Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203631333137.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          n+UTrkpoHCtcW5VuOqMegyhMbotVDbsmVohYdiZ29z0=
Subject key identifier:   88:9C:40:F8:A9:A0:30:CC:4F:7B:3F:99:8D:3A:29:4B:9A:73:4D:B3
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       5FAF11CF0063929899BBBD07FE3909D032941491
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 12 Jul 2022 05:47:35 +0000
ROA not before:           Tue 12 Jul 2022 05:42:35 +0000
ROA not after:            Tue 11 Jul 2023 05:47:35 +0000
asID:                     61317
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:11:cf:00:63:92:98:99:bb:bd:07:fe:39:09:d0:32:94:14:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:35 2022 GMT
            Not After : Jul 11 05:47:35 2023 GMT
        Subject: CN=889C40F8A9A030CC4F7B3F998D3A294B9A734DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:92:f1:17:78:c1:b5:b3:3a:a9:49:f7:a8:
                    96:13:0c:cd:3e:cb:e8:fb:5b:38:9b:33:ab:72:34:
                    96:18:a5:df:e9:64:89:e4:be:83:da:63:10:c7:d9:
                    ca:06:01:8f:b1:01:0e:f8:31:85:94:33:51:c5:81:
                    75:7d:cb:ad:5c:32:3d:68:80:3b:8a:61:2d:2e:88:
                    29:7d:d1:a7:6c:1b:57:45:c1:73:5d:69:30:85:b2:
                    f7:c1:96:55:f3:fe:ed:fb:09:f2:d2:9e:a6:76:e3:
                    9c:84:0b:bf:ad:11:d0:80:4b:a3:b7:4d:8a:2b:f9:
                    55:f8:0c:e7:90:11:ae:12:86:da:34:f4:8d:22:d0:
                    82:87:4c:28:54:12:a0:5c:a7:e4:f8:7b:40:4f:c7:
                    0b:ec:6c:ac:18:69:7c:72:cb:b8:48:57:7f:0b:96:
                    bf:b4:98:40:4b:a4:e7:d3:53:2b:69:2e:48:2d:ea:
                    a3:77:ad:32:3f:d9:3f:ff:e8:ae:93:fc:e4:b2:8d:
                    75:fa:a4:72:0c:af:55:28:e7:f2:20:10:5f:83:4c:
                    6e:ae:74:66:9f:73:8f:82:25:4b:dc:c8:f7:11:b7:
                    f4:00:aa:ff:f6:5a:b4:e9:9e:a4:87:ed:f8:3f:5c:
                    6b:a6:5b:05:6d:03:45:29:9a:b8:30:bd:d8:a2:37:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:40:F8:A9:A0:30:CC:4F:7B:3F:99:8D:3A:29:4B:9A:73:4D:B3
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3e:0e:b0:b0:bc:b7:80:f6:92:9d:67:80:ea:16:7a:9b:ae:
         14:00:2e:0d:f1:df:28:0e:1a:f1:a0:e8:99:5b:35:37:00:e3:
         c1:a6:41:22:d2:86:4c:86:23:c2:d3:36:a0:82:86:d3:20:83:
         67:af:ba:a5:db:68:58:6a:76:fc:cd:f9:33:68:ec:84:15:5f:
         2e:39:0f:8d:84:16:d6:58:39:f1:9f:f4:6b:cc:2b:3d:ce:0c:
         46:3e:8e:47:bc:27:18:d8:41:2d:61:b2:a6:6b:47:34:76:42:
         9c:b4:ee:58:3f:65:47:8c:c0:b8:66:43:17:cd:77:56:6a:ec:
         c0:6f:f0:57:25:3b:9c:e6:15:3e:81:77:b5:33:b7:53:9f:d8:
         06:e8:fa:de:8b:bd:49:ae:b8:d5:62:20:36:79:34:bf:20:3a:
         10:99:2c:a5:0b:f4:15:08:1b:99:32:be:3c:db:e6:6f:19:c9:
         b9:7b:fa:53:76:ab:d1:80:d5:8c:f7:de:15:b4:49:86:ac:0f:
         77:71:cf:d6:21:6b:ba:28:09:aa:2f:66:10:80:10:0a:a1:e9:
         41:20:c9:a6:ec:8a:24:8d:1d:c1:9e:2b:fd:8b:e8:ad:91:63:
         04:69:da:51:7b:1f:e6:0b:7b:0c:a2:53:b4:e7:c1:8d:1d:b6:
         fd:e1:c2:a9
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUX68RzwBjkpiZu70H/jkJ0DKUFJEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzEyMDU0MjM1WhcNMjMwNzExMDU0NzM1
WjAzMTEwLwYDVQQDEyg4ODlDNDBGOEE5QTAzMENDNEY3QjNGOTk4RDNBMjk0QjlB
NzM0REIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23yS8Rd4wbWz
OqlJ96iWEwzNPsvo+1s4mzOrcjSWGKXf6WSJ5L6D2mMQx9nKBgGPsQEO+DGFlDNR
xYF1fcutXDI9aIA7imEtLogpfdGnbBtXRcFzXWkwhbL3wZZV8/7t+wny0p6mduOc
hAu/rRHQgEujt02KK/lV+AznkBGuEobaNPSNItCCh0woVBKgXKfk+HtAT8cL7Gys
GGl8csu4SFd/C5a/tJhAS6Tn01MraS5ILeqjd60yP9k//+iuk/zkso11+qRyDK9V
KOfyIBBfg0xurnRmn3OPgiVL3Mj3Ebf0AKr/9lq06Z6kh+34P1xrplsFbQNFKZq4
ML3YojfyXwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIicQPipoDDMT3s/mY06KUua
c02zMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzM0MzUyZTMxMzMzNTJlMzEzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2HojANBgkqhkiG9w0BAQsF
AAOCAQEAeD4OsLC8t4D2kp1ngOoWepuuFAAuDfHfKA4a8aDomVs1NwDjwaZBItKG
TIYjwtM2oIKG0yCDZ6+6pdtoWGp2/M35M2jshBVfLjkPjYQW1lg58Z/0a8wrPc4M
Rj6OR7wnGNhBLWGypmtHNHZCnLTuWD9lR4zAuGZDF813VmrswG/wVyU7nOYVPoF3
tTO3U5/YBuj63ou9Sa641WIgNnk0vyA6EJkspQv0FQgbmTK+PNvmbxnJuXv6U3ar
0YDVjPfeFbRJhqwPd3HP1iFruigJqi9mEIAQCqHpQSDJpuyKJI0dwZ4r/YvorZFj
BGnaUXsf5gt7DKJTtOfBjR22/eHCqQ==
-----END CERTIFICATE-----