Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e31362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          H7rofheXNYXc2p7/+wLg+WZ2lB1Ai6/GZEcsCajD3l4=
Subject key identifier:   56:85:07:76:63:D0:8A:BE:88:09:2B:FB:70:74:EA:37:13:1C:96:0A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6E48D0E9430C43EC56AB89D75BCA6F49E9E14606
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:48:d0:e9:43:0c:43:ec:56:ab:89:d7:5b:ca:6f:49:e9:e1:46:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=5685077663D08ABE88092BFB7074EA37131C960A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:9e:08:5b:7d:ad:10:25:0f:c8:54:01:22:
                    ba:18:48:2f:86:26:fe:f1:3a:e4:ae:f7:a3:b0:46:
                    a2:bf:47:d4:f5:9a:7d:2b:ba:e1:9f:12:9d:34:06:
                    f8:44:a0:1a:4b:c2:1f:88:7e:21:91:f0:19:14:25:
                    3c:9a:35:0b:43:2b:2a:99:99:e4:70:f2:5f:b6:4e:
                    6c:a2:15:a5:90:9e:a0:d6:85:74:fa:51:0b:17:a5:
                    a6:6e:52:4f:94:cd:dd:e2:91:cc:ae:e1:8a:30:ed:
                    25:59:92:55:d7:03:8a:d4:de:07:c1:b9:99:84:93:
                    55:c4:86:ca:0c:65:1c:2a:98:97:10:55:72:f9:fb:
                    8f:ea:4b:68:26:bb:ac:61:a3:d1:b6:89:55:ee:fa:
                    70:c1:55:f3:9b:2f:74:bd:ac:34:84:51:53:87:5b:
                    0b:2f:28:8d:20:4f:ee:bf:41:a8:5b:bf:39:01:c3:
                    72:06:7b:28:eb:4b:96:37:7e:32:75:37:5b:20:9e:
                    40:7f:8e:5a:66:39:ae:2c:5d:43:19:69:73:e2:bd:
                    c4:bc:cc:3d:ec:02:e1:cd:bb:95:3a:f1:6a:94:fb:
                    98:87:f0:62:46:6e:d7:6e:03:6e:ce:68:81:cf:77:
                    a3:43:86:34:87:a8:84:66:15:87:ac:00:93:ee:18:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:07:76:63:D0:8A:BE:88:09:2B:FB:70:74:EA:37:13:1C:96:0A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:98:c8:9f:25:71:03:f2:61:00:df:93:35:ae:54:40:e2:44:
         1a:c0:ab:c6:25:40:1e:48:c6:e7:58:76:e5:b5:21:24:ec:fa:
         7a:eb:90:48:04:23:54:77:d9:c9:37:1b:c7:57:81:e1:f7:1a:
         eb:0c:15:f3:8f:9c:e0:7d:e5:43:42:7b:7f:fc:37:85:c4:53:
         52:cf:88:54:da:6e:58:ab:33:08:12:7c:31:3f:fb:dc:d3:49:
         ee:2a:7c:b0:f5:f8:90:3b:bd:fd:f6:29:f1:70:bc:8a:9c:0c:
         63:17:7b:b2:9d:34:80:f9:a5:98:31:64:d1:f3:93:86:af:dc:
         ed:c5:1a:e2:c1:c4:aa:6e:d9:76:f7:e3:76:05:05:80:6d:11:
         f5:4a:49:0c:30:e0:c9:49:58:86:2b:3a:29:78:fd:d8:f2:b4:
         4b:c9:0a:eb:82:28:5f:00:68:0d:8e:cc:21:73:86:7b:22:81:
         2a:33:e1:ce:85:c5:e0:c2:4c:af:da:39:9b:f8:0d:8d:de:b1:
         11:a7:78:c7:25:19:82:6d:a0:40:77:76:6c:ae:78:d7:3b:8c:
         29:5c:52:32:7c:43:01:ca:d6:9b:31:58:45:5b:05:1c:2f:52:
         60:3c:47:cc:ea:c5:9f:54:d4:91:08:b0:e7:90:db:5c:3f:57:
         18:fb:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----