Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130332e302f32342d3234203d3e20313432303336.roa
File:                     3231362e3234362e3130332e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          sKClyHy7kigkxR3cBgWeTly9AoVzqNPsIDluzMVhgvQ=
Subject key identifier:   C8:47:84:01:E6:93:E6:07:C7:E0:33:C5:B0:B2:64:A8:C7:A3:6D:A6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2B1DE44745E804C9F1F7CA0B017C3AB6BEE56A86
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130332e302f32342d3234203d3e20313432303336.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     142036
IP address blocks:        216.246.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1d:e4:47:45:e8:04:c9:f1:f7:ca:0b:01:7c:3a:b6:be:e5:6a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=C8478401E693E607C7E033C5B0B264A8C7A36DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:98:a2:b9:f7:f4:6a:5c:dd:8c:d2:77:34:
                    78:7d:7e:16:b5:2c:86:41:e3:c6:bf:4b:89:39:6e:
                    96:a9:3c:c1:44:e4:54:a1:69:f0:2a:51:e0:96:10:
                    32:d9:64:4c:35:ca:fa:7e:0d:d4:ad:e9:1d:21:32:
                    87:4e:56:b0:bf:5e:c1:77:62:db:db:96:ec:32:9a:
                    36:a3:dd:46:92:09:4d:ec:48:ca:29:9a:77:27:48:
                    5f:eb:32:76:1b:84:4e:f8:aa:62:9a:08:24:2a:df:
                    81:bb:ef:5d:12:c1:4a:00:0a:99:7b:62:0a:b6:91:
                    ce:bf:cc:1d:1b:77:c3:a4:77:70:51:36:08:67:ae:
                    a9:c2:67:56:b2:71:9e:5d:ed:5e:47:ab:b0:9d:90:
                    2b:01:13:a0:64:3f:c2:c2:e0:d2:3d:84:59:59:56:
                    3c:ba:9a:b1:e1:2f:75:50:5a:48:e2:08:55:8b:79:
                    d8:e9:1c:21:2b:1b:c4:75:c8:0a:04:6b:1f:2a:7d:
                    9b:f2:23:15:ae:da:f0:9b:79:8b:85:28:04:cb:af:
                    e4:9c:e5:10:51:cb:14:52:5a:ba:1f:1f:c1:70:b0:
                    5f:73:a8:38:e6:d6:d6:27:41:f1:1c:ce:53:42:62:
                    09:d3:2d:fc:8b:87:ae:54:4e:a9:78:dd:43:44:81:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:84:01:E6:93:E6:07:C7:E0:33:C5:B0:B2:64:A8:C7:A3:6D:A6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130332e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:37:33:06:23:41:94:6c:55:c9:23:01:ea:2e:3f:db:15:
         63:76:eb:6e:07:fd:ee:7e:4c:63:09:3e:a8:97:0e:8e:b0:da:
         ba:ea:7c:75:a3:29:f9:54:18:0d:ab:11:55:e5:9f:5a:36:67:
         a6:c5:c8:89:8d:4e:5b:41:2f:47:8d:0d:6b:58:9f:1b:c3:71:
         4f:1b:81:d8:66:15:6a:79:1b:c9:52:64:7e:7d:a4:28:11:e3:
         3c:7c:87:c7:6f:ff:88:c5:a1:56:ed:60:b5:5e:9c:6b:87:08:
         ad:55:05:cd:56:0e:96:88:8a:44:16:d2:f3:86:1e:d9:5c:e6:
         fa:8d:27:6e:0e:14:4b:40:41:09:62:c5:0e:88:a9:67:43:ce:
         fe:86:b5:e1:d1:c5:92:00:81:34:11:16:d9:e6:ef:88:77:39:
         44:ab:10:ab:bd:70:24:5a:86:f9:84:fa:cb:c7:f5:b1:eb:d3:
         d2:3a:7c:3d:99:35:ae:12:be:6e:fa:95:bd:c2:6c:a9:d1:4c:
         05:ce:92:9a:a6:3a:04:c1:0a:80:4e:ce:d9:7e:da:3d:b1:b0:
         c1:9f:e5:9b:ce:f1:b6:bf:f8:d7:82:c3:6f:57:be:9e:bc:2a:
         8d:72:c6:cd:96:df:38:ad:10:7f:df:4c:fc:7c:1e:73:af:86:
         64:74:b5:ff
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUKx3kR0XoBMnx98oLAXw6tr7laoYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMyWhcNMjUxMTE0MTgzOTMy
WjAzMTEwLwYDVQQDEyhDODQ3ODQwMUU2OTNFNjA3QzdFMDMzQzVCMEIyNjRBOEM3
QTM2REE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47SYorn39Gpc
3YzSdzR4fX4WtSyGQePGv0uJOW6WqTzBRORUoWnwKlHglhAy2WRMNcr6fg3Urekd
ITKHTlawv17Bd2Lb25bsMpo2o91GkglN7EjKKZp3J0hf6zJ2G4RO+KpimggkKt+B
u+9dEsFKAAqZe2IKtpHOv8wdG3fDpHdwUTYIZ66pwmdWsnGeXe1eR6uwnZArAROg
ZD/CwuDSPYRZWVY8upqx4S91UFpI4ghVi3nY6RwhKxvEdcgKBGsfKn2b8iMVrtrw
m3mLhSgEy6/knOUQUcsUUlq6Hx/BcLBfc6g45tbWJ0HxHM5TQmIJ0y38i4euVE6p
eN1DRIHBaQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMhHhAHmk+YHx+AzxbCyZKjH
o22mMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMTMwMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzIzMDMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY9mcwDQYJKoZIhvcN
AQELBQADggEBALl5NzMGI0GUbFXJIwHqLj/bFWN2624H/e5+TGMJPqiXDo6w2rrq
fHWjKflUGA2rEVXln1o2Z6bFyImNTltBL0eNDWtYnxvDcU8bgdhmFWp5G8lSZH59
pCgR4zx8h8dv/4jFoVbtYLVenGuHCK1VBc1WDpaIikQW0vOGHtlc5vqNJ24OFEtA
QQlixQ6IqWdDzv6GteHRxZIAgTQRFtnm74h3OUSrEKu9cCRahvmE+svH9bHr09I6
fD2ZNa4Svm76lb3CbKnRTAXOkpqmOgTBCoBOztl+2j2xsMGf5ZvO8ba/+NeCw29X
vp68Ko1yxs2W3zitEH/fTPx8HnOvhmR0tf8=
-----END CERTIFICATE-----