Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier:          qvXyPbdx3iLvs5bWnKe0HyhlIfW/1TZ5Fm2U4tu/87E=
Subject key identifier:   22:3D:47:5E:57:28:E0:1D:17:03:45:9C:B1:EE:02:E8:F0:92:11:FD
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       052C09A1804BAF0724CAC22FB7EAD282DA17B479
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa
Signing time:             Thu 10 Nov 2022 14:26:28 +0000
ROA not before:           Thu 10 Nov 2022 14:21:28 +0000
ROA not after:            Thu 09 Nov 2023 14:26:28 +0000
asID:                     212669
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:09:a1:80:4b:af:07:24:ca:c2:2f:b7:ea:d2:82:da:17:b4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov 10 14:21:28 2022 GMT
            Not After : Nov  9 14:26:28 2023 GMT
        Subject: CN=223D475E5728E01D1703459CB1EE02E8F09211FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:1e:53:e4:c7:46:48:a1:0f:ff:c4:43:cf:
                    5a:a5:38:2c:d0:be:1e:b9:51:73:98:46:3e:a5:e7:
                    c4:bb:17:1f:47:e0:bc:33:59:83:d2:5b:35:5b:2f:
                    05:85:c7:d0:0b:c2:b4:e8:3f:cf:5c:85:29:47:c1:
                    0e:33:c4:42:40:7b:73:46:a5:1a:92:17:d1:71:30:
                    75:56:60:28:5f:07:74:63:99:b4:a8:48:fb:63:77:
                    09:f1:df:50:2a:8a:74:62:a7:6b:90:46:a0:18:06:
                    98:56:11:6e:02:7a:d9:68:4d:41:84:68:ab:5e:c2:
                    83:20:ac:ec:5a:be:a6:65:ff:ce:d1:c5:c7:6c:42:
                    c0:bd:6d:2e:82:69:c4:ef:43:ed:2c:af:cd:24:1d:
                    cb:c3:0b:f1:64:8e:fb:4e:bc:a8:53:71:02:01:cc:
                    a2:d7:f2:de:34:07:db:d4:6f:a6:39:08:de:c5:f9:
                    35:4b:58:73:fc:e3:8f:1e:15:be:d1:14:51:9c:58:
                    da:d2:41:fc:92:cf:c6:67:a9:f7:48:8d:c7:43:d8:
                    55:99:c6:70:39:38:f1:eb:6f:fb:22:f5:fd:a5:79:
                    d3:0f:ec:ac:82:c8:c6:cc:73:ff:f4:51:6d:f5:7c:
                    1c:12:3e:64:eb:f4:3b:03:e9:aa:78:a1:b9:8d:55:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:47:5E:57:28:E0:1D:17:03:45:9C:B1:EE:02:E8:F0:92:11:FD
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e20323132363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:03:c1:56:c5:14:ba:be:53:be:16:da:b4:4b:72:21:75:85:
         a8:26:c2:70:9a:67:0b:9e:af:77:30:d8:9e:45:8a:c2:78:9f:
         02:65:0d:8a:4a:25:57:7d:24:33:0c:85:4f:3f:e7:f8:9f:33:
         0b:7a:b5:b6:db:ad:d1:83:32:97:62:e2:de:c8:20:07:69:a7:
         75:ee:94:12:3e:e9:f6:02:43:7d:46:90:35:69:4e:f5:4e:97:
         de:75:33:10:72:a4:3a:d0:0d:fc:e9:04:b2:6b:2f:f4:2f:d9:
         de:9d:43:6e:0d:8d:67:5d:d6:cd:6e:ce:59:c3:f6:fa:bd:e6:
         ba:ee:db:cf:3e:cc:c4:ca:7f:b4:b2:a9:b3:0a:00:e2:ed:76:
         94:31:8f:b5:63:f2:10:51:a8:a6:02:10:65:da:36:44:a0:36:
         76:db:ef:5c:13:d4:89:a8:4b:9a:7b:c2:77:92:e3:da:fb:ce:
         36:3d:32:1a:a4:47:e3:30:1c:68:0a:fc:0b:0a:ff:c3:52:f0:
         90:9b:99:c6:10:7a:b0:30:d4:ab:ef:dc:10:06:b4:76:bf:ed:
         6f:32:51:54:7f:1a:10:b0:44:37:12:d9:67:45:25:8e:eb:48:
         d2:93:38:eb:68:fd:ab:5e:2f:45:39:11:f7:f9:b0:9a:71:3a:
         f0:3b:fe:2a
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBSwJoYBLrwckysIvt+rSgtoXtHkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIxMTEwMTQyMTI4WhcNMjMxMTA5MTQyNjI4
WjAzMTEwLwYDVQQDEygyMjNENDc1RTU3MjhFMDFEMTcwMzQ1OUNCMUVFMDJFOEYw
OTIxMUZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKQeU+THRkih
D//EQ89apTgs0L4euVFzmEY+pefEuxcfR+C8M1mD0ls1Wy8FhcfQC8K06D/PXIUp
R8EOM8RCQHtzRqUakhfRcTB1VmAoXwd0Y5m0qEj7Y3cJ8d9QKop0YqdrkEagGAaY
VhFuAnrZaE1BhGirXsKDIKzsWr6mZf/O0cXHbELAvW0ugmnE70PtLK/NJB3Lwwvx
ZI77TryoU3ECAcyi1/LeNAfb1G+mOQjexfk1S1hz/OOPHhW+0RRRnFja0kH8ks/G
Z6n3SI3HQ9hVmcZwOTjx62/7IvX9pXnTD+ysgsjGzHP/9FFt9XwcEj5k6/Q7A+mq
eKG5jVVnVQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCI9R15XKOAdFwNFnLHuAujw
khH9MB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzM0MzUyZTMxMzMzNTJlMzEzNjMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYegMA0GCSqGSIb3DQEB
CwUAA4IBAQAHA8FWxRS6vlO+Ftq0S3IhdYWoJsJwmmcLnq93MNieRYrCeJ8CZQ2K
SiVXfSQzDIVPP+f4nzMLerW2263RgzKXYuLeyCAHaad17pQSPun2AkN9RpA1aU71
TpfedTMQcqQ60A386QSyay/0L9nenUNuDY1nXdbNbs5Zw/b6vea67tvPPszEyn+0
sqmzCgDi7XaUMY+1Y/IQUaimAhBl2jZEoDZ22+9cE9SJqEuae8J3kuPa+842PTIa
pEfjMBxoCvwLCv/DUvCQm5nGEHqwMNSr79wQBrR2v+1vMlFUfxoQsEQ3EtlnRSWO
60jSkzjraP2rXi9FORH3+bCacTrwO/4q
-----END CERTIFICATE-----