Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136332e302f32342d3234203d3e2037303138.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          5/7XVfi4Xz4ESZFa9ehLQyEQurub5QX330O65HERsNw=
Subject key identifier:   54:F1:9E:AA:C4:FC:C6:4E:39:47:E6:39:F8:F4:21:CC:41:BD:A9:58
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       30C3E88CE1DC0715603AE4FC93C6B39D53821C58
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136332e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 12 Jul 2022 05:47:34 +0000
ROA not before:           Tue 12 Jul 2022 05:42:34 +0000
ROA not after:            Tue 11 Jul 2023 05:47:34 +0000
asID:                     7018
IP address blocks:        45.135.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c3:e8:8c:e1:dc:07:15:60:3a:e4:fc:93:c6:b3:9d:53:82:1c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:34 2022 GMT
            Not After : Jul 11 05:47:34 2023 GMT
        Subject: CN=54F19EAAC4FCC64E3947E639F8F421CC41BDA958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:fe:b9:4f:2c:45:45:3c:fb:ba:5f:6b:2c:
                    d9:50:b2:78:84:fa:6a:f6:1c:3b:0d:ab:3b:48:b1:
                    d9:67:ea:ad:a2:f3:99:10:23:df:ff:eb:a9:83:51:
                    bd:22:bd:f7:ca:5c:7e:c8:ba:f1:26:5e:1c:cd:19:
                    94:04:7b:c7:5e:c5:12:2c:c5:97:02:22:75:d9:78:
                    ab:46:c6:02:53:e9:79:1e:36:c3:ff:28:37:40:f6:
                    21:1d:1b:2a:2c:10:c8:18:e8:a0:39:e8:b7:6a:6f:
                    22:f0:5e:e9:73:ef:ae:8d:21:52:18:8e:16:94:6c:
                    17:d5:24:e7:15:1e:8b:b8:ae:c1:62:4f:b5:74:e9:
                    dd:24:70:c7:29:7d:bf:00:08:0c:df:1c:c0:35:ad:
                    96:88:89:86:27:b6:ca:53:d0:76:9a:cb:dd:80:9f:
                    7b:00:3d:87:93:30:89:ad:d7:71:fe:d1:7c:2b:d4:
                    7f:99:5c:c2:a9:99:01:ff:82:2a:cf:49:07:b0:92:
                    2b:81:6c:63:26:79:16:a4:ac:ac:c6:df:62:41:53:
                    5e:2b:47:1c:ee:f8:4e:36:8c:02:0b:e8:7c:aa:b4:
                    fc:ac:08:c0:cd:67:b2:44:d0:2d:5c:79:95:1c:11:
                    3b:f6:0f:81:83:9f:70:04:24:50:08:92:20:ce:a8:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:9E:AA:C4:FC:C6:4E:39:47:E6:39:F8:F4:21:CC:41:BD:A9:58
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136332e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:7b:3e:d7:8c:95:80:14:79:64:b8:74:4a:83:4f:54:7f:
         01:35:5f:3c:d9:4a:c3:d9:6e:39:73:e1:a7:ab:2b:34:6d:96:
         73:ff:47:c9:75:f1:16:07:4b:21:69:a7:7a:a6:3c:a4:ed:b5:
         2a:4b:9a:1c:f7:7e:1c:41:72:2a:12:cb:63:d0:57:cb:77:c6:
         96:80:d6:5e:32:2d:03:c4:f5:4a:21:68:10:78:81:c7:dd:44:
         91:6b:d4:c1:db:44:76:c1:e1:13:da:d1:90:78:46:06:98:f3:
         4c:5b:10:2f:e0:28:c0:ea:cd:9f:74:9f:7f:56:c0:ed:65:1e:
         e5:30:5c:37:d3:45:c5:e5:d3:df:3c:cf:41:b2:25:7c:e0:40:
         6d:f4:3c:3c:c3:80:e6:9d:8f:48:53:c9:67:6e:d7:87:37:97:
         a2:30:2d:39:87:17:8d:e7:d5:6e:2d:c6:ea:0d:dc:61:95:6f:
         d1:3c:a2:8d:8b:7d:6c:7f:e9:94:e1:04:15:af:8e:67:1c:21:
         97:75:b6:c0:a0:36:03:f0:f8:5e:5c:d7:13:b4:1c:03:3f:8c:
         49:d7:81:3b:04:38:15:d1:c7:45:5c:8c:1b:23:09:25:dd:66:
         20:9c:ba:cd:c5:01:3c:00:ed:70:2a:a3:67:7c:92:1d:25:9c:
         1c:8a:ab:55
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUMMPojOHcBxVgOuT8k8aznVOCHFgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzEyMDU0MjM0WhcNMjMwNzExMDU0NzM0
WjAzMTEwLwYDVQQDEyg1NEYxOUVBQUM0RkNDNjRFMzk0N0U2MzlGOEY0MjFDQzQx
QkRBOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8X+uU8sRUU8
+7pfayzZULJ4hPpq9hw7Das7SLHZZ+qtovOZECPf/+upg1G9Ir33ylx+yLrxJl4c
zRmUBHvHXsUSLMWXAiJ12XirRsYCU+l5HjbD/yg3QPYhHRsqLBDIGOigOei3am8i
8F7pc++ujSFSGI4WlGwX1STnFR6LuK7BYk+1dOndJHDHKX2/AAgM3xzANa2WiImG
J7bKU9B2msvdgJ97AD2HkzCJrddx/tF8K9R/mVzCqZkB/4Iqz0kHsJIrgWxjJnkW
pKysxt9iQVNeK0cc7vhONowCC+h8qrT8rAjAzWeyRNAtXHmVHBE79g+Bg59wBCRQ
CJIgzqhONQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFTxnqrE/MZOOUfmOfj0IcxB
valYMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzM0MzUyZTMxMzMzNTJlMzEzNjMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAth6MwDQYJKoZIhvcNAQELBQAD
ggEBAEcOez7XjJWAFHlkuHRKg09UfwE1XzzZSsPZbjlz4aerKzRtlnP/R8l18RYH
SyFpp3qmPKTttSpLmhz3fhxBcioSy2PQV8t3xpaA1l4yLQPE9UohaBB4gcfdRJFr
1MHbRHbB4RPa0ZB4RgaY80xbEC/gKMDqzZ90n39WwO1lHuUwXDfTRcXl0988z0Gy
JXzgQG30PDzDgOadj0hTyWdu14c3l6IwLTmHF43n1W4txuoN3GGVb9E8oo2LfWx/
6ZThBBWvjmccIZd1tsCgNgPw+F5c1xO0HAM/jEnXgTsEOBXRx0VcjBsjCSXdZiCc
us3FATwA7XAqo2d8kh0lnByKq1U=
-----END CERTIFICATE-----