Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          yDsczfjrBkJOTwHIvDJIEaDSl2BmUqLYDJFj8nrS6xo=
Subject key identifier:   F4:9D:F2:D9:18:26:24:F8:4F:25:44:1C:BA:F1:31:46:F7:5A:78:8A
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       7453890A27C281FFD72B98136095A6F41B32A984
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa
Signing time:             Tue 12 Jul 2022 05:47:33 +0000
ROA not before:           Tue 12 Jul 2022 05:42:33 +0000
ROA not after:            Tue 11 Jul 2023 05:47:33 +0000
asID:                     207326
IP address blocks:        216.247.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:89:0a:27:c2:81:ff:d7:2b:98:13:60:95:a6:f4:1b:32:a9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:33 2022 GMT
            Not After : Jul 11 05:47:33 2023 GMT
        Subject: CN=F49DF2D9182624F84F25441CBAF13146F75A788A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:fd:68:67:ae:19:69:e2:6f:31:fd:17:99:
                    3b:0d:3f:84:a3:1b:18:29:5a:6a:61:fe:e3:73:cd:
                    dc:8b:80:3d:76:68:4a:78:00:74:b0:a1:58:bd:69:
                    ec:63:80:9c:67:f9:11:12:90:c6:12:d7:4e:27:be:
                    05:b6:b2:5a:49:16:3c:4f:cf:1e:ee:dd:3c:1b:c4:
                    69:5f:79:fe:df:11:7d:07:e0:ac:e7:78:02:03:48:
                    bc:57:a5:d3:bf:53:14:7c:ce:36:49:cb:a8:fe:24:
                    b8:10:cd:14:c1:3c:58:8b:97:f2:96:81:f0:9a:f1:
                    d4:47:1e:d4:de:9b:51:a7:1f:ef:e2:f1:47:e7:0c:
                    cd:ca:ef:75:52:05:27:94:fe:8d:c2:d4:b5:b9:4e:
                    99:db:71:5f:39:c0:9f:93:1e:53:6e:f5:e0:f8:ce:
                    b7:04:69:7e:4d:45:4f:76:e5:6e:4e:1b:c8:d0:7f:
                    76:ad:03:e2:d1:f9:b9:1e:88:af:1e:4e:04:80:91:
                    6b:9d:a4:99:73:23:36:76:72:be:1b:b5:9e:99:88:
                    07:2a:2d:f0:81:67:d6:ee:67:2d:3a:88:f0:d5:3e:
                    6d:58:86:89:73:63:06:e4:49:d4:1d:06:a4:d7:9f:
                    bc:19:be:9e:fd:ec:ed:71:e4:c2:1c:e8:40:d4:2b:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:F2:D9:18:26:24:F8:4F:25:44:1C:BA:F1:31:46:F7:5A:78:8A
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:a0:4a:26:11:87:f1:7b:b8:90:e3:2c:21:72:42:7e:57:
         ec:6b:2a:5f:73:ca:05:2b:8c:73:11:c7:b5:b0:fe:1d:d9:8e:
         fa:af:93:c6:76:60:e5:74:78:87:00:c8:b1:b1:f3:19:0a:e0:
         47:8d:4f:64:fc:d9:5a:f5:b0:aa:06:56:ea:fa:7d:84:78:15:
         93:30:4d:ce:3b:8d:87:39:3f:c8:ea:c7:2b:55:fa:ae:0c:bf:
         a1:b6:0c:36:76:19:ca:9c:22:a0:6b:6c:aa:9c:21:a3:58:e5:
         d0:c9:5c:3f:a9:9f:db:14:f2:21:7d:7e:d2:05:01:b8:d0:1f:
         1c:ed:ec:50:37:97:b6:42:e5:3c:f9:cf:76:d1:4e:54:94:1f:
         29:9d:86:2f:2d:26:1b:51:f9:0d:af:f5:0b:08:4b:d9:01:af:
         0e:63:64:53:97:b7:e0:47:5f:2e:ef:4d:63:4c:3b:e5:63:2f:
         7d:40:75:52:2a:15:14:83:9e:2f:47:44:33:42:ce:3a:b5:ae:
         7f:21:3d:a7:af:d9:ac:84:fc:28:75:a5:77:d9:8c:6a:37:33:
         9c:66:db:0e:f7:2f:7c:ad:b7:1e:f5:04:e1:ce:41:7e:40:ab:
         83:c8:53:4b:41:ae:d6:81:2e:bd:77:57:60:d9:22:4e:23:f7:
         c7:44:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----