Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3232203d3e2037303138.roa
File:                     3231362e3234372e3130302e302f32322d3232203d3e2037303138.roa (raw, json)
Hash identifier:          tWFBTieDa+qKXVKzEAc1uIJC3FoRFS8YzknZCgy6DWM=
Subject key identifier:   38:94:F5:3D:5B:64:11:25:95:4B:5E:FC:C3:CD:97:AF:99:41:1A:AE
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       4B780E90996357A4B3C598C4990430B5330812E5
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3232203d3e2037303138.roa
Signing time:             Thu 29 Sep 2022 13:40:08 +0000
ROA not before:           Thu 29 Sep 2022 13:35:08 +0000
ROA not after:            Thu 28 Sep 2023 13:40:08 +0000
asID:                     7018
IP address blocks:        216.247.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:0e:90:99:63:57:a4:b3:c5:98:c4:99:04:30:b5:33:08:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Sep 29 13:35:08 2022 GMT
            Not After : Sep 28 13:40:08 2023 GMT
        Subject: CN=3894F53D5B641125954B5EFCC3CD97AF99411AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:3e:37:97:d8:fd:90:25:28:cb:5c:13:56:
                    91:dd:7e:67:7f:45:31:e2:a6:8a:79:31:41:7c:c2:
                    7f:2d:3e:c7:04:e8:ea:9f:a7:dc:68:32:a2:00:37:
                    13:ba:1e:53:be:e2:ca:e8:1a:af:ba:fb:47:34:b9:
                    8a:b9:f4:b2:55:c7:5f:71:03:bb:e4:5e:88:2e:70:
                    b9:12:15:b7:34:b7:70:2f:6e:6a:98:1b:64:11:62:
                    31:91:7f:76:1a:f0:89:45:c9:b7:33:a3:98:16:ae:
                    da:90:90:3e:84:03:3e:d2:f5:2d:52:54:cb:6e:d2:
                    30:12:c1:a6:6c:ee:fb:ec:b6:6a:af:58:13:2a:d3:
                    c4:3d:9a:d3:ef:e1:b5:9f:6f:c6:fc:54:05:a5:1f:
                    a5:ea:b9:a7:11:9c:d7:41:96:ce:36:85:96:1f:82:
                    82:02:06:16:c4:88:36:13:35:f3:c2:0e:ff:b6:00:
                    10:44:96:e3:1c:2f:22:c4:1a:0a:57:f2:c3:48:df:
                    a4:b0:4e:d2:ac:48:bd:ff:1a:3a:d0:fc:b7:97:15:
                    df:16:7d:44:49:a6:11:c4:ef:b0:88:35:f2:bd:ef:
                    2c:eb:42:73:20:d9:1c:57:6c:29:65:57:43:87:7f:
                    a3:66:44:5b:56:d4:b4:aa:b5:87:df:11:1e:5f:df:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:94:F5:3D:5B:64:11:25:95:4B:5E:FC:C3:CD:97:AF:99:41:1A:AE
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3232203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:41:45:a0:20:bc:49:d5:f5:94:31:82:76:f2:58:ae:33:f2:
         53:5e:f9:1f:f2:7a:03:71:70:4b:30:33:44:6d:77:fa:15:db:
         84:9d:74:9c:5e:11:54:14:98:3f:a8:7e:2c:d7:1a:b9:0b:e3:
         c2:f5:d2:4b:93:6c:5b:ee:1d:2f:d4:6b:7c:08:7f:8c:d8:0c:
         ff:c3:97:cf:3f:76:f1:75:b4:55:65:4f:d4:18:6f:60:01:ce:
         50:7f:18:cc:3f:63:2a:14:92:84:7a:87:14:6f:95:b8:9f:3b:
         c7:f9:35:19:87:fe:eb:5e:82:90:69:2a:67:18:b7:cf:8b:a8:
         f7:9e:c7:81:25:9d:30:b2:64:a8:51:7c:58:58:ed:9a:5b:69:
         a2:fb:27:b6:0e:a1:3e:5f:02:90:88:ed:70:f2:c1:29:d2:8c:
         5a:2f:f4:2f:85:21:b2:59:95:22:e7:0b:1b:ff:60:66:0d:3d:
         ca:fa:74:8e:6b:3d:74:02:09:87:f2:2f:d4:58:0d:69:88:7c:
         ba:32:2e:13:08:24:fc:c5:55:69:9a:46:26:a8:ee:f1:5b:0d:
         dd:f8:ba:d1:3e:1d:b3:fd:e0:da:67:ba:bd:16:02:54:66:25:
         92:27:c7:94:87:e3:a8:f3:a1:b8:b2:5a:32:fe:66:2d:ba:52:
         51:83:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----