Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3131312e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e3131312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          zl422vWKoQFk+tvs5o0AG9OSZnRdD0Voey3TFtagA50=
Subject key identifier:   87:E0:16:7F:4B:48:D3:4D:9A:26:98:F6:91:6A:68:BE:21:58:5B:E6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       080CFD38210E96DB07CAC33776BF3B7E479F7443
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3131312e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     212238
IP address blocks:        216.246.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:fd:38:21:0e:96:db:07:ca:c3:37:76:bf:3b:7e:47:9f:74:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=87E0167F4B48D34D9A2698F6916A68BE21585BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:05:26:4b:52:fd:25:5d:c8:f2:48:f4:ff:
                    fd:88:77:89:29:db:d7:56:f1:5c:7d:82:33:6b:69:
                    a7:b6:90:80:77:10:bc:d1:b0:21:5f:42:e0:a7:05:
                    be:52:fb:8e:7b:01:4d:82:3e:1c:af:40:6d:e0:5f:
                    fc:fd:82:a1:b2:0a:eb:eb:49:9d:ae:58:34:61:b1:
                    bd:30:5c:de:9b:de:a6:d7:fe:6e:03:7a:00:57:bf:
                    40:4e:89:ad:67:29:8f:ad:93:f1:35:c0:04:e2:45:
                    f0:e2:00:95:f3:91:ba:4d:bb:a0:77:89:3b:cd:5f:
                    fd:c9:66:8e:32:16:5b:87:b6:32:03:ee:96:38:94:
                    16:b0:3d:bb:ba:7d:29:94:0f:1c:53:6c:32:1a:e9:
                    db:d1:a3:a9:57:06:86:a8:bd:11:33:9f:67:0e:43:
                    e5:95:06:83:8a:d9:31:9b:31:72:ab:04:2f:7c:df:
                    b2:79:84:14:50:a3:e2:7f:52:ca:3d:2e:f6:04:00:
                    99:d4:05:38:b4:47:9d:db:e3:05:ca:31:cd:07:4b:
                    30:8e:36:c2:64:e9:7f:fc:92:90:d5:c5:e6:aa:57:
                    68:6b:3a:60:b1:79:a5:0a:98:77:d6:a3:78:0f:8e:
                    b7:48:00:e9:d4:56:38:b0:b1:cc:14:ee:be:6a:fb:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E0:16:7F:4B:48:D3:4D:9A:26:98:F6:91:6A:68:BE:21:58:5B:E6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3131312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:ce:e0:5c:1c:0b:6e:05:6f:44:ec:68:a6:e2:a8:ac:1c:
         70:c6:e7:30:8b:f8:66:54:db:d3:6d:bd:89:39:73:af:e0:63:
         9d:04:8b:de:a6:d5:c5:96:9a:ac:ed:6c:93:26:b1:2b:ef:02:
         51:66:9d:03:21:45:85:41:41:9f:06:e7:05:31:43:33:c7:48:
         22:cc:97:81:96:cf:1f:b1:2c:60:6f:4b:72:e6:84:0d:b6:20:
         fa:f1:78:f5:18:38:5c:3a:21:76:4e:a5:4b:e6:23:28:70:3c:
         5d:6d:06:24:60:33:2b:82:b6:a4:c4:7a:5e:c7:9c:02:d4:7b:
         e7:59:93:db:47:43:ef:40:7e:82:a1:d9:db:f5:90:48:14:4c:
         89:55:a9:5e:d2:66:70:76:f5:7e:27:14:97:22:02:51:d6:30:
         b0:77:e6:a8:18:4b:60:18:6b:87:48:c3:8f:e6:d6:29:f6:af:
         f9:0b:6a:38:4d:34:1e:c0:88:aa:d1:f3:3f:f1:04:8e:94:18:
         d7:f5:1a:ff:c9:f5:0e:5c:6f:3b:20:35:1f:5f:e1:fc:13:41:
         a3:f7:a1:87:bd:15:c3:93:77:2a:68:12:bc:67:6e:c5:04:63:
         3f:73:26:76:6b:50:b1:9d:dc:e6:dc:82:ae:19:81:37:01:af:
         56:13:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 21:08:46 2024 by rpki-client on console-fra.rpki-client.org