Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32392e302f32342d3234203d3e20323039383534.roa
File:                     3231362e3234362e32392e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier:          YBw0fydifLZZX68nY92Bg1OwKPcpyouuLKJ0DvlvRUo=
Subject key identifier:   44:25:CB:4E:7B:C7:E5:0D:55:20:C7:B6:6E:70:A6:1A:43:19:12:35
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3250E4B090C97AD9D38C8880A57B41C3853F4BE6
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32392e302f32342d3234203d3e20323039383534.roa
Signing time:             Fri 15 Nov 2024 18:39:33 +0000
ROA not before:           Fri 15 Nov 2024 18:34:33 +0000
ROA not after:            Fri 14 Nov 2025 18:39:33 +0000
asID:                     209854
IP address blocks:        216.246.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:50:e4:b0:90:c9:7a:d9:d3:8c:88:80:a5:7b:41:c3:85:3f:4b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:33 2024 GMT
            Not After : Nov 14 18:39:33 2025 GMT
        Subject: CN=4425CB4E7BC7E50D5520C7B66E70A61A43191235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:57:04:d6:00:bf:56:df:4e:e0:14:03:a7:
                    87:a1:12:ff:5b:fe:99:f4:e5:15:71:c5:64:47:26:
                    75:4a:cf:b9:f3:ad:ed:84:80:df:a7:7c:56:04:ca:
                    5b:9f:51:71:9b:b8:0d:0f:0d:2d:f8:b2:ee:72:d0:
                    00:92:dc:71:ff:b3:0d:9f:43:3b:e5:3e:6b:b2:ea:
                    1a:04:5b:b7:3d:0f:a6:82:7e:a9:45:92:e2:77:57:
                    17:7d:2c:21:37:1e:da:e9:23:6c:ad:18:df:1d:32:
                    24:23:fd:ac:ca:3c:92:ea:6a:89:47:ae:ce:36:e2:
                    ff:2b:43:7f:71:a8:76:89:6a:0d:ac:2d:32:cf:9b:
                    8a:9c:77:3a:4d:70:06:98:bf:18:07:a9:5a:36:e3:
                    aa:28:1c:fa:a6:36:56:c7:f7:10:54:05:6d:c0:a8:
                    11:32:d8:d7:00:46:ac:5e:df:e6:f2:2d:f8:1a:4f:
                    85:85:b6:7a:7d:a9:a7:2f:69:7a:d6:6d:90:e5:99:
                    87:3f:c3:71:e9:af:7e:69:f0:9e:e1:ed:be:f9:4a:
                    45:ab:39:98:bc:e4:2f:0f:c1:79:20:79:55:56:f7:
                    d6:de:0e:79:72:44:72:12:ad:7e:19:a0:d9:40:c1:
                    47:00:31:e4:f0:11:1c:88:f3:ee:b2:fa:1a:c6:74:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:25:CB:4E:7B:C7:E5:0D:55:20:C7:B6:6E:70:A6:1A:43:19:12:35
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32392e302f32342d3234203d3e20323039383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:48:5e:15:e8:bd:d9:84:7d:3d:fe:1a:63:4c:37:10:73:
         a4:e5:15:5f:05:ca:aa:a9:da:b0:f0:dc:c7:24:87:10:9e:3e:
         64:a3:4e:b8:4a:b3:1f:d5:1c:35:f8:48:39:2b:97:68:f5:75:
         55:1f:cc:5b:87:fc:15:f4:ff:5e:24:d4:27:43:76:26:1c:c7:
         80:f2:88:5e:66:a3:be:27:64:83:87:3b:21:ba:fe:8d:86:6b:
         83:df:55:21:b3:d5:76:87:57:29:65:55:08:6c:73:f1:b3:d7:
         55:d3:a9:50:c2:62:92:d0:f5:cc:67:49:e6:43:b2:ab:6f:9d:
         f8:c8:1d:ad:d5:42:8d:2b:68:aa:64:e3:18:1d:15:e0:dc:87:
         8c:cd:86:b0:3e:b8:a6:af:da:8a:14:25:21:de:b8:ed:37:25:
         8f:36:ea:3a:18:db:1d:4c:34:5e:e0:99:cc:76:9f:08:a6:d1:
         09:db:03:e4:89:fe:91:b5:a6:27:ee:bb:70:52:63:18:c2:ee:
         a7:3d:1b:6e:1a:f5:95:5b:26:a5:00:cc:7b:fc:a6:23:6f:c5:
         00:45:47:66:2c:51:b6:60:fe:1f:8d:a4:77:13:7f:81:f7:8f:
         fe:ff:93:e2:a4:80:af:b5:ab:33:fb:af:82:6a:bd:53:3f:bb:
         d6:88:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----