Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130322e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e3130322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          wMCNsZkDJrBlk3ChMhv8/dewwQtWAXpK413WgqJsYbY=
Subject key identifier:   50:D1:C2:E2:1B:8C:FC:5D:8E:89:AF:47:99:3D:10:EA:2D:B2:95:36
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       441968627E52CD3EDC1CCE30C6C837F6369776AE
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130322e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     834
IP address blocks:        216.246.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:19:68:62:7e:52:cd:3e:dc:1c:ce:30:c6:c8:37:f6:36:97:76:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=50D1C2E21B8CFC5D8E89AF47993D10EA2DB29536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:d4:ea:bf:93:29:ba:3b:63:e3:59:68:2c:
                    d1:92:a5:1d:c4:c3:33:97:27:ee:56:31:24:7d:13:
                    1d:68:89:88:1f:5a:58:da:49:56:51:c8:9a:b1:d3:
                    ba:6f:16:33:5c:18:1e:6a:08:4e:c9:13:31:c0:32:
                    5c:e9:e3:9d:85:e5:a8:e1:ef:8f:8d:9f:b2:16:12:
                    1e:5c:d3:fb:17:e3:da:8b:9f:97:15:a7:32:d6:9a:
                    a0:aa:68:61:7d:87:45:61:61:0a:ab:53:91:d9:3c:
                    73:b6:0c:d5:b6:70:81:67:44:7a:bf:8b:e6:29:4b:
                    d6:8b:d1:7e:fe:2c:46:74:10:05:33:34:a7:e7:5b:
                    68:91:16:80:59:46:af:b2:e6:c7:26:8a:81:53:94:
                    72:fd:b6:ae:b6:ef:8e:e4:0a:82:f1:44:8c:15:f9:
                    c1:d3:15:2e:03:be:7c:d1:57:98:92:50:1b:af:66:
                    eb:4a:3d:68:aa:ac:45:2a:04:2a:98:64:62:0f:1d:
                    d6:01:5e:1b:41:77:f9:1f:0b:bc:61:b0:04:d8:c3:
                    29:bb:64:9a:fb:95:e4:df:f7:a7:b6:df:c4:df:e1:
                    c9:7a:b5:65:79:c0:c4:1f:2d:54:0f:05:49:95:17:
                    ee:09:80:bb:60:23:55:c1:6d:97:93:1a:6f:57:a8:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:C2:E2:1B:8C:FC:5D:8E:89:AF:47:99:3D:10:EA:2D:B2:95:36
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:84:33:70:df:fb:fd:7b:a6:33:51:3c:c8:ae:9d:6a:6d:
         c3:da:73:a0:27:ca:03:64:99:b2:35:60:c4:ea:a7:04:5e:a4:
         67:71:3e:a5:d1:fb:82:5a:82:c2:62:0a:6f:69:b1:07:18:f2:
         69:04:a9:b1:96:28:66:99:e3:17:90:49:38:7e:23:a9:9c:a6:
         ea:cc:78:83:5a:e2:3c:f0:d1:2a:f9:0c:5b:a6:47:d9:fe:5d:
         b5:60:7a:b6:90:fc:59:69:d9:22:e1:d1:2d:57:3d:9a:9f:0b:
         bc:8a:2b:50:97:9d:56:1c:f0:2f:10:34:f4:3b:90:75:77:07:
         7e:78:11:e3:eb:04:39:26:58:9b:b4:f6:8f:92:8b:54:d7:f3:
         c2:1c:26:bd:2c:6f:fd:69:23:4c:d8:a8:8c:7f:5e:a4:7f:ba:
         7c:fe:ab:6b:65:31:dd:15:31:eb:bc:73:a5:c9:04:c8:ec:87:
         f2:60:0f:3d:0d:48:7c:7a:2f:96:4a:44:85:5d:16:8f:c2:7c:
         7e:33:82:33:c5:b0:2d:e0:5f:a4:18:79:47:c8:47:d6:b0:2e:
         96:a5:98:9d:21:66:93:99:da:ef:1f:3f:7e:c5:be:13:0a:a9:
         5f:79:39:aa:a0:ce:a9:82:9a:09:f0:36:5d:a1:74:2e:ac:38:
         6e:0e:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----