Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e203633303233.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          UCAUU2VZUgt8FftL6Y0KK0Sj3IY2HvmI0AFSf1B6t0A=
Subject key identifier:   13:DD:04:A2:25:AE:5A:41:39:44:E8:0E:02:34:48:C2:5D:1A:00:67
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       3073C0873D5E477C7846A40B004F23ABAD7F62A5
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e203633303233.roa
Signing time:             Thu 08 Sep 2022 04:51:50 +0000
ROA not before:           Thu 08 Sep 2022 04:46:50 +0000
ROA not after:            Thu 07 Sep 2023 04:51:50 +0000
asID:                     63023
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:73:c0:87:3d:5e:47:7c:78:46:a4:0b:00:4f:23:ab:ad:7f:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Sep  8 04:46:50 2022 GMT
            Not After : Sep  7 04:51:50 2023 GMT
        Subject: CN=13DD04A225AE5A413944E80E023448C25D1A0067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:64:b3:cc:e9:09:e9:fb:b5:32:ab:b9:28:
                    21:a9:fc:60:e6:9d:f9:b8:3e:f5:0d:d3:8a:c1:17:
                    3f:de:1b:5a:0c:98:77:aa:e7:0d:f6:63:f8:7d:1f:
                    79:e0:22:f2:91:68:9c:0d:a9:e1:45:0c:07:ac:9f:
                    fb:d7:5f:b4:55:8e:6e:16:cc:db:5c:eb:e8:39:52:
                    4e:30:3a:9c:4d:73:11:44:3d:d4:d3:f2:3b:d3:b5:
                    4e:d0:07:b1:16:c4:03:0b:b8:ed:14:e7:f2:48:67:
                    83:88:9f:ce:f0:e3:6f:db:8b:10:40:39:ff:6d:22:
                    72:42:25:1b:4b:b6:df:ee:2b:64:34:38:8b:23:2b:
                    0a:0e:b6:aa:62:05:8e:8a:c9:92:d9:68:9a:75:eb:
                    91:92:a0:a4:c1:1f:53:1c:5d:4a:b4:0c:8c:6c:41:
                    55:57:6e:de:99:7b:d4:0e:5b:25:f9:ab:3a:18:4d:
                    1e:6b:66:ae:56:ee:1e:17:b8:73:8a:18:b9:7b:aa:
                    bc:13:3f:40:77:c0:31:9f:b2:1a:ad:ab:45:ca:15:
                    c0:36:b3:71:88:1e:54:79:29:2f:0f:85:5e:8e:5c:
                    7d:39:d8:72:69:11:dd:86:a3:8f:ee:c6:ba:17:29:
                    75:0c:61:26:01:68:0f:2d:dc:e8:26:06:8a:3f:36:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:04:A2:25:AE:5A:41:39:44:E8:0E:02:34:48:C2:5D:1A:00:67
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130382e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:55:1c:1e:a6:4a:50:12:84:a7:b1:c6:8f:61:0f:7d:6f:
         6f:6a:42:c8:98:52:63:fa:8a:67:dd:aa:e2:5e:bf:33:ed:c5:
         8a:55:05:54:04:60:a7:15:f4:f0:e0:f8:1d:83:94:89:ed:9c:
         ef:ed:1d:2e:7c:6a:69:4b:56:8c:e9:30:2a:b2:27:8e:db:ae:
         4e:85:e6:ae:33:fc:6c:05:73:8e:f2:30:f5:1c:ef:1c:1c:20:
         bd:66:ad:c8:e0:f4:4e:73:f6:87:0e:a1:fa:f4:a9:eb:30:37:
         38:83:d2:af:95:fb:32:12:08:95:de:95:17:46:6d:07:55:6f:
         36:d9:f1:94:02:a0:b4:c1:e8:b0:c2:75:1b:d6:b4:45:35:78:
         86:59:58:5d:fe:95:a5:23:aa:10:ba:55:e6:fd:00:1a:54:63:
         57:a1:cc:dc:7c:bd:9e:39:ef:27:0c:b1:ac:e5:c8:f2:49:a1:
         9f:40:31:7a:b1:d9:1a:50:e8:a3:e8:31:54:fe:35:42:7f:3d:
         61:67:cc:c8:ff:08:03:01:3f:84:a6:9e:02:f8:f4:a1:96:d6:
         98:f1:e9:a1:db:5e:be:cd:d5:a2:76:54:c4:43:98:e1:d0:a5:
         bc:50:7e:a4:b7:f6:82:0f:dd:c9:6d:b7:5b:99:b5:33:14:5d:
         5f:7a:df:6d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUMHPAhz1eR3x4RqQLAE8jq61/YqUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwOTA4MDQ0NjUwWhcNMjMwOTA3MDQ1MTUw
WjAzMTEwLwYDVQQDEygxM0REMDRBMjI1QUU1QTQxMzk0NEU4MEUwMjM0NDhDMjVE
MUEwMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXBks8zpCen7
tTKruSghqfxg5p35uD71DdOKwRc/3htaDJh3qucN9mP4fR954CLykWicDanhRQwH
rJ/711+0VY5uFszbXOvoOVJOMDqcTXMRRD3U0/I707VO0AexFsQDC7jtFOfySGeD
iJ/O8ONv24sQQDn/bSJyQiUbS7bf7itkNDiLIysKDraqYgWOismS2WiadeuRkqCk
wR9THF1KtAyMbEFVV27emXvUDlsl+as6GE0ea2auVu4eF7hzihi5e6q8Ez9Ad8Ax
n7IaratFyhXANrNxiB5UeSkvD4Vejlx9OdhyaRHdhqOP7sa6Fyl1DGEmAWgPLdzo
JgaKPzYuNwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBPdBKIlrlpBOUToDgI0SMJd
GgBnMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMzMzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdsMA0GCSqGSIb3DQEB
CwUAA4IBAQBOHFUcHqZKUBKEp7HGj2EPfW9vakLImFJj+opn3ariXr8z7cWKVQVU
BGCnFfTw4Pgdg5SJ7Zzv7R0ufGppS1aM6TAqsieO265OheauM/xsBXOO8jD1HO8c
HCC9Zq3I4PROc/aHDqH69KnrMDc4g9KvlfsyEgiV3pUXRm0HVW822fGUAqC0weiw
wnUb1rRFNXiGWVhd/pWlI6oQulXm/QAaVGNXoczcfL2eOe8nDLGs5cjySaGfQDF6
sdkaUOij6DFU/jVCfz1hZ8zI/wgDAT+Epp4C+PShltaY8emh216+zdWidlTEQ5jh
0KW8UH6kt/aCD93JbbdbmbUzFF1fet9t
-----END CERTIFICATE-----