Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa (raw, json)
Hash identifier:          ZLCIUTtlxM0ibsmXzWwd9PqIkX6c6bdRFmT3wgWyJyk=
Subject key identifier:   DE:46:68:CF:12:5C:72:4A:BA:6C:68:27:7E:B7:15:3F:7B:B0:FA:38
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       5E0D928938BD1A7A069AAE7B86BCC77B0B6B4912
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa
Signing time:             Thu 10 Nov 2022 14:08:01 +0000
ROA not before:           Thu 10 Nov 2022 14:03:01 +0000
ROA not after:            Thu 09 Nov 2023 14:08:01 +0000
asID:                     207459
IP address blocks:        216.247.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:92:89:38:bd:1a:7a:06:9a:ae:7b:86:bc:c7:7b:0b:6b:49:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov 10 14:03:01 2022 GMT
            Not After : Nov  9 14:08:01 2023 GMT
        Subject: CN=DE4668CF125C724ABA6C68277EB7153F7BB0FA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:8d:b8:e6:0c:9a:49:44:00:a6:dd:a4:15:
                    dc:10:5b:60:c7:4e:98:cc:64:8d:b5:5e:bd:31:c2:
                    99:b0:44:98:20:5a:ad:8a:9b:e2:05:64:c6:d0:6b:
                    21:8a:90:38:a0:a1:4a:8e:10:75:6d:03:37:82:76:
                    13:7f:3d:7d:cb:17:db:f1:b3:d2:dd:e2:90:d0:88:
                    ba:6c:3c:4c:82:4f:0d:96:85:94:98:8c:cb:43:f3:
                    03:41:78:28:d4:83:ff:1d:53:8d:0d:26:70:2d:a0:
                    e0:5e:d6:6c:d9:3e:51:b9:de:0c:86:e6:16:6a:45:
                    6f:23:db:76:ae:86:32:50:80:9c:ae:7d:3c:eb:40:
                    b2:54:84:1b:28:ce:ab:66:d2:5a:3c:e1:6b:b0:d1:
                    e1:7b:66:ca:d3:5b:3a:fe:30:f7:cd:91:24:58:1d:
                    8e:89:cd:29:cc:1f:3b:a6:ec:72:f7:43:40:d9:1f:
                    dd:ee:82:6a:f2:5e:a2:12:3d:4f:f2:32:60:30:cf:
                    14:00:e6:02:26:e5:89:4b:e8:af:e5:1d:6c:be:6c:
                    4f:c6:73:90:19:9e:a7:8d:56:86:dd:c8:56:62:13:
                    6b:eb:da:c9:ca:08:14:93:d3:f1:dd:8d:6c:d7:d9:
                    6c:b0:41:b9:f6:1e:fb:2c:0f:28:c9:4f:ec:fc:7c:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:68:CF:12:5C:72:4A:BA:6C:68:27:7E:B7:15:3F:7B:B0:FA:38
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:7d:4a:5a:d4:8f:c2:43:35:1e:9a:27:ed:fe:e2:c3:09:
         0e:5c:a2:f5:07:3f:02:e2:5c:19:1f:ea:21:c8:6f:7c:e9:46:
         33:c4:2c:22:fa:94:f2:46:92:12:65:cd:da:62:f1:5d:49:ac:
         9c:16:55:0a:4b:79:db:78:fc:7a:87:77:f6:9a:0a:ce:63:b3:
         bd:b8:7e:6b:52:4b:94:aa:a5:4c:70:7a:94:c0:31:79:06:d4:
         50:a1:1f:39:f4:be:a1:9c:42:70:13:be:04:a1:62:93:21:7e:
         44:7f:8e:bd:c7:8d:0a:b9:4e:e8:1d:8d:ce:94:60:ec:c8:33:
         d8:dd:b9:9f:4a:d3:9a:3c:ee:1f:4f:32:a0:b4:f0:a0:aa:92:
         a9:3c:34:ff:9c:4d:96:0a:0c:c4:7d:bd:35:26:ea:ac:d5:58:
         3c:52:2c:99:f6:dc:e1:bc:40:78:fe:b5:e3:cc:56:a3:90:01:
         6b:e2:7c:c8:14:32:60:b4:46:85:d6:7e:68:1a:b0:eb:2b:26:
         de:82:c6:92:1b:dd:c8:f4:b1:ad:d6:e4:7c:d6:f2:b3:c5:71:
         84:18:57:9c:35:0e:c8:2f:f3:5b:47:a5:b5:1e:8a:a9:0c:72:
         92:f2:e4:f4:f9:5f:74:f0:9c:46:80:c5:0a:76:97:12:05:1f:
         fa:2c:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----