Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32342e302f32342d3234203d3e20333936333536.roa
File:                     3231362e3234362e32342e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          jApSw2nzUtGaEWpaQL43TgMGNwRF/K1TtQtshgXUMM4=
Subject key identifier:   44:83:2D:C8:B9:93:E3:27:B4:28:53:A5:AE:04:E1:0C:90:B7:25:D6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6FACA95B36A381638CD8ED9629933557070C4087
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32342e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     396356
IP address blocks:        216.246.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:a9:5b:36:a3:81:63:8c:d8:ed:96:29:93:35:57:07:0c:40:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=44832DC8B993E327B42853A5AE04E10C90B725D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:e2:c1:bc:db:71:85:f1:c6:60:ef:cb:f4:
                    79:55:6e:fd:13:fa:6c:2a:56:37:26:90:8a:84:06:
                    e9:c8:a7:af:67:54:b8:57:e1:63:9a:89:ba:99:de:
                    ba:31:11:9c:e4:de:d6:a7:c2:6f:50:a6:3b:87:f8:
                    b9:cb:2d:04:5a:4d:12:4c:25:84:73:02:04:c8:df:
                    70:c6:56:d0:09:f1:3b:c5:2c:39:4e:1b:93:94:02:
                    90:17:60:c7:72:9b:e6:00:72:fe:4b:4d:ec:88:4b:
                    55:88:de:b5:2f:51:9e:e5:2e:83:de:c8:5f:ea:4c:
                    09:be:4c:4e:a0:83:77:37:1d:83:09:09:42:fc:85:
                    42:1c:da:9b:32:52:81:bf:3f:f3:58:a1:95:90:97:
                    6a:a3:43:0f:e8:d9:8a:df:ca:6c:fa:d7:de:5c:98:
                    61:a0:18:82:8a:e3:d6:f2:ae:2b:c0:fc:b7:7c:ec:
                    30:d5:cf:6a:f8:45:fe:9b:83:df:fc:88:fb:e6:39:
                    e6:62:39:d3:a4:45:f5:c6:db:0c:92:90:78:79:e8:
                    4e:6a:6c:9d:94:29:a2:79:19:e8:d2:36:4b:48:96:
                    4f:1a:24:c1:b1:5c:e2:a8:bb:a8:09:27:91:b5:65:
                    32:bb:df:37:d5:2d:3a:7d:39:3e:83:73:a0:f3:03:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:83:2D:C8:B9:93:E3:27:B4:28:53:A5:AE:04:E1:0C:90:B7:25:D6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32342e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:21:9a:5c:96:34:80:bc:b1:fb:3e:56:2c:69:37:b1:61:0a:
         09:b0:42:0c:09:db:b2:66:1c:ad:60:84:08:41:5a:e7:5e:7e:
         01:60:4b:33:d3:04:0b:03:49:17:91:a3:8f:d0:f0:74:26:18:
         5e:3a:6c:00:4c:c6:aa:a2:42:36:b8:f5:2d:65:3e:b5:79:1b:
         6f:92:7d:e8:68:2f:38:83:2e:6f:4a:56:76:29:b4:a7:ea:1c:
         62:8b:06:b5:0d:c3:8b:74:d1:16:ee:b2:42:9f:6d:2f:67:ca:
         21:1a:03:57:3c:78:dc:ec:f7:55:9d:69:45:65:88:e0:c2:b7:
         e4:c2:40:31:af:7f:4a:a7:8b:91:d5:ac:bf:3d:c4:ec:48:f5:
         b9:a4:6e:32:f3:e7:3c:29:6b:e4:38:51:c5:7c:3b:a2:5f:1f:
         58:61:9f:2e:1c:e8:b1:52:6d:98:b5:d4:10:f3:4a:f3:cd:d1:
         44:44:f9:6d:96:a0:6c:7a:d4:5b:b2:dc:a2:51:01:69:a6:a7:
         ee:03:ef:0d:5f:65:9a:96:c6:52:ff:bc:7c:bf:6d:8a:82:0f:
         06:f3:44:08:ac:ce:c5:d3:97:59:8f:86:30:df:61:ab:f7:43:
         98:fb:50:62:c6:59:d0:24:14:d4:d3:0e:22:df:4c:ca:55:ab:
         5e:cc:3f:09
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUb6ypWzajgWOM2O2WKZM1VwcMQIcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMxWhcNMjUxMTE0MTgzOTMx
WjAzMTEwLwYDVQQDEyg0NDgzMkRDOEI5OTNFMzI3QjQyODUzQTVBRTA0RTEwQzkw
QjcyNUQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5LiwbzbcYXx
xmDvy/R5VW79E/psKlY3JpCKhAbpyKevZ1S4V+Fjmom6md66MRGc5N7Wp8JvUKY7
h/i5yy0EWk0STCWEcwIEyN9wxlbQCfE7xSw5ThuTlAKQF2DHcpvmAHL+S03siEtV
iN61L1Ge5S6D3shf6kwJvkxOoIN3Nx2DCQlC/IVCHNqbMlKBvz/zWKGVkJdqo0MP
6NmK38ps+tfeXJhhoBiCiuPW8q4rwPy3fOww1c9q+EX+m4Pf/Ij75jnmYjnTpEX1
xtsMkpB4eehOamydlCmieRno0jZLSJZPGiTBsVziqLuoCSeRtWUyu9831S06fTk+
g3Og8wO6fQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFESDLci5k+MntChTpa4E4QyQ
tyXWMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMjM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM2MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PYYMA0GCSqGSIb3DQEB
CwUAA4IBAQCYIZpcljSAvLH7PlYsaTexYQoJsEIMCduyZhytYIQIQVrnXn4BYEsz
0wQLA0kXkaOP0PB0JhheOmwATMaqokI2uPUtZT61eRtvkn3oaC84gy5vSlZ2KbSn
6hxiiwa1DcOLdNEW7rJCn20vZ8ohGgNXPHjc7PdVnWlFZYjgwrfkwkAxr39Kp4uR
1ay/PcTsSPW5pG4y8+c8KWvkOFHFfDuiXx9YYZ8uHOixUm2YtdQQ80rzzdFERPlt
lqBsetRbstyiUQFppqfuA+8NX2WalsZS/7x8v22Kgg8G80QIrM7F05dZj4Yw32Gr
90OY+1BixlnQJBTU0w4i30zKVatezD8J
-----END CERTIFICATE-----