Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31312e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e31312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          wpvha2QMYq+a8Rzore5KpfIzxRN9YrNBQkDWh/nIvLA=
Subject key identifier:   90:7F:F7:F4:9A:73:43:C0:06:B4:25:4C:19:9D:F0:4E:0D:BC:56:FF
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5134D559F8F9F00D80463DECF5048FA0A1531A70
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31312e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:34:d5:59:f8:f9:f0:0d:80:46:3d:ec:f5:04:8f:a0:a1:53:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=907FF7F49A7343C006B4254C199DF04E0DBC56FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:1a:69:8b:f0:c7:f8:63:58:60:f5:60:d0:
                    39:ae:1c:3b:a3:c4:36:22:f4:d7:32:7c:7d:1d:a9:
                    fd:20:c8:29:f0:11:5b:b7:e6:65:3e:db:a9:f5:cf:
                    ae:0a:89:23:41:09:7c:5f:2d:f9:36:e7:7d:48:eb:
                    28:ef:98:d4:cc:45:44:b0:78:a9:dd:6e:f2:ac:63:
                    08:65:31:d7:f9:c5:86:00:db:04:6b:d3:f9:b2:91:
                    7c:82:0e:e0:76:62:98:94:bb:7d:5d:a0:da:9d:cc:
                    43:76:7e:d5:d7:4d:45:14:0d:4b:70:3c:bd:67:cb:
                    f2:cc:28:53:97:b0:2d:fd:a6:8c:1b:55:19:f6:1e:
                    3f:70:f3:30:d5:95:0a:c6:40:52:be:77:a6:53:0b:
                    10:2c:1b:ee:fa:7f:76:4e:44:0f:ad:21:00:c7:c9:
                    e0:ac:b4:8d:0e:ee:36:f7:c7:8d:3a:c9:4d:63:e9:
                    6a:9c:ec:a9:f8:95:4c:79:43:a5:2c:39:a8:b0:52:
                    05:93:0a:f8:e2:cd:e1:e8:e2:8b:60:d2:63:58:75:
                    99:b3:a5:47:c8:66:d9:b4:2a:ea:51:7c:bc:6d:68:
                    c0:3e:34:dc:3b:0c:70:ce:ac:87:65:6a:e7:be:fc:
                    3c:18:92:10:d3:62:3c:75:eb:d5:84:6e:f7:0e:bd:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:F7:F4:9A:73:43:C0:06:B4:25:4C:19:9D:F0:4E:0D:BC:56:FF
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:56:21:3d:7c:1c:9a:2f:26:8e:07:14:87:80:fc:e1:d1:78:
         48:1a:47:05:23:19:a8:ca:3e:4c:61:7f:e9:20:a8:7b:8b:0b:
         64:ce:49:b8:31:96:90:fe:c8:f4:a4:54:43:bc:68:32:47:c8:
         1b:b0:12:ab:82:2a:6d:67:e3:38:fc:d9:e8:68:94:85:51:4f:
         5f:39:a0:48:fe:b7:69:df:30:21:d0:d7:c7:f6:a6:72:8d:4f:
         92:54:bf:83:97:6b:f8:32:0f:06:3b:47:74:f6:9e:39:fb:e5:
         b0:8d:96:ba:79:e3:81:d4:b4:61:0a:df:c3:e4:34:ad:4b:0e:
         3c:b6:43:be:f6:d6:01:06:84:16:63:1b:97:22:38:f8:dd:c1:
         11:eb:76:28:f0:af:9d:b3:d6:03:e2:44:a7:01:48:d5:f3:bf:
         3d:c2:8b:60:32:e8:bd:64:67:4d:ac:b1:41:c4:43:63:cd:d8:
         b3:d6:ea:1f:3f:3c:c8:c5:35:07:fd:67:ad:31:77:44:50:47:
         45:e9:d7:a9:ee:f4:ad:ed:a3:93:7f:5e:ba:51:89:d8:e7:28:
         5d:f4:45:e8:4b:7d:4e:5f:67:70:82:d8:1e:94:64:12:4e:eb:
         29:2e:34:f2:aa:13:78:bc:30:fc:fc:9d:3e:10:61:5f:26:92:
         d9:df:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----