Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          MGN8jeJDMP8Mm4Ne3IyeAengTo4V7p6iPQJ1MMm8JPM=
Subject key identifier:   73:EA:C6:3F:CF:16:42:7C:5B:D3:12:99:DE:4B:B9:34:AE:E1:65:59
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       5FBE7625A53B1865D3201036D1664488870202AC
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 12 Jul 2022 05:47:32 +0000
ROA not before:           Tue 12 Jul 2022 05:42:32 +0000
ROA not after:            Tue 11 Jul 2023 05:47:32 +0000
asID:                     22773
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:be:76:25:a5:3b:18:65:d3:20:10:36:d1:66:44:88:87:02:02:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:32 2022 GMT
            Not After : Jul 11 05:47:32 2023 GMT
        Subject: CN=73EAC63FCF16427C5BD31299DE4BB934AEE16559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:aa:d0:67:f5:50:16:85:7a:aa:1b:2e:f6:
                    c1:a6:cb:37:a4:9b:50:19:69:06:52:b1:66:12:a4:
                    72:59:e7:48:06:d8:41:c9:94:82:d7:a5:2f:fe:2d:
                    6f:74:d2:24:b8:e9:73:30:48:e2:62:b9:bb:8a:8d:
                    c4:ad:bc:ea:50:81:15:55:ca:2e:12:64:04:4d:e9:
                    01:25:3a:3f:94:32:b1:69:00:84:40:8a:d3:fe:a6:
                    c9:72:0f:ca:70:a4:08:24:3c:88:1c:02:eb:f8:ef:
                    f9:7a:77:84:cc:33:64:89:ff:7b:78:3d:09:e9:8b:
                    28:68:bd:09:89:b8:4d:5f:e5:85:63:26:d7:c0:6b:
                    96:c1:11:2a:35:6d:ad:d8:29:4e:72:73:8c:67:7b:
                    a6:dd:0e:c7:e9:de:8f:0e:a0:e1:38:da:e8:e1:8e:
                    23:7a:c7:6c:9a:07:1b:45:ec:44:9a:62:83:e2:8c:
                    e3:a0:8b:bb:dc:91:47:67:bc:90:18:c2:7c:0b:9b:
                    b6:94:a0:8b:c2:62:55:82:c5:58:64:52:b5:40:2a:
                    05:4b:97:48:14:d2:1b:2b:9e:c4:21:7d:14:8d:f6:
                    07:65:7b:c2:92:11:95:29:18:80:d5:6e:3c:bc:6c:
                    9e:f9:be:c6:e9:05:af:fb:7b:00:36:eb:31:ab:70:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:C6:3F:CF:16:42:7C:5B:D3:12:99:DE:4B:B9:34:AE:E1:65:59
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:03:f3:d7:de:70:da:61:f7:3e:6b:d3:ae:e5:30:d7:9e:8d:
         21:56:3b:64:32:94:80:85:2f:fe:a1:35:47:b0:e3:80:25:9c:
         74:86:38:ca:44:c7:08:57:65:51:4f:8e:bb:6f:8d:d0:d4:9a:
         0b:6a:dd:3a:8b:88:ee:db:b1:c8:59:db:56:29:d9:16:f7:d1:
         17:0a:2b:6b:71:22:88:cd:ba:a6:4c:d5:46:18:72:3a:03:b0:
         f8:6e:20:9a:7e:8b:4b:84:b9:1d:39:97:97:c1:5f:b1:0b:04:
         5c:93:02:50:b7:20:db:3e:40:e4:e9:54:62:53:09:a1:89:c8:
         a0:c9:27:8e:0e:7b:e5:8d:0d:c4:ca:e6:82:55:0a:c8:05:50:
         2c:fb:0a:fc:34:4d:39:9d:0e:10:49:59:79:a0:e5:69:4d:ca:
         db:de:df:3f:0a:0b:ce:f5:5a:a1:f0:f5:7b:51:51:7f:31:5f:
         2e:3d:84:b9:04:eb:59:8b:d6:a7:24:08:0e:4c:ef:a9:d9:24:
         cc:6f:99:99:8a:32:50:83:70:fd:36:9b:14:98:e6:ba:a3:dc:
         49:89:39:73:09:88:a8:67:01:85:56:90:5c:51:a5:63:2b:77:
         79:2d:e5:39:ba:32:30:0c:7d:bf:52:cc:18:39:55:d5:b1:c0:
         fc:6b:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----