Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          aC0BvF77xDygmh49HBCbOrYOvMuz6SR7h0zADUV93L4=
Subject key identifier:   CF:FA:AD:55:61:AE:9F:A6:B7:DF:EF:87:18:2A:74:FA:68:8C:FE:32
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       673138265025D3DC8091D1E804A652812BDC9799
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
Signing time:             Tue 12 Jul 2022 05:47:34 +0000
ROA not before:           Tue 12 Jul 2022 05:42:34 +0000
ROA not after:            Tue 11 Jul 2023 05:47:34 +0000
asID:                     211585
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:38:26:50:25:d3:dc:80:91:d1:e8:04:a6:52:81:2b:dc:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:34 2022 GMT
            Not After : Jul 11 05:47:34 2023 GMT
        Subject: CN=CFFAAD5561AE9FA6B7DFEF87182A74FA688CFE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:20:f1:ac:33:2d:3a:02:3b:4a:2a:a4:e3:
                    19:9e:94:b7:71:41:1f:ea:68:b1:92:44:da:bd:03:
                    7e:df:4e:2c:40:db:16:27:d4:6a:85:0a:18:3f:5c:
                    8d:c1:c6:86:68:8e:6a:d7:21:38:81:73:23:25:42:
                    bd:8b:38:54:fe:99:2e:34:b6:78:53:9e:0a:54:27:
                    85:28:4d:6b:83:bc:db:f2:55:87:77:26:20:58:72:
                    89:e0:03:6c:af:28:78:21:a8:99:1c:d4:76:c8:4d:
                    ee:43:bb:28:5f:59:43:43:a5:bc:bd:60:16:f8:90:
                    0b:ae:23:ee:4e:7c:43:68:da:be:fb:0c:03:3c:32:
                    02:46:33:a0:bb:ac:7f:a2:32:e4:48:30:2a:98:a7:
                    be:6d:6a:05:94:6a:8f:82:34:1c:3b:20:46:4b:85:
                    a1:cd:a8:2b:3d:ff:7f:70:6b:51:eb:20:27:cf:ea:
                    bc:3e:25:ee:5c:50:4d:0e:c7:e9:e6:24:b7:ca:fc:
                    71:4c:0f:87:4d:5d:a2:22:24:9d:7c:38:a8:95:07:
                    bc:f8:9c:47:4a:83:55:c5:7b:ac:2a:92:e3:bf:93:
                    f3:7b:2a:6e:1d:9d:b8:af:b5:31:dd:61:34:0d:83:
                    38:f8:1f:15:69:f1:66:d0:0e:32:95:53:52:b5:de:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:AD:55:61:AE:9F:A6:B7:DF:EF:87:18:2A:74:FA:68:8C:FE:32
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:b8:62:b1:4f:93:36:31:78:9f:34:a9:92:de:aa:c8:5d:
         5f:e6:f2:ac:44:2e:ca:9d:04:76:c9:f1:b8:a3:16:5a:c0:a1:
         b6:84:5d:53:b0:2d:16:37:b8:a1:4b:33:85:a5:5e:46:28:d2:
         01:c1:b4:2f:40:cb:03:53:77:ab:78:91:2a:f8:f4:52:15:11:
         c9:3d:52:f6:1c:d9:a5:61:b6:fb:e1:d8:83:e1:19:09:98:16:
         63:d5:a0:c4:54:3f:bc:45:b4:07:9a:bc:aa:59:19:f5:8c:d4:
         6e:20:a0:00:84:5a:43:72:42:6a:fe:bd:0e:cb:d5:1c:fb:69:
         31:07:2f:fc:4b:ed:d4:a4:b8:08:1b:82:b0:a2:4f:02:a3:32:
         49:af:3b:99:0e:df:a4:4b:4e:db:23:34:e5:53:37:0a:a7:b1:
         1e:bd:e7:29:ec:5b:b8:93:7a:fa:5b:c2:cf:17:e9:9a:5c:c8:
         8a:13:94:62:17:57:25:cb:e3:56:46:63:0d:cc:ff:6e:f9:c4:
         2f:ba:ba:cf:41:d7:ca:8d:0d:fa:7b:ec:7d:ed:56:d4:8f:32:
         ac:f6:7f:c3:d8:68:41:ef:ab:4e:c3:cc:d8:85:5d:54:c3:35:
         cc:06:d0:08:66:14:53:3a:bc:86:7f:c3:86:23:ea:a7:80:62:
         5b:73:b9:9d
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUZzE4JlAl09yAkdHoBKZSgSvcl5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzEyMDU0MjM0WhcNMjMwNzExMDU0NzM0
WjAzMTEwLwYDVQQDEyhDRkZBQUQ1NTYxQUU5RkE2QjdERkVGODcxODJBNzRGQTY4
OENGRTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xYg8awzLToC
O0oqpOMZnpS3cUEf6mixkkTavQN+304sQNsWJ9RqhQoYP1yNwcaGaI5q1yE4gXMj
JUK9izhU/pkuNLZ4U54KVCeFKE1rg7zb8lWHdyYgWHKJ4ANsryh4IaiZHNR2yE3u
Q7soX1lDQ6W8vWAW+JALriPuTnxDaNq++wwDPDICRjOgu6x/ojLkSDAqmKe+bWoF
lGqPgjQcOyBGS4WhzagrPf9/cGtR6yAnz+q8PiXuXFBNDsfp5iS3yvxxTA+HTV2i
IiSdfDiolQe8+JxHSoNVxXusKpLjv5PzeypuHZ24r7Ux3WE0DYM4+B8VafFm0A4y
lVNStd7ZHQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFM/6rVVhrp+mt9/vhxgqdPpo
jP4yMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92gwDQYJKoZIhvcN
AQELBQADggEBAIKpuGKxT5M2MXifNKmS3qrIXV/m8qxELsqdBHbJ8bijFlrAobaE
XVOwLRY3uKFLM4WlXkYo0gHBtC9AywNTd6t4kSr49FIVEck9UvYc2aVhtvvh2IPh
GQmYFmPVoMRUP7xFtAeavKpZGfWM1G4goACEWkNyQmr+vQ7L1Rz7aTEHL/xL7dSk
uAgbgrCiTwKjMkmvO5kO36RLTtsjNOVTNwqnsR695ynsW7iTevpbws8X6ZpcyIoT
lGIXVyXL41ZGYw3M/275xC+6us9B18qNDfp77H3tVtSPMqz2f8PYaEHvq07DzNiF
XVTDNcwG0AhmFFM6vIZ/w4Yj6qeAYltzuZ0=
-----END CERTIFICATE-----