Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33302e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e33302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          C6iT6x8R/JNXMUGTNUC6YkXTaaXHMY2PR5Qct6MK4x8=
Subject key identifier:   11:F7:08:90:C8:AC:A3:CB:07:20:74:E3:DA:EA:19:65:C9:43:E2:A7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       62085027F04E90315AA46B46BA1F62D0E0E998D4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     834
IP address blocks:        216.246.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:08:50:27:f0:4e:90:31:5a:a4:6b:46:ba:1f:62:d0:e0:e9:98:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=11F70890C8ACA3CB072074E3DAEA1965C943E2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:20:94:d3:1d:7c:c4:86:3d:88:b4:07:76:ec:
                    4c:c6:d6:cc:07:c3:21:2c:4b:38:93:04:c3:88:9d:
                    fa:75:59:4b:27:fc:af:ae:61:a6:e6:52:d2:9c:20:
                    48:53:3a:55:de:29:4c:2e:9e:6f:f5:67:f8:d8:c9:
                    45:b9:f1:93:02:89:00:38:5c:97:ed:6b:a3:22:c8:
                    61:48:10:ed:3f:3b:3f:ad:95:47:26:ac:21:28:8e:
                    4e:21:95:c1:86:ec:84:71:7f:20:73:8b:23:c8:8b:
                    45:ab:b0:d3:67:6e:0d:e0:e9:77:59:fd:1d:d3:09:
                    0f:69:1d:f7:3b:c9:e3:6d:d4:79:06:cf:3f:16:38:
                    0e:e6:1b:c0:ba:9b:3a:3b:3a:65:84:08:42:d4:ce:
                    08:00:d7:a3:d6:e1:59:bd:3f:76:6e:2e:8d:50:af:
                    46:36:e6:57:73:56:78:49:71:d2:41:99:32:f4:ff:
                    a5:b7:bf:df:31:aa:3c:77:d0:e1:f6:24:ff:05:08:
                    cf:4d:39:a8:95:10:a0:65:b0:a2:29:87:c8:b5:f5:
                    eb:ec:ed:33:b3:c7:a6:1d:4c:da:9b:38:c0:4d:dc:
                    e6:92:54:37:17:5d:24:47:e3:f1:93:16:89:5e:b3:
                    32:fb:ab:eb:98:7a:24:e6:a7:ca:52:a8:54:96:3f:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:08:90:C8:AC:A3:CB:07:20:74:E3:DA:EA:19:65:C9:43:E2:A7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:de:10:2a:d4:bb:ef:1b:59:a9:1e:42:32:04:57:c0:f6:10:
         96:dd:2e:60:d1:b0:ae:f6:e6:67:cd:ed:3b:dd:ac:9a:75:4a:
         26:84:64:73:d8:30:b0:5c:c1:06:90:cf:54:f9:13:b3:e4:0d:
         b3:b5:9b:6d:78:ea:b3:9d:6a:8f:8b:64:3a:d9:46:82:df:65:
         9e:41:30:5a:3f:a6:48:5d:46:8f:e1:16:1d:60:08:8c:2e:b4:
         e5:90:07:7a:05:df:e6:37:fd:b5:c5:84:5e:08:23:fe:5c:8e:
         a9:3c:d6:76:72:44:84:77:67:54:ff:09:6a:d6:66:ae:aa:b4:
         e6:41:ba:9f:10:f8:ac:70:7a:a0:d8:57:90:52:ae:47:ad:81:
         89:fe:70:8a:18:e9:9c:59:82:49:43:d1:53:39:47:9d:db:54:
         01:8d:2d:4f:e4:6e:74:0a:da:f0:a7:06:cf:74:8b:e1:e7:f4:
         a8:ef:9b:46:6b:8a:22:86:75:f6:67:97:d3:39:40:ea:d2:de:
         03:e1:84:a7:d2:d1:21:50:b3:be:84:aa:17:05:43:db:3b:51:
         5f:ac:da:df:5a:18:15:a9:ff:0d:e9:57:00:c7:64:76:e5:0b:
         86:23:e3:3a:24:84:12:c6:58:a8:ea:3c:d4:0c:8a:ba:f4:e9:
         37:e7:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----