Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          7uxUhkkC3c0EAtqiPkYvofptM9A9g4RTw4BMkAfzWz0=
Subject key identifier:   C6:81:A2:EF:17:E2:F6:E0:8D:33:10:16:AA:27:3B:0E:37:8A:EC:05
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       7FF95847D0E3EAAD379D722793F15FD1D9C961D3
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa
Signing time:             Thu 29 Sep 2022 13:39:58 +0000
ROA not before:           Thu 29 Sep 2022 13:34:58 +0000
ROA not after:            Thu 28 Sep 2023 13:39:58 +0000
asID:                     7018
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:58:47:d0:e3:ea:ad:37:9d:72:27:93:f1:5f:d1:d9:c9:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Sep 29 13:34:58 2022 GMT
            Not After : Sep 28 13:39:58 2023 GMT
        Subject: CN=C681A2EF17E2F6E08D331016AA273B0E378AEC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:ff:ca:39:6a:6f:d9:5e:55:f8:f4:e0:c4:
                    81:ee:4b:aa:40:f7:bb:a5:30:bb:e5:d4:3f:5a:d3:
                    c7:01:af:7e:bf:7d:ae:fe:55:2b:95:8a:71:97:21:
                    b4:bc:35:81:b7:1c:fa:56:23:36:54:25:61:fb:59:
                    0f:d2:da:dd:aa:f2:a0:43:af:fd:f6:2a:9d:e2:eb:
                    2c:6a:9b:36:e9:be:2d:bf:55:12:3c:a7:86:d1:a2:
                    21:ac:e2:7c:c5:20:8b:0c:b4:a0:36:57:98:57:f9:
                    c2:bb:8b:0c:bb:26:2c:40:78:4b:f7:57:95:a6:8e:
                    f8:a4:79:45:36:d5:48:d7:0c:e3:a3:6a:7e:a5:55:
                    e5:5d:a3:40:6d:f6:ec:07:9c:da:30:b6:33:c2:1e:
                    95:5d:4a:62:18:e9:b2:f1:ec:66:dd:88:b6:9d:6f:
                    f8:93:91:b6:4d:f9:79:24:26:bc:0b:32:46:88:43:
                    15:73:71:51:8d:af:2f:9d:c3:83:ef:44:14:89:5f:
                    b0:84:f0:0e:a3:32:e2:14:31:61:fc:66:dc:6a:b4:
                    ff:d6:f1:67:56:74:ef:da:6f:2f:68:5f:45:2b:12:
                    2f:01:f9:b8:62:f2:4f:38:b3:0e:b9:23:a9:fe:f7:
                    99:ba:f4:fc:d1:83:8e:63:e9:86:01:85:35:47:c0:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:A2:EF:17:E2:F6:E0:8D:33:10:16:AA:27:3B:0E:37:8A:EC:05
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:25:62:3d:bf:90:8c:7a:f2:5a:4a:ed:55:f4:1e:7e:2e:
         32:4a:6c:c6:ed:d9:77:8a:20:17:02:34:a4:4c:78:cf:f8:d0:
         0a:31:ec:a0:a6:53:c7:22:72:a9:ac:3a:8c:04:b3:e1:29:88:
         e4:cd:91:15:05:30:d5:a9:3d:cc:3c:d0:5b:00:1a:e4:a4:35:
         d9:a3:a6:5a:78:bb:dc:10:36:6d:ad:d0:f1:5d:16:a2:8e:35:
         e7:15:5d:03:bf:17:15:34:e7:39:4e:4f:88:16:4a:c5:71:66:
         4f:25:22:d4:9a:15:e2:30:3b:8e:9b:62:2c:1d:e8:c8:2c:c9:
         10:de:52:14:91:17:52:2c:f4:41:64:7d:ae:1a:44:d6:d2:4a:
         e1:60:00:7f:db:51:c8:b9:78:cd:9e:8d:56:00:9c:cd:be:6c:
         da:f0:2e:a5:fd:33:93:c5:78:90:49:d9:71:8c:4a:0b:56:b4:
         5e:2c:40:be:c9:94:bd:b8:0d:63:e5:2d:4d:07:bc:1b:a8:84:
         8e:6f:df:7b:e5:73:2e:b1:71:2a:b5:2d:a1:ea:86:45:4e:1d:
         1a:be:11:f2:c4:65:c3:e7:00:df:f5:49:e8:7c:1a:0c:ce:13:
         3d:fd:4c:d5:0f:7b:fc:3f:66:55:40:f6:40:11:04:96:60:36:
         50:27:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----