Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa
File:                     3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          7GNszgm3507lOPyFprHAT3XQyMDQWRyAIDmyN1r+9wU=
Subject key identifier:   36:9F:A8:E0:00:64:51:E7:7A:F6:D1:93:93:0C:B7:9A:B1:1F:E2:A7
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       3F51EB9EABA3E6FEBE5B86B646D55C627F7195FF
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa
Signing time:             Mon 21 Nov 2022 06:07:28 +0000
ROA not before:           Mon 21 Nov 2022 06:02:28 +0000
ROA not after:            Mon 20 Nov 2023 06:07:28 +0000
asID:                     7018
IP address blocks:        216.247.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:51:eb:9e:ab:a3:e6:fe:be:5b:86:b6:46:d5:5c:62:7f:71:95:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov 21 06:02:28 2022 GMT
            Not After : Nov 20 06:07:28 2023 GMT
        Subject: CN=369FA8E0006451E77AF6D193930CB79AB11FE2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:cf:f9:32:eb:fb:15:30:9a:07:a0:f7:c9:
                    7e:6b:b5:27:c3:1e:f1:4f:e7:79:ca:6d:2e:f1:e5:
                    a3:ff:f2:e6:5e:fc:a3:b1:9b:61:61:05:b8:c8:5c:
                    56:c2:86:99:cf:f4:80:f3:51:c9:3f:38:91:78:fa:
                    67:8f:95:f5:31:46:56:bc:c6:b8:5b:c2:33:6f:9e:
                    1c:19:9c:4d:44:73:94:3f:b9:cf:45:2e:28:b2:64:
                    2f:47:d0:29:f8:e1:95:b7:aa:d8:9d:54:8c:61:0d:
                    14:bb:ec:6e:6d:6b:a8:36:b5:72:03:b9:19:9b:e1:
                    1c:1a:b2:54:54:7b:08:de:77:25:f4:8b:72:91:90:
                    2c:9f:e5:6e:b8:69:4a:df:7e:b6:1f:00:a5:a9:b8:
                    05:93:43:31:c9:33:ec:4e:4c:3a:d5:7a:62:67:ad:
                    6f:e9:29:38:8d:29:1b:a3:a9:25:e8:60:16:e0:b2:
                    c1:fa:d3:4c:d4:f3:2a:30:38:8f:40:7a:2f:13:69:
                    79:d9:9d:72:aa:60:ce:1e:c4:a6:7b:1a:96:b8:81:
                    b8:88:6b:c7:6d:62:77:50:cd:ab:9a:ec:cf:fa:40:
                    e9:c6:62:9b:17:2f:98:60:84:70:89:80:1a:be:d5:
                    0f:5b:97:ae:5f:7b:a7:c9:5a:d5:4a:b6:d7:df:0d:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:A8:E0:00:64:51:E7:7A:F6:D1:93:93:0C:B7:9A:B1:1F:E2:A7
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:86:ba:a8:c5:b9:0d:fc:b0:6c:b5:d4:13:f1:c4:69:c7:57:
         2d:dc:ef:1f:e5:70:57:7d:77:74:22:bc:26:56:5b:1f:99:d7:
         e0:f5:57:39:b0:18:3c:ce:0b:12:73:82:67:14:1b:49:14:30:
         d1:f2:39:b4:18:25:d5:4f:88:8f:90:f6:f6:7c:4f:d4:3c:d7:
         66:90:d2:98:fc:55:75:28:f3:d5:22:e2:55:29:07:70:b9:8b:
         71:a6:f1:8b:d3:39:6d:cb:cb:c0:67:7c:f4:96:34:e6:00:92:
         02:e8:84:64:67:d7:a2:0e:22:92:2b:b8:77:d4:e5:1d:72:9f:
         1c:85:a4:68:e7:a4:73:61:67:0d:98:f1:af:cd:9c:93:04:53:
         2d:31:55:46:ea:13:76:3b:a0:55:bd:04:5a:16:c4:37:ed:2a:
         9f:7f:71:93:35:17:5a:ae:7c:d6:20:53:53:a4:87:f8:0b:5e:
         32:26:e5:ca:7a:08:63:56:6d:97:00:8f:49:8c:90:1a:6a:e6:
         8a:ad:2d:4d:95:eb:fe:67:eb:c3:00:d9:6e:30:36:c7:df:c8:
         a5:90:1a:fb:f0:49:d1:ad:52:31:55:ae:2e:cc:82:04:26:7d:
         4d:20:ef:7c:3c:5f:76:15:d1:12:a4:84:b4:7b:55:a1:bf:a8:
         67:57:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----