Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203136353039.roa
File:                     3231362e3234362e332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          1QAFsCOWpAtX1q1DtGoU47bmlYTGLE6iXGESo73RO2I=
Subject key identifier:   F1:54:7B:EB:4A:CC:DA:C7:52:BD:E2:CC:B6:94:C7:33:0B:EE:82:57
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6E3B7AF444A3729303CD2E4BC38AA362285375E3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     16509
IP address blocks:        216.246.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:7a:f4:44:a3:72:93:03:cd:2e:4b:c3:8a:a3:62:28:53:75:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=F1547BEB4ACCDAC752BDE2CCB694C7330BEE8257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:95:be:e9:44:53:30:9e:1e:85:5d:63:18:
                    35:89:32:e3:b0:40:d8:9e:85:3c:3b:1c:94:d8:52:
                    69:35:e5:8a:66:06:a3:ae:8c:62:9b:0a:e7:92:31:
                    33:33:cf:a9:47:c4:63:d6:91:51:b1:27:02:76:1f:
                    16:0c:5f:e0:0e:57:a5:4c:ed:4a:53:f3:8e:3d:17:
                    3a:1a:8c:69:34:f6:1b:0a:dc:bc:e3:72:11:b8:24:
                    a9:2e:28:9c:4d:f3:de:78:68:97:46:dc:6e:8e:a5:
                    ee:b7:9c:ed:65:c2:3f:23:53:01:8c:a1:42:7c:15:
                    62:90:4d:80:0e:7c:50:be:c0:56:75:38:80:c0:f2:
                    8d:2a:43:89:44:f9:e3:db:06:17:64:06:74:e6:37:
                    29:55:b9:66:3c:11:cf:83:25:71:80:96:41:2c:4b:
                    a5:2b:0c:cc:81:6d:d7:2e:a2:6b:b4:95:63:b4:4a:
                    cd:ec:a6:98:69:62:ff:6c:2a:54:51:20:9b:5b:cb:
                    73:06:a0:8b:62:1b:22:98:51:46:59:1f:d7:cc:b4:
                    f3:da:54:33:1c:ca:f4:3d:74:95:3b:93:a1:c8:c5:
                    72:b2:16:85:83:76:cf:42:25:42:44:50:75:0b:e7:
                    18:27:15:65:a8:88:6c:68:09:e7:b2:4c:7c:3a:13:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:7B:EB:4A:CC:DA:C7:52:BD:E2:CC:B6:94:C7:33:0B:EE:82:57
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e332e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:6f:f4:88:dd:2a:06:77:f6:c6:61:76:f0:97:3f:73:7a:
         7f:f1:e0:e1:db:9c:95:80:ff:17:08:01:4f:19:83:e4:55:86:
         e0:46:28:e2:d7:19:6e:4e:9e:b1:27:8b:08:10:c9:53:23:de:
         a0:7b:cb:16:34:58:e6:17:be:d0:49:b6:78:bc:0c:45:43:cd:
         da:f2:96:69:69:85:d2:20:6b:9f:ff:8b:98:f4:e3:02:45:f2:
         61:10:ea:a4:7d:5a:bd:09:ad:77:76:7f:6f:8f:ae:45:08:d3:
         a8:32:7d:9f:a5:32:3d:fc:1a:08:c3:c9:17:ea:35:c8:2a:e7:
         69:4f:2a:5e:86:d8:f1:11:e8:17:a9:22:b1:95:11:29:8f:e9:
         3c:ef:d4:1c:e1:bb:4b:97:3a:fc:ee:a4:3a:77:da:d1:32:26:
         c5:bb:e6:d8:18:b0:d3:1c:ed:29:f9:2c:b6:73:50:f8:48:73:
         71:e4:38:f2:de:b3:5b:f4:bc:d5:2c:94:1c:61:f2:d8:d6:6f:
         0c:88:a3:65:c8:45:a5:b6:7a:99:80:da:ab:ed:93:49:9c:06:
         02:ab:22:29:bc:ea:4a:73:81:99:92:4f:87:0d:24:e2:34:fa:
         0c:29:6d:1b:fb:a5:af:c0:5b:49:47:a5:dd:0f:9b:f8:cd:a8:
         c0:79:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 22:18:37 2024 by rpki-client on console-ams.rpki-client.org