Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e203430363736.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          fehSKhdXI5IU5VUuRs4Q3K4NSjI04cn/ptyuyUUEt1I=
Subject key identifier:   5D:22:A6:12:E3:12:6C:63:5D:48:E2:6E:81:92:C1:74:09:D1:90:A8
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       75642946903F2DDB201232D6579D8C0D5C9D6B32
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e203430363736.roa
Signing time:             Tue 12 Jul 2022 05:47:32 +0000
ROA not before:           Tue 12 Jul 2022 05:42:32 +0000
ROA not after:            Tue 11 Jul 2023 05:47:32 +0000
asID:                     40676
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:64:29:46:90:3f:2d:db:20:12:32:d6:57:9d:8c:0d:5c:9d:6b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:32 2022 GMT
            Not After : Jul 11 05:47:32 2023 GMT
        Subject: CN=5D22A612E3126C635D48E26E8192C17409D190A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:c3:7f:dc:f5:2b:c4:31:b8:ec:95:a5:c5:
                    f3:48:95:56:f9:c1:76:b0:be:5e:dc:29:62:03:35:
                    1d:22:c6:5b:10:c2:ef:c4:26:2c:da:b2:41:9f:4b:
                    e4:82:73:df:27:14:ff:ed:33:02:a8:8c:9f:b6:c0:
                    1d:08:1f:d4:e5:ae:40:bd:d8:86:38:6c:9b:10:b7:
                    00:1e:36:b6:f2:d7:aa:da:9b:31:f2:dd:fd:2d:db:
                    33:bb:6e:4b:cb:80:49:d8:0c:70:4e:f5:4f:8b:53:
                    80:60:e2:8a:9f:2b:39:4c:e9:6e:0c:23:87:16:6d:
                    88:3c:42:5e:73:dd:21:ce:52:f6:46:1b:2a:b5:de:
                    4e:9b:23:1c:16:af:3a:84:d8:f1:9f:32:7c:b6:65:
                    ac:cd:3d:02:60:3a:c3:16:25:fc:85:3b:79:4f:30:
                    3f:67:21:97:e3:3c:21:0d:f1:f5:49:75:59:f8:bb:
                    b1:de:f0:9c:5b:42:7f:f0:a8:ba:87:ca:39:47:c7:
                    1e:fb:53:c8:8c:2a:d1:dc:d5:ea:39:61:0c:12:9a:
                    d2:52:3e:e7:14:05:3c:6b:09:1b:1d:12:c6:28:2e:
                    6e:d7:2b:d2:cc:5c:0a:7e:24:73:c8:28:9e:90:99:
                    f2:18:f4:cb:c9:38:a9:71:b0:e6:98:a8:b3:c5:cf:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:22:A6:12:E3:12:6C:63:5D:48:E2:6E:81:92:C1:74:09:D1:90:A8
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136302e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:e6:68:f3:da:b5:77:85:7c:ad:57:d9:1d:65:ce:bd:98:cd:
         bc:32:ec:bd:8d:20:33:c1:72:0a:05:c0:d6:b3:ab:e8:6c:f7:
         e1:45:8a:4f:22:15:6c:f1:fe:1c:37:d5:43:ab:d1:ce:89:6f:
         9c:22:47:ed:5b:44:3e:8a:29:28:45:da:d6:3a:52:08:00:dc:
         e3:f4:26:9c:44:dd:28:f3:51:3e:35:fb:19:36:23:bc:a1:e1:
         e0:ef:d5:07:80:62:9f:9c:c0:88:db:05:6f:28:df:de:74:00:
         75:74:0f:5a:ce:82:fe:2f:ac:bb:36:48:fa:f4:9c:e5:4b:80:
         c7:2c:16:b4:15:c3:0e:4a:1d:b7:6f:6d:75:1f:c9:15:cc:3e:
         00:14:fa:0d:7a:49:6a:29:0e:ba:2e:d2:a8:ae:df:27:c5:89:
         9e:3e:16:31:d9:67:36:51:0b:30:f8:0c:41:34:a7:b3:ed:6b:
         c3:3f:38:c7:48:ec:ad:f2:b7:62:bd:72:80:6c:af:a3:0a:83:
         e5:d5:22:43:ff:00:da:ff:a5:d8:a1:bf:42:ad:25:58:d4:03:
         52:32:07:df:9f:88:a4:e3:20:b3:73:4d:f9:95:5c:3b:ae:8d:
         5f:a6:3f:e3:57:52:cb:18:7f:b5:22:d2:3c:6e:8f:73:22:64:
         0d:4b:c1:33
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdWQpRpA/LdsgEjLWV52MDVydazIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzEyMDU0MjMyWhcNMjMwNzExMDU0NzMy
WjAzMTEwLwYDVQQDEyg1RDIyQTYxMkUzMTI2QzYzNUQ0OEUyNkU4MTkyQzE3NDA5
RDE5MEE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SnDf9z1K8Qx
uOyVpcXzSJVW+cF2sL5e3CliAzUdIsZbEMLvxCYs2rJBn0vkgnPfJxT/7TMCqIyf
tsAdCB/U5a5AvdiGOGybELcAHja28teq2psx8t39Ldszu25Ly4BJ2AxwTvVPi1OA
YOKKnys5TOluDCOHFm2IPEJec90hzlL2Rhsqtd5OmyMcFq86hNjxnzJ8tmWszT0C
YDrDFiX8hTt5TzA/ZyGX4zwhDfH1SXVZ+Lux3vCcW0J/8Ki6h8o5R8ce+1PIjCrR
3NXqOWEMEprSUj7nFAU8awkbHRLGKC5u1yvSzFwKfiRzyCiekJnyGPTLyTipcbDm
mKizxc82bwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFF0iphLjEmxjXUjiboGSwXQJ
0ZCoMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzM0MzUyZTMxMzMzNTJlMzEzNjMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDM2MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2HoDANBgkqhkiG9w0BAQsF
AAOCAQEAwOZo89q1d4V8rVfZHWXOvZjNvDLsvY0gM8FyCgXA1rOr6Gz34UWKTyIV
bPH+HDfVQ6vRzolvnCJH7VtEPoopKEXa1jpSCADc4/QmnETdKPNRPjX7GTYjvKHh
4O/VB4Bin5zAiNsFbyjf3nQAdXQPWs6C/i+suzZI+vSc5UuAxywWtBXDDkodt29t
dR/JFcw+ABT6DXpJaikOui7SqK7fJ8WJnj4WMdlnNlELMPgMQTSns+1rwz84x0js
rfK3Yr1ygGyvowqD5dUiQ/8A2v+l2KG/Qq0lWNQDUjIH35+IpOMgs3NN+ZVcO66N
X6Y/41dSyxh/tSLSPG6PcyJkDUvBMw==
-----END CERTIFICATE-----