Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32332e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e32332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          IrcG/sByY6WW+X0ZbSP4FybfLgnyyewPkD8PP0JtAtc=
Subject key identifier:   B6:C3:9D:E9:03:30:F2:E9:AC:A5:63:77:B6:57:29:E8:3D:85:1F:B5
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2B40EE1E627DAA56AF9CED30CF857FCFB8013079
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     212238
IP address blocks:        216.246.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:40:ee:1e:62:7d:aa:56:af:9c:ed:30:cf:85:7f:cf:b8:01:30:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=B6C39DE90330F2E9ACA56377B65729E83D851FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:db:a3:da:af:2f:8e:bb:92:54:61:fa:e1:
                    8d:4e:94:00:d8:67:56:b2:0b:56:c7:ac:89:8f:28:
                    5c:20:2f:f9:56:ae:61:13:5f:7f:ca:a6:cd:d5:be:
                    7b:8a:aa:21:ab:9e:1d:16:ed:c9:1b:92:02:92:8f:
                    32:d4:59:d0:6c:a6:cc:9c:9a:51:7a:07:88:52:de:
                    5e:44:ec:a0:10:d9:bc:87:29:01:72:46:e3:f6:38:
                    27:30:75:28:74:38:42:8e:74:83:67:b0:b3:52:7e:
                    97:dd:0c:65:69:49:0a:40:5a:92:63:74:81:08:d7:
                    ed:03:3a:64:db:d7:aa:0d:d8:cc:cd:01:40:d8:dd:
                    c4:98:92:4e:b2:9a:a0:6d:31:63:b8:61:9c:65:c0:
                    e1:55:3a:7a:d5:ca:b8:b4:23:d6:97:64:ec:66:d9:
                    32:c0:63:67:f7:7b:15:10:4e:bb:32:80:f9:cd:86:
                    98:a2:cc:03:d0:2e:c2:bb:4d:df:96:c7:42:4e:dc:
                    34:6d:c1:50:05:45:1b:41:7a:ba:dd:c4:71:4e:29:
                    3c:49:a6:30:e1:08:2c:54:d5:68:c8:78:c7:90:21:
                    dc:34:af:ac:98:e5:87:cb:bb:5d:33:78:c8:bf:d8:
                    db:01:9d:e8:ef:90:39:59:03:83:11:d3:26:05:09:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:9D:E9:03:30:F2:E9:AC:A5:63:77:B6:57:29:E8:3D:85:1F:B5
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:29:3f:55:16:5e:73:62:ac:a6:db:28:cc:26:4b:b0:2e:
         a4:15:e8:5a:0e:e5:b0:b2:43:14:22:5d:a6:ac:c5:82:a2:fe:
         14:f1:a1:b8:6a:bd:f3:fc:8f:5e:09:de:fa:48:ce:21:db:62:
         30:c4:03:2b:5b:65:bf:3c:54:c4:fd:9c:e6:97:f8:be:11:b6:
         81:23:9c:2d:ad:e0:08:04:ed:c2:19:04:76:21:d2:25:59:43:
         92:82:14:92:25:94:cc:bb:3e:e0:cd:ab:6c:41:56:91:b1:4f:
         57:b8:82:41:88:4e:6b:8a:b1:54:c3:c8:67:99:71:88:b9:dc:
         86:cb:d9:e0:c0:6e:bb:20:de:c5:48:6d:00:8d:6d:c7:ac:58:
         8d:ce:47:e7:07:36:16:cc:48:44:9d:7a:52:34:07:93:18:80:
         f2:4b:d3:03:03:04:fb:d9:c2:af:b6:73:1a:85:88:1b:52:ae:
         6d:bd:e7:e6:8c:42:9b:31:bc:ba:8e:63:93:2f:01:33:f6:e4:
         1c:43:8d:1d:88:cb:a9:c1:14:e7:c4:72:b2:89:06:e7:ba:2b:
         f1:fe:d9:51:cf:0c:1a:0f:01:6a:51:f5:c4:19:a3:48:ae:7a:
         cc:c1:98:5d:c3:1e:1c:e8:6c:df:46:03:a0:b9:3a:22:c2:10:
         ba:9e:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 21:08:46 2024 by rpki-client on console-fra.rpki-client.org