Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa
File:                     3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          6SG235xZWzY22wSEEQGMyLql+Q1ztxHU5D7pOiqaaEk=
Subject key identifier:   B7:C7:A4:AA:7B:9B:51:32:BB:38:C2:47:85:EE:64:62:F8:DF:0E:12
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       445A04C5D7C28F144F311916DB39EE7C30810E8A
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa
Signing time:             Thu 10 Nov 2022 18:57:31 +0000
ROA not before:           Thu 10 Nov 2022 18:52:31 +0000
ROA not after:            Thu 09 Nov 2023 18:57:31 +0000
asID:                     207279
IP address blocks:        216.247.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:04:c5:d7:c2:8f:14:4f:31:19:16:db:39:ee:7c:30:81:0e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov 10 18:52:31 2022 GMT
            Not After : Nov  9 18:57:31 2023 GMT
        Subject: CN=B7C7A4AA7B9B5132BB38C24785EE6462F8DF0E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:ab:6a:31:1a:83:25:06:e7:9f:14:35:01:
                    57:ca:a1:1c:7e:55:b5:f3:45:d9:dc:6f:64:a0:db:
                    f3:32:e6:cf:33:75:8f:49:c8:9e:4b:6d:d4:eb:31:
                    12:f3:77:63:4a:ca:ec:bd:af:eb:e4:de:e7:2c:3e:
                    5c:4b:89:db:09:88:3c:54:f8:7d:c8:95:82:c2:a2:
                    38:b7:c0:94:d8:59:60:84:40:3f:fa:5a:9e:08:39:
                    a0:46:7a:f3:f7:a6:84:11:6b:18:f3:bc:24:37:1f:
                    5d:0a:1a:ff:f2:d0:73:32:b0:2f:e6:19:bb:2c:f5:
                    a0:c3:fa:cd:c3:7d:d9:6c:17:b8:d2:d8:37:2b:ff:
                    c1:cf:27:3f:69:2f:aa:79:3a:51:c5:10:7b:ff:bb:
                    b4:59:32:6e:4a:72:6f:11:67:4a:d5:52:4b:87:5d:
                    d8:70:09:7e:ea:74:b6:b7:b4:dc:21:f9:b1:cc:43:
                    4f:46:9c:9c:ab:9d:9a:19:cd:ac:4e:b5:71:79:22:
                    76:63:e3:a8:28:7c:10:ef:2a:38:70:c9:95:15:8d:
                    d1:a1:e0:dd:9b:4d:f8:a1:24:35:0d:bb:db:88:46:
                    c2:6c:1e:73:20:4f:d4:c1:a6:18:e0:a9:87:2d:1f:
                    15:fc:18:42:dd:15:3f:7a:44:b0:e6:74:6d:c8:50:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C7:A4:AA:7B:9B:51:32:BB:38:C2:47:85:EE:64:62:F8:DF:0E:12
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130372e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:1b:0f:fc:55:9a:b6:7c:cc:ff:80:47:8e:c0:75:9b:71:
         64:79:ef:b2:2b:b0:fd:83:a3:3a:59:a3:2c:78:a4:54:d4:b7:
         a4:f8:6c:28:b1:a1:f0:2b:f1:93:ce:86:71:0d:47:c9:be:e5:
         21:31:fa:de:49:51:4c:1c:0c:68:f3:4e:f8:c7:18:b6:89:27:
         73:14:e6:b4:e3:08:02:36:ff:37:2c:f8:65:49:5f:4c:6b:6a:
         17:6d:0d:4b:26:e5:60:31:d9:a0:2e:c5:3b:16:46:bb:f6:22:
         48:06:09:17:b3:26:45:41:35:7b:43:8a:57:bf:25:3e:55:73:
         ca:a1:4e:e7:5c:ed:ed:60:ae:c5:16:dc:e4:4a:93:d3:5b:8a:
         17:3c:48:69:fb:42:d2:d0:a9:b4:18:19:12:ac:cb:d0:44:12:
         73:93:96:5c:cb:dc:67:c6:f0:0f:38:1c:35:f6:33:0a:9b:c1:
         ce:7a:eb:33:83:6b:0d:8d:00:81:c3:7a:54:f2:75:45:4c:ef:
         73:01:fe:2f:ff:92:33:83:57:29:57:c5:21:1e:7f:a7:fc:94:
         4a:ba:39:6c:ef:4d:63:f3:b1:00:f3:50:17:0e:ea:df:be:94:
         7d:8c:31:9c:cb:c4:d1:68:78:10:72:7d:57:d7:5f:ce:9a:b6:
         9f:68:cd:a1
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIURFoExdfCjxRPMRkW2znufDCBDoowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIxMTEwMTg1MjMxWhcNMjMxMTA5MTg1NzMx
WjAzMTEwLwYDVQQDEyhCN0M3QTRBQTdCOUI1MTMyQkIzOEMyNDc4NUVFNjQ2MkY4
REYwRTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hGrajEagyUG
558UNQFXyqEcflW180XZ3G9koNvzMubPM3WPScieS23U6zES83djSsrsva/r5N7n
LD5cS4nbCYg8VPh9yJWCwqI4t8CU2FlghEA/+lqeCDmgRnrz96aEEWsY87wkNx9d
Chr/8tBzMrAv5hm7LPWgw/rNw33ZbBe40tg3K//Bzyc/aS+qeTpRxRB7/7u0WTJu
SnJvEWdK1VJLh13YcAl+6nS2t7TcIfmxzENPRpycq52aGc2sTrVxeSJ2Y+OoKHwQ
7yo4cMmVFY3RoeDdm034oSQ1DbvbiEbCbB5zIE/UwaYY4KmHLR8V/BhC3RU/ekSw
5nRtyFB0fQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLfHpKp7m1EyuzjCR4XuZGL4
3w4SMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzczMjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92swDQYJKoZIhvcN
AQELBQADggEBAJvbGw/8VZq2fMz/gEeOwHWbcWR577IrsP2DozpZoyx4pFTUt6T4
bCixofAr8ZPOhnENR8m+5SEx+t5JUUwcDGjzTvjHGLaJJ3MU5rTjCAI2/zcs+GVJ
X0xrahdtDUsm5WAx2aAuxTsWRrv2IkgGCRezJkVBNXtDile/JT5Vc8qhTudc7e1g
rsUW3ORKk9Nbihc8SGn7QtLQqbQYGRKsy9BEEnOTllzL3GfG8A84HDX2Mwqbwc56
6zODaw2NAIHDelTydUVM73MB/i//kjODVylXxSEef6f8lEq6OWzvTWPzsQDzUBcO
6t++lH2MMZzLxNFoeBByfVfXX86atp9ozaE=
-----END CERTIFICATE-----