Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32382e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e32382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dTdxpdyfkmROF/yKZ8XSKFPT0/+1SIrXGNrclyTC6y0=
Subject key identifier:   B1:AC:5F:9F:1B:B3:A3:58:22:4F:57:A7:EB:4F:21:3E:2B:32:F6:61
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       391CED5020CB1C0C39D4B3062B04EA3DF2975EB0
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32382e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     834
IP address blocks:        216.246.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1c:ed:50:20:cb:1c:0c:39:d4:b3:06:2b:04:ea:3d:f2:97:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=B1AC5F9F1BB3A358224F57A7EB4F213E2B32F661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:ce:5a:a2:ca:b8:f8:1e:45:ce:59:b1:d8:
                    90:27:bb:d9:40:44:d5:80:b5:e5:c7:c2:99:63:32:
                    f1:03:49:11:3a:74:be:8c:4c:4f:98:a7:42:ca:1d:
                    43:8d:2f:f4:59:d3:d2:d8:c2:d0:e4:ed:f6:72:dd:
                    d7:3c:48:82:38:4b:f9:f8:63:94:47:17:c4:2c:be:
                    c2:4e:3a:e0:ea:84:2c:86:77:35:f1:62:0e:21:d0:
                    b5:f7:e3:92:ff:a2:5d:9f:c4:e2:8d:75:92:8a:e7:
                    6a:de:91:cd:61:22:4e:d3:45:ed:32:29:82:f3:2b:
                    b2:e6:47:72:80:5f:f9:ac:29:10:44:32:5b:e5:2b:
                    7d:63:ae:f2:dc:9b:1c:49:b9:55:99:8e:38:f9:3b:
                    1d:89:e8:ee:54:63:7e:59:5c:76:a2:0d:cb:ab:87:
                    f7:bf:e6:27:c6:9c:c8:4e:a5:e4:34:6b:39:e5:4f:
                    fb:c5:9b:80:3b:12:1d:c1:eb:e3:a5:a1:d5:a0:c5:
                    fe:c5:e4:53:2b:ca:71:90:24:78:dc:07:59:f4:38:
                    90:23:3a:6a:fb:e0:b6:06:76:71:8e:d0:90:6d:f5:
                    2e:e8:6c:3e:6e:eb:29:47:35:54:40:28:e3:15:c5:
                    f6:08:44:8b:04:98:a4:1f:38:5e:79:02:54:6d:20:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:5F:9F:1B:B3:A3:58:22:4F:57:A7:EB:4F:21:3E:2B:32:F6:61
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:79:48:4a:8d:9c:fc:23:3e:8d:7e:22:a8:53:09:f6:f2:ee:
         64:74:f6:89:01:c4:4a:d6:b5:df:5e:d1:67:8a:33:f2:15:b4:
         14:85:e2:61:da:47:77:5e:d5:2e:1c:9e:25:14:2c:14:11:20:
         4a:92:93:52:fa:76:d3:fc:cf:f7:b7:80:b2:ca:ea:eb:d1:dd:
         ea:09:69:68:20:8f:ed:78:41:2f:3f:46:09:bc:11:0c:78:dd:
         41:97:60:7b:e0:e6:0b:b8:b0:7b:59:45:63:f5:ab:e4:13:65:
         f3:ed:24:c0:86:81:af:51:f5:a6:bb:f7:bd:32:83:0f:55:0b:
         32:4f:0b:22:cb:0a:db:e4:f6:fa:8f:df:ba:9d:fa:2b:e4:cf:
         e3:33:0c:52:54:58:fc:56:24:81:39:74:7a:fa:f7:0b:1c:26:
         c9:36:a5:2a:08:2e:78:c3:8f:de:d8:ef:2c:f6:cf:9d:b5:af:
         6a:7c:0a:af:ad:ba:52:22:f0:71:09:ec:b8:1c:33:17:52:a1:
         bc:7c:1e:08:6a:6c:3b:73:95:31:6d:70:7a:6a:ae:ff:39:9e:
         bc:15:73:df:42:10:b9:14:89:52:8a:ed:ad:23:9e:22:6e:32:
         f8:bb:f3:94:22:8e:5a:76:81:c6:80:12:6e:70:6a:71:43:52:
         45:8d:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----