Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          ogPGMXDrnpQ6OhBPyM20W1zBAXExTak/DShC/8a27Cg=
Subject key identifier:   7B:CF:DB:FE:14:49:62:93:3E:B4:D1:5E:61:CF:19:3C:59:D7:8E:89
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       0C66016D139DBE7C0838D8E4596426211696696A
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e20323131353835.roa
Signing time:             Tue 12 Jul 2022 05:47:31 +0000
ROA not before:           Tue 12 Jul 2022 05:42:31 +0000
ROA not after:            Tue 11 Jul 2023 05:47:31 +0000
asID:                     211585
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:01:6d:13:9d:be:7c:08:38:d8:e4:59:64:26:21:16:96:69:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:31 2022 GMT
            Not After : Jul 11 05:47:31 2023 GMT
        Subject: CN=7BCFDBFE144962933EB4D15E61CF193C59D78E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:91:b5:3c:97:07:7a:13:f0:90:a9:14:4a:
                    82:77:46:93:70:aa:be:da:29:19:74:9a:bc:de:85:
                    24:54:74:7e:19:98:cd:7f:ee:6f:8c:15:06:90:f5:
                    5a:73:6c:12:1b:1e:78:17:18:31:0c:1e:35:48:1e:
                    6b:a8:72:21:39:e3:c3:25:b4:00:7f:5c:3b:51:63:
                    87:97:d6:e8:44:7f:06:fe:e0:8a:94:b6:dc:7f:1c:
                    0c:f6:09:97:95:2e:2f:06:3c:c3:ba:25:c5:a2:de:
                    f9:6f:85:8f:b2:24:a2:a6:81:9e:18:34:5f:f8:86:
                    dd:19:9b:0a:3e:9b:32:0f:9e:9d:6b:79:1b:c8:6e:
                    58:55:0e:f9:2a:8e:44:f9:bb:a9:5b:85:4e:12:45:
                    f0:4f:50:00:14:17:86:18:b1:27:62:cd:f1:5a:fa:
                    e7:ec:85:41:d3:ab:7b:fb:0c:f7:b0:33:ca:3a:fa:
                    53:a9:87:2b:cc:e4:9a:f2:be:82:de:60:08:bf:7a:
                    80:f8:2a:06:0b:31:7f:f2:19:93:d3:7a:62:57:b6:
                    f5:d1:9d:e1:d2:ce:89:88:cc:ce:82:d0:a3:d1:d9:
                    f9:56:1f:57:98:f4:c1:35:81:b7:df:72:05:88:f6:
                    ef:7a:cb:f1:0c:ea:17:dd:bc:65:83:46:1d:06:41:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:DB:FE:14:49:62:93:3E:B4:D1:5E:61:CF:19:3C:59:D7:8E:89
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:72:23:2a:39:65:cb:4d:13:a2:cc:c5:18:71:5c:f8:e7:
         00:c3:0e:b0:05:58:a4:8e:e3:58:92:9d:97:4a:c9:bd:8e:e0:
         30:37:ff:19:12:6a:81:bd:6c:9c:b4:fe:3e:6d:00:ea:6c:ba:
         83:70:e2:fe:fc:3b:fb:5c:33:cc:af:71:69:c0:e4:c3:1d:5e:
         52:02:35:8f:5b:a1:33:cb:f8:f3:af:a4:6b:ac:d5:76:21:74:
         86:37:10:10:51:81:0b:b6:9c:d7:7d:0d:11:07:a9:54:33:65:
         5d:93:e7:56:74:ed:c8:ac:08:f3:86:ed:30:33:54:aa:bd:81:
         72:8e:23:50:66:04:82:ae:99:ea:ad:87:74:87:95:5a:6e:11:
         f3:bb:0b:f5:c7:4f:ff:4e:2f:a1:25:a7:79:75:7f:49:4b:48:
         6e:86:0d:2f:cd:a6:fa:36:3d:19:b6:bc:b3:44:22:d7:dd:8f:
         62:76:ca:a5:7f:eb:55:ca:a0:89:b9:9d:38:bb:57:36:4b:e7:
         22:74:99:2f:d6:2b:cb:df:df:e6:37:fd:d8:2a:43:39:42:74:
         88:92:d6:5c:27:8c:34:9d:6c:0a:2a:50:31:5b:b5:49:7c:bc:
         d2:28:6c:52:e2:10:35:e7:6a:bb:01:d4:8e:4f:71:60:76:2d:
         91:7e:02:0a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUDGYBbROdvnwIONjkWWQmIRaWaWowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzEyMDU0MjMxWhcNMjMwNzExMDU0NzMx
WjAzMTEwLwYDVQQDEyg3QkNGREJGRTE0NDk2MjkzM0VCNEQxNUU2MUNGMTkzQzU5
RDc4RTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUiRtTyXB3oT
8JCpFEqCd0aTcKq+2ikZdJq83oUkVHR+GZjNf+5vjBUGkPVac2wSGx54FxgxDB41
SB5rqHIhOePDJbQAf1w7UWOHl9boRH8G/uCKlLbcfxwM9gmXlS4vBjzDuiXFot75
b4WPsiSipoGeGDRf+IbdGZsKPpsyD56da3kbyG5YVQ75Ko5E+bupW4VOEkXwT1AA
FBeGGLEnYs3xWvrn7IVB06t7+wz3sDPKOvpTqYcrzOSa8r6C3mAIv3qA+CoGCzF/
8hmT03piV7b10Z3h0s6JiMzOgtCj0dn5Vh9XmPTBNYG333IFiPbvesvxDOoX3bxl
g0YdBkHUGQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHvP2/4USWKTPrTRXmHPGTxZ
146JMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92wwDQYJKoZIhvcN
AQELBQADggEBACluciMqOWXLTROizMUYcVz45wDDDrAFWKSO41iSnZdKyb2O4DA3
/xkSaoG9bJy0/j5tAOpsuoNw4v78O/tcM8yvcWnA5MMdXlICNY9boTPL+POvpGus
1XYhdIY3EBBRgQu2nNd9DREHqVQzZV2T51Z07cisCPOG7TAzVKq9gXKOI1BmBIKu
meqth3SHlVpuEfO7C/XHT/9OL6Elp3l1f0lLSG6GDS/Npvo2PRm2vLNEItfdj2J2
yqV/61XKoIm5nTi7VzZL5yJ0mS/WK8vf3+Y3/dgqQzlCdIiS1lwnjDSdbAoqUDFb
tUl8vNIobFLiEDXnarsB1I5PcWB2LZF+Ago=
-----END CERTIFICATE-----