Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          WgqE+9rikoxdwrrUNMin4HCLAxO9O7IebTmLTp1Xh7A=
Subject key identifier:   88:91:2E:72:E5:DB:67:5C:B3:97:09:DD:56:BB:92:9B:C2:5F:D1:97
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       222E1AE91F48FA99BC6D626F23ED36C1AFAF3879
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 19:02:23 +0000
ROA not before:           Fri 15 Nov 2024 18:57:23 +0000
ROA not after:            Fri 14 Nov 2025 19:02:23 +0000
asID:                     834
IP address blocks:        216.246.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2e:1a:e9:1f:48:fa:99:bc:6d:62:6f:23:ed:36:c1:af:af:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:57:23 2024 GMT
            Not After : Nov 14 19:02:23 2025 GMT
        Subject: CN=88912E72E5DB675CB39709DD56BB929BC25FD197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:a9:69:8e:2e:06:a1:e3:eb:62:2a:26:3c:
                    f5:29:9a:95:d6:81:7c:ff:f0:49:8f:29:85:22:91:
                    2b:17:00:04:ef:ab:ed:69:21:33:1c:0a:2c:2e:8c:
                    44:1f:34:37:f8:e6:29:36:59:3a:65:8d:59:5b:ba:
                    7f:c9:87:e9:bd:4e:40:a1:e2:f9:54:fa:8e:56:7d:
                    9c:06:c5:72:04:cc:bf:dc:ed:88:f2:f6:b1:b8:cf:
                    68:31:27:5b:22:b3:92:f4:a9:96:77:08:7c:ad:de:
                    d1:80:80:74:f3:dd:bf:de:5c:f4:4a:16:54:36:91:
                    f6:cf:9d:1e:4f:5d:f7:c1:60:8a:51:98:d0:28:04:
                    f5:24:d7:22:cf:b3:55:4f:4e:0a:63:59:db:a4:72:
                    9a:8b:92:e5:b5:14:82:8d:00:0f:7f:56:ad:02:29:
                    5b:24:a2:cf:9f:cf:45:f2:39:29:87:65:17:cf:30:
                    87:b2:d1:1c:69:d0:a8:67:34:c1:ea:66:1b:ce:17:
                    c2:c7:52:de:f8:b0:d9:92:54:d6:72:74:02:50:bb:
                    32:6a:9b:79:b7:df:eb:c2:41:2c:b5:f2:57:0c:f7:
                    56:13:05:a2:d1:39:22:cc:35:0a:62:9f:ee:e6:e9:
                    5c:7c:48:c6:7d:05:4e:9e:d5:ee:f0:0a:b3:4f:30:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:2E:72:E5:DB:67:5C:B3:97:09:DD:56:BB:92:9B:C2:5F:D1:97
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:be:67:89:a1:c8:0a:6c:e0:a4:a9:0f:96:a2:21:46:2d:2b:
         bc:62:a8:55:25:5a:28:0b:64:05:57:75:f9:93:d2:90:16:b4:
         d3:9b:26:95:f0:38:67:82:f7:df:53:36:e5:13:12:65:b6:e1:
         88:fe:f6:54:f4:a8:9f:5c:79:a0:e0:85:ed:22:e5:e0:9b:a6:
         d9:f0:a6:54:7c:df:46:26:3d:e9:47:6d:46:bc:65:81:83:0e:
         f5:92:df:66:8f:7d:ca:99:6e:d6:df:7f:23:d0:d4:39:45:28:
         c1:a0:d8:11:c8:ca:f1:98:1b:4b:0a:8e:24:bb:7f:00:d6:32:
         49:62:bd:f3:56:ef:40:ca:b6:d6:cc:6c:43:77:46:15:4c:ce:
         7f:68:f0:06:0b:fc:89:b5:3a:6b:7c:e3:3a:f4:a7:39:9a:4e:
         a8:7b:3d:0e:30:1e:cf:b2:79:21:57:14:db:4a:f2:91:c0:ae:
         5e:6c:95:53:f3:32:64:f7:82:c6:09:87:f6:9f:55:9e:34:20:
         98:96:b4:a7:80:a3:fc:f6:48:8a:82:d1:87:59:d9:95:09:20:
         98:57:c5:04:27:f7:ef:38:b7:f4:bf:39:b0:48:07:eb:52:94:
         a7:68:c7:39:fa:d0:02:13:1e:eb:83:0d:10:05:5f:ef:0c:37:
         65:22:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----