Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          DaBRV4ULIPURrge7mPPtjfPoOlbKKftKJp5Icyg3EXA=
Subject key identifier:   05:F8:BC:BE:92:A4:E0:80:04:AB:47:19:BA:CF:73:8F:2D:CF:84:1E
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       466DA63B9828C950BBA3E0D87A02B39FCF5E14F4
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 12 Jul 2022 11:20:33 +0000
ROA not before:           Tue 12 Jul 2022 11:15:33 +0000
ROA not after:            Tue 11 Jul 2023 11:20:33 +0000
asID:                     61317
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:a6:3b:98:28:c9:50:bb:a3:e0:d8:7a:02:b3:9f:cf:5e:14:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 11:15:33 2022 GMT
            Not After : Jul 11 11:20:33 2023 GMT
        Subject: CN=05F8BCBE92A4E08004AB4719BACF738F2DCF841E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:5d:49:ee:e4:d9:8f:6e:d0:1d:1e:52:8f:
                    2a:14:02:d8:16:61:1f:c1:e8:a1:a8:d6:59:1c:fe:
                    e1:12:64:95:ac:e4:69:71:3b:84:8c:d6:20:80:a8:
                    2c:19:fa:5f:c0:87:96:2d:87:f7:1e:64:42:96:2f:
                    b6:01:77:fa:8c:25:68:18:9f:5f:22:35:e5:1f:94:
                    03:93:4f:a7:56:ff:41:56:46:31:14:0a:dd:40:ba:
                    5d:79:76:24:09:73:51:59:a0:24:1d:f0:0c:31:dd:
                    0e:74:51:2a:c4:d2:dc:ba:a6:20:1a:f5:cd:a8:c0:
                    b1:c3:63:64:e6:9f:82:32:f8:fa:0b:30:1e:38:f0:
                    f9:37:5e:65:8f:f5:6c:e3:af:b5:2c:53:ba:ee:90:
                    dd:80:e7:b0:f7:5f:85:71:77:46:85:ec:b7:4b:4e:
                    b4:ea:6c:89:b7:11:f2:31:06:65:de:1b:00:05:d9:
                    94:f8:7f:c4:94:ac:54:e1:7a:d6:64:d5:39:d9:7a:
                    97:70:5c:d0:de:7f:53:84:e0:73:a8:07:fa:71:33:
                    72:0c:af:48:dc:54:8b:a7:90:ab:18:7b:11:04:ff:
                    30:f6:86:e3:5e:2d:64:22:6c:ed:20:3d:bf:a6:6b:
                    35:db:67:a0:9b:d8:c0:e2:30:29:61:65:ae:78:87:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:BC:BE:92:A4:E0:80:04:AB:47:19:BA:CF:73:8F:2D:CF:84:1E
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:8d:1d:ff:55:6a:b0:ff:5f:c2:31:78:06:3c:74:55:14:
         b7:fa:13:bc:be:a7:83:71:3d:ac:6c:3a:f7:0a:0f:1e:91:6e:
         72:27:22:2f:87:e1:ef:06:7d:00:df:ab:7c:21:2b:0f:5c:26:
         c2:09:e1:5c:15:63:5c:fd:4f:a7:53:ec:f4:e3:a3:8f:72:63:
         73:66:d0:90:07:2b:65:7f:52:e1:40:80:fd:e5:cc:04:97:36:
         e2:04:5a:b2:0e:aa:20:f7:8f:7a:ca:3f:e3:e2:f9:70:18:ba:
         4a:57:77:a8:83:77:f1:69:30:6c:3d:a7:bf:d5:7b:58:fd:d2:
         2c:58:e0:80:ae:a4:4a:c4:16:f9:e5:52:50:38:6f:d8:8f:cf:
         74:81:63:62:7d:74:35:b1:b1:33:cf:5f:e2:d6:f5:16:00:34:
         38:25:d0:02:30:fd:c6:69:da:ca:ee:60:b4:69:77:a5:fc:67:
         f5:d5:eb:a0:cd:1f:6d:22:8a:8d:d3:ba:f3:65:59:06:2d:01:
         d3:01:a2:ea:a5:24:da:0d:77:91:af:35:c2:38:27:a1:b1:17:
         9c:f8:1d:9c:17:54:f0:9d:1f:9c:06:9d:66:77:ca:cc:60:f2:
         3e:aa:11:eb:58:f7:be:b7:c4:7d:99:b5:1f:d4:85:5b:e2:f3:
         21:ea:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----