe:15:a6:8a:7a:ba:3b:8d:b7:
                    f5:82:5c:11:7b:0c:8c:c9:83:48:dc:d1:ed:11:6c:
                    fb:3c:b2:cb:d3:e2:4b:e5:a9:3f:ef:f6:df:4a:7c:
                    28:2c:58:83:1a:80:18:92:9a:5f:a5:de:bf:df:48:
                    83:19:1e:01:48:ba:75:48:cd:76:b1:dd:d2:05:61:
                    ff:d9:73:91:64:c6:f1:49:88:cb:66:01:7d:9a:53:
                    84:0c:8b:75:82:43:f6:b9:31:4c:61:c4:57:a5:bf:
                    ef:0e:01:74:e7:e1:18:2b:64:88:dc:f1:de:5d:3f:
                    04:80:ac:26:87:29:84:ed:f6:8f:07:a5:42:4d:21:
                    e2:b2:6a:6b:72:c2:e3:1e:25:86:ba:78:f3:b5:36:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:67:2B:5E:AD:70:30:9A:25:C8:CD:90:78:D5:07:55:43:A4:DE
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:3b:f3:b7:3c:4c:45:7b:8e:f6:ac:c2:a9:3a:ba:63:9c:
         b9:56:00:91:77:61:07:e7:25:eb:17:1e:7c:04:3e:86:08:92:
         ae:84:88:a7:25:f9:07:79:e1:56:de:05:eb:26:97:1d:e8:03:
         7f:2b:9b:84:aa:eb:ec:00:38:71:2a:21:98:56:7c:fc:ae:c6:
         44:6d:5d:6e:c5:d3:99:bc:bd:27:60:4d:08:10:0e:2c:ce:a4:
         eb:b2:07:60:f2:19:cb:24:a0:b9:23:f1:a3:05:cf:35:20:09:
         bf:e8:d2:de:ae:2f:12:63:78:48:e5:b3:20:ea:00:fa:40:8a:
         e9:e0:52:0e:0e:fc:47:43:5d:46:d6:ff:89:c0:65:c8:02:8f:
         96:1e:60:e1:3c:fe:44:94:b0:83:13:f0:9d:5b:9a:c8:70:cb:
         f8:5c:ee:65:03:33:23:9e:10:09:ca:a9:17:5a:f5:7f:95:b2:
         cc:7c:15:45:c3:fb:c3:4d:29:d2:d9:d9:3a:ef:60:ed:c5:2c:
         f2:d0:bb:22:5b:48:22:b1:ec:d6:be:ab:c1:aa:62:00:c0:b3:
         f3:f0:f1:3b:8f:93:95:bb:98:9d:b7:ed:09:3f:cf:af:14:99:
         e9:a7:16:b8:ef:38:e1:66:95:f3:e1:11:2a:7d:0a:10:10:2b:
         fb:df:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----