Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier:          h054B8kT6WB9iJ3E69Y+c0XGgxxQ5YZ5ZWdlvJVCqvw=
Subject key identifier:   0D:AD:BC:E0:A1:CD:BA:10:8A:94:F2:8E:10:9E:14:E2:53:B8:15:31
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       623E2282917CFDBED93BFA996B7B453CA05F56AA
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa
Signing time:             Tue 12 Jul 2022 05:47:36 +0000
ROA not before:           Tue 12 Jul 2022 05:42:36 +0000
ROA not after:            Tue 11 Jul 2023 05:47:36 +0000
asID:                     139660
IP address blocks:        216.247.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:22:82:91:7c:fd:be:d9:3b:fa:99:6b:7b:45:3c:a0:5f:56:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:36 2022 GMT
            Not After : Jul 11 05:47:36 2023 GMT
        Subject: CN=0DADBCE0A1CDBA108A94F28E109E14E253B81531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:e1:78:b9:76:9f:9d:ca:8b:ef:75:83:6f:
                    42:8d:1d:e3:e6:e7:ff:6a:35:b4:44:24:dc:b1:09:
                    1e:90:9d:bc:5f:8b:2d:43:a4:b5:03:89:fa:c4:e0:
                    7c:c0:74:c4:4e:c0:7d:a4:47:cc:fc:a6:11:03:16:
                    86:71:fc:54:25:71:fc:28:c5:9f:67:12:89:6f:c9:
                    36:ca:2b:41:b1:18:04:2b:4c:54:09:e9:0f:c6:12:
                    5f:80:b0:4c:29:f9:03:ce:46:56:4c:38:7f:c5:22:
                    5e:29:d0:32:be:8a:55:b9:09:ef:f9:01:8f:ce:c3:
                    5e:4e:2b:b9:6a:9a:a5:96:3d:f5:19:6b:94:e7:18:
                    93:6b:b0:fc:1f:65:4f:c0:bb:12:93:50:b5:c0:7d:
                    d6:8b:4b:6b:50:47:5c:6a:8d:c5:fe:89:a4:15:ad:
                    59:a9:1f:1a:23:4d:b5:37:35:39:b6:12:4e:33:d6:
                    0a:95:b4:99:09:d9:63:6a:db:a7:05:86:26:9e:f4:
                    75:07:0f:4c:b9:bc:d4:47:17:66:e8:0b:9b:1a:19:
                    04:74:d2:0a:87:96:0c:97:94:4a:07:45:5a:d3:2f:
                    68:e0:3d:e3:23:95:41:7d:4b:03:f2:ad:a6:03:81:
                    f9:40:15:e0:ae:13:b9:39:ca:00:2b:0f:4d:d4:7a:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AD:BC:E0:A1:CD:BA:10:8A:94:F2:8E:10:9E:14:E2:53:B8:15:31
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:e1:70:5d:a8:3f:c9:71:3f:63:2f:7c:50:ba:82:62:be:
         57:9f:56:9b:63:47:06:c6:db:ea:dc:7a:c5:e2:f7:bc:9e:27:
         aa:4e:ac:8b:90:9e:21:5f:86:43:78:79:a2:66:59:38:1f:46:
         4d:d8:31:87:c9:b7:8f:c1:1a:39:5c:f6:93:4f:40:43:21:99:
         40:94:c8:38:c5:fc:1e:6d:47:f6:e0:26:63:70:0c:07:ac:81:
         97:81:dc:b2:b5:8f:bd:50:53:df:de:b8:58:50:6b:a3:43:4a:
         5a:b4:93:9c:17:89:0f:7d:a0:b8:52:7e:04:ee:4a:43:30:fd:
         c0:e0:29:fa:6b:65:1d:8d:d2:19:38:c0:04:15:f2:99:db:b9:
         23:cb:ab:de:a9:75:35:b7:b5:ac:4d:ce:16:d5:2a:cb:55:c6:
         5e:76:34:e2:12:72:a6:04:ce:1b:1f:08:18:55:7b:f9:db:bc:
         31:c4:04:3c:8e:18:46:30:39:07:90:47:63:43:e7:ae:0c:1d:
         36:78:41:70:af:d7:2e:7d:6a:04:79:8b:97:0c:2c:aa:0e:5b:
         68:d9:0d:8a:0e:a6:42:7e:74:79:ad:13:9a:71:d9:8f:2c:ae:
         82:6f:f6:8c:a8:8b:c1:8d:46:92:79:29:6a:a4:92:ec:4a:0a:
         23:63:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----