Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203134363138.roa
File:                     3231362e3234362e332e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          nd7w0bbrqOJTkKBOH/D4e+ktq4FQVr3im/6A3PfEKHU=
Subject key identifier:   DF:ED:B2:5E:D0:CD:89:72:83:B7:9D:8B:75:50:EA:83:5D:99:32:03
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       59F5E076591A885387763253388E283B18033D80
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203134363138.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     14618
IP address blocks:        216.246.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f5:e0:76:59:1a:88:53:87:76:32:53:38:8e:28:3b:18:03:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=DFEDB25ED0CD897283B79D8B7550EA835D993203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:66:c8:d9:54:61:48:52:11:4c:4a:ab:3d:
                    ec:99:e3:bf:7d:99:46:bb:0c:b2:92:a1:28:f6:53:
                    0a:5c:64:dc:5e:cd:cd:4c:f2:45:eb:8f:69:e4:66:
                    bc:c4:23:1f:78:8f:c9:0a:2f:f4:a0:47:c8:be:e6:
                    b8:46:50:39:fe:d3:1d:d7:4c:3e:d1:6b:4b:e6:33:
                    56:e3:4e:eb:a8:81:8e:ab:ff:a9:02:97:51:43:2e:
                    45:75:dc:63:85:05:87:cd:44:55:93:1b:7f:e3:c3:
                    9f:6b:0d:2f:ba:56:20:f1:9b:3e:88:a6:a3:e9:ea:
                    be:6a:37:83:10:3c:c1:ee:11:33:2e:65:e5:b3:7f:
                    86:66:73:5f:dc:03:ad:66:af:d4:d1:35:96:3d:47:
                    fd:00:ca:76:b3:30:61:dc:4d:54:31:48:e2:e1:b1:
                    30:24:0a:5e:df:f2:f9:55:a5:26:bf:6f:cc:6f:e2:
                    dd:59:80:52:e9:37:88:af:49:33:0e:d1:2e:d2:c7:
                    ec:5b:9e:b6:c3:96:5a:23:32:49:0c:1d:62:76:9d:
                    26:b2:ea:82:94:1c:6e:97:8c:33:5e:81:7b:0d:61:
                    91:a7:1c:e1:fd:a6:f1:ca:33:e5:53:ae:1a:9f:be:
                    e9:82:15:8a:b8:8e:7d:81:72:42:22:1e:40:0d:88:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:B2:5E:D0:CD:89:72:83:B7:9D:8B:75:50:EA:83:5D:99:32:03
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:48:b4:07:f2:d5:95:de:58:65:c0:ca:87:de:cf:75:76:
         b8:fd:16:2a:81:ef:4b:26:26:b1:81:be:44:9c:3c:61:46:77:
         20:13:3d:91:4a:41:b9:9e:50:eb:e0:2c:d6:43:a1:d4:a5:84:
         ae:9f:19:97:e1:5d:24:91:c2:81:e9:7c:0c:a1:04:1f:3f:61:
         28:89:33:07:a3:72:69:61:21:22:2c:d6:9c:34:e3:56:a5:0b:
         37:ee:d5:89:04:cb:97:0c:01:2a:7b:d4:81:f4:06:be:3c:62:
         10:45:1f:05:83:d0:77:06:0c:10:ca:a0:e8:af:4f:b9:ee:56:
         29:91:1d:bf:50:80:f1:8f:20:74:23:8b:8b:84:48:a0:63:f5:
         55:b3:c4:fd:1a:43:d3:35:ad:73:10:99:af:90:ed:67:f1:e3:
         e6:83:57:32:f4:b2:4f:ec:a4:42:d8:d6:e1:a3:b7:fb:56:a6:
         77:7a:95:97:c6:9a:02:08:53:b5:db:af:a0:c1:6b:87:2e:3b:
         1e:0c:de:50:2b:5e:a3:90:36:04:2d:ce:55:1b:9b:39:9b:71:
         a6:e1:33:b6:81:df:d5:07:4f:c4:43:ca:2c:35:b7:32:22:52:
         f1:98:63:a5:54:41:48:9d:0d:76:4a:1e:83:b0:66:20:7f:07:
         8b:e2:a1:b6
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUWfXgdlkaiFOHdjJTOI4oOxgDPYAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMxWhcNMjUxMTE0MTgzOTMx
WjAzMTEwLwYDVQQDEyhERkVEQjI1RUQwQ0Q4OTcyODNCNzlEOEI3NTUwRUE4MzVE
OTkzMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGdmyNlUYUhS
EUxKqz3smeO/fZlGuwyykqEo9lMKXGTcXs3NTPJF649p5Ga8xCMfeI/JCi/0oEfI
vua4RlA5/tMd10w+0WtL5jNW407rqIGOq/+pApdRQy5FddxjhQWHzURVkxt/48Of
aw0vulYg8Zs+iKaj6eq+ajeDEDzB7hEzLmXls3+GZnNf3AOtZq/U0TWWPUf9AMp2
szBh3E1UMUji4bEwJApe3/L5VaUmv2/Mb+LdWYBS6TeIr0kzDtEu0sfsW562w5Za
IzJJDB1idp0msuqClBxul4wzXoF7DWGRpxzh/abxyjPlU64an77pghWKuI59gXJC
Ih5ADYhssQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFN/tsl7QzYlyg7edi3VQ6oNd
mTIDMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY9gMwDQYJKoZIhvcNAQELBQAD
ggEBACxaSLQH8tWV3lhlwMqH3s91drj9FiqB70smJrGBvkScPGFGdyATPZFKQbme
UOvgLNZDodSlhK6fGZfhXSSRwoHpfAyhBB8/YSiJMwejcmlhISIs1pw041alCzfu
1YkEy5cMASp71IH0Br48YhBFHwWD0HcGDBDKoOivT7nuVimRHb9QgPGPIHQji4uE
SKBj9VWzxP0aQ9M1rXMQma+Q7Wfx4+aDVzL0sk/spELY1uGjt/tWpnd6lZfGmgII
U7Xbr6DBa4cuOx4M3lArXqOQNgQtzlUbmzmbcabhM7aB39UHT8RDyiw1tzIiUvGY
Y6VUQUidDXZKHoOwZiB/B4viobY=
-----END CERTIFICATE-----