Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          VJvdMyMmMgTif95Rb0qjhRexEQwsr6cDLaDKv7etaOE=
Subject key identifier:   0F:F3:15:8D:00:F1:93:6A:9F:72:B3:8C:1C:91:1A:22:AC:F3:F2:CB
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       1FAAE3D864F18D125E2FAF9674B43977E4BFAF35
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 12 Jul 2022 05:47:36 +0000
ROA not before:           Tue 12 Jul 2022 05:42:36 +0000
ROA not after:            Tue 11 Jul 2023 05:47:36 +0000
asID:                     212238
IP address blocks:        216.247.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:e3:d8:64:f1:8d:12:5e:2f:af:96:74:b4:39:77:e4:bf:af:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:36 2022 GMT
            Not After : Jul 11 05:47:36 2023 GMT
        Subject: CN=0FF3158D00F1936A9F72B38C1C911A22ACF3F2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:7a:3f:57:7e:c2:3a:d1:9b:ec:c0:78:22:
                    1d:fd:66:83:09:84:de:22:6a:7d:76:7c:c6:c4:39:
                    2a:fd:ae:42:01:38:65:f3:21:d4:9c:39:a1:e6:97:
                    11:10:c5:9c:13:cf:9f:c5:66:22:4f:72:4a:40:6b:
                    e2:64:ff:d6:d2:71:e5:bd:ea:62:ba:49:df:fa:86:
                    79:af:1d:0a:9b:9c:e0:98:e4:6a:4e:4f:7e:bb:5a:
                    c0:15:32:23:e4:c3:74:0f:ef:61:fd:9a:8b:95:c4:
                    6d:63:7d:cb:06:d6:10:aa:6d:8c:26:25:8b:89:dd:
                    94:53:09:a5:03:61:8f:57:b3:22:d6:b3:b1:69:fb:
                    32:a7:30:a9:c1:78:47:90:8b:33:28:34:aa:5b:b8:
                    f0:74:3e:2e:65:89:4d:fc:9e:02:39:2a:bb:f1:46:
                    82:ec:6a:13:c9:a1:7d:a0:b4:e6:0d:a7:e1:b7:55:
                    84:0a:b5:35:18:d1:9d:92:c3:58:a7:98:22:a7:66:
                    bd:70:d6:31:81:eb:e7:ad:9a:ce:5d:16:84:d2:6f:
                    45:e5:15:7e:1d:8f:92:9f:2f:9a:ae:cc:9a:8d:57:
                    9a:1b:cd:c3:52:0b:68:12:60:6e:f2:59:d9:b8:93:
                    5b:c7:de:23:2e:59:ca:65:2f:dc:2a:88:17:b4:44:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:15:8D:00:F1:93:6A:9F:72:B3:8C:1C:91:1A:22:AC:F3:F2:CB
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:c4:ce:11:1c:78:d9:94:02:09:f6:7f:89:39:c9:82:74:
         b5:27:99:d1:6f:74:b6:7a:e1:ab:d4:4f:78:95:0d:7e:83:4f:
         fd:22:bb:8e:f3:22:4c:0c:84:ce:23:a3:40:0d:e4:59:37:fe:
         75:52:8e:bd:3b:85:bc:a6:c2:c2:06:77:3d:7b:a4:f3:c4:62:
         dc:0f:8e:f7:9d:db:c8:3f:64:91:44:fe:a0:33:63:9d:31:bb:
         0e:2b:33:97:17:f0:36:25:6f:fc:ba:ed:13:f8:48:b4:60:9c:
         a8:c4:47:7a:9e:42:34:51:75:9f:4a:f7:bc:18:f6:48:3a:4a:
         e5:8a:2d:d5:d3:05:33:7e:6e:95:88:a0:e5:16:12:80:68:3a:
         b3:45:00:f0:29:37:f6:61:8a:5e:bd:8c:b2:fa:24:ba:1a:fe:
         07:6b:6c:51:9b:6d:bb:a8:1a:71:be:35:9e:3b:1c:8d:b1:94:
         ac:56:16:5b:71:72:02:1f:f7:16:7c:83:6d:9b:c0:9f:86:34:
         4f:d1:28:f6:9b:85:9c:8c:1a:69:4d:b2:7c:f9:98:5a:7a:b5:
         8a:d4:38:c7:df:c0:98:58:2b:c2:8e:e7:c2:c9:7a:28:cd:70:
         19:db:4d:67:5c:a7:10:5d:3b:77:1c:12:4f:43:4c:ab:df:dd:
         98:c5:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----