Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          evI+YruZTofgUoHJa7r11g7HQEblSsGTH8VaiM8Thqs=
Subject key identifier:   C6:86:1B:0F:00:84:2A:C3:6F:A6:21:E9:08:28:43:B1:66:C3:F6:77
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       4D3CF0D9744D9F048E95EFF85724ABD801177413
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
Signing time:             Thu 29 Sep 2022 13:39:48 +0000
ROA not before:           Thu 29 Sep 2022 13:34:48 +0000
ROA not after:            Thu 28 Sep 2023 13:39:48 +0000
asID:                     7018
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3c:f0:d9:74:4d:9f:04:8e:95:ef:f8:57:24:ab:d8:01:17:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Sep 29 13:34:48 2022 GMT
            Not After : Sep 28 13:39:48 2023 GMT
        Subject: CN=C6861B0F00842AC36FA621E9082843B166C3F677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:a6:ae:0a:4a:b4:00:0e:a2:c8:fd:be:93:
                    77:32:23:68:b0:b3:da:13:68:ff:9a:41:ad:1e:bd:
                    8f:55:62:9a:8d:9d:c1:f9:14:4f:3e:02:9a:5b:80:
                    8c:52:d5:54:7d:8b:e6:ce:a2:d9:20:bb:1c:02:18:
                    00:40:61:bb:3f:ce:5f:fd:5a:b4:c5:0d:6a:12:ad:
                    18:91:39:a7:9a:f0:ea:85:31:96:9d:d2:55:d8:ba:
                    b7:72:1d:5e:32:b4:c5:89:14:6f:17:0c:2e:9e:ed:
                    4a:a0:5a:ee:4c:4f:b8:91:ce:14:a9:e6:b6:35:ea:
                    84:d9:66:7e:4a:54:ab:e5:ce:1d:d8:82:20:89:5c:
                    ba:2a:24:51:29:69:71:24:e9:52:fb:69:d7:38:f4:
                    eb:0a:84:da:4e:e1:2d:64:a7:d6:96:48:81:73:a8:
                    52:21:4a:61:a0:57:f8:c1:3c:64:06:63:9e:9b:22:
                    17:7c:ba:5e:0a:60:93:0d:d0:f1:75:9d:79:04:83:
                    61:12:ed:7e:b8:46:48:7a:61:0c:90:8c:32:a7:ca:
                    e8:7b:c5:8b:9e:8f:c0:7b:c9:e1:fb:6d:7a:8f:c7:
                    d3:35:8c:6e:bf:02:4d:3a:42:2f:20:32:0a:42:13:
                    ec:93:28:19:ec:f7:63:67:6c:61:81:2c:37:87:78:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:1B:0F:00:84:2A:C3:6F:A6:21:E9:08:28:43:B1:66:C3:F6:77
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:d6:c5:7c:8f:d6:c3:d8:e3:47:d6:9e:15:c8:58:14:87:
         a4:3b:ee:3c:38:38:16:07:18:41:4a:91:89:f5:8b:d9:ef:d8:
         dd:cb:34:24:bc:ce:73:d6:46:b7:a5:57:1e:d0:b9:15:50:49:
         03:0c:86:00:af:82:53:12:a7:60:88:be:b1:06:b8:f5:f2:28:
         21:26:ed:c4:a5:16:ed:ff:ed:10:98:06:74:42:96:86:36:6c:
         0f:b2:f5:ba:6e:83:9e:c0:89:b2:a8:7d:29:b0:f8:8a:8c:18:
         1e:54:a7:73:f6:a1:24:80:e2:11:1d:20:bb:f7:c7:f3:6a:aa:
         2e:9b:af:67:40:b6:1a:19:d3:ba:e8:0f:7e:cc:ee:a1:4f:e5:
         39:85:ff:a5:4c:d3:e8:ae:20:21:b3:45:0f:e5:ad:46:6c:a0:
         de:09:8e:28:69:94:73:81:ac:b3:bc:62:c1:3e:2e:b6:7d:56:
         2a:b1:30:dd:78:51:5f:33:68:68:3d:5a:0e:bd:2b:03:7c:86:
         f6:73:dd:e9:8b:a7:e2:48:64:4e:d2:29:46:ca:f5:b4:77:08:
         97:98:fd:84:9c:86:fe:20:62:0b:67:f0:c4:90:c1:6f:a2:c4:
         f3:34:73:fc:c0:25:53:2a:d6:66:9f:32:7f:e2:e1:e8:f8:03:
         5b:ca:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----