Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e33352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          1trl4Ujr8ybNo40MrOp0GGA+Qj/YcfhWZy3z9fWYFxU=
Subject key identifier:   DC:E0:8F:26:3E:19:2D:F1:E1:86:80:30:6A:FD:2B:B4:11:C8:45:E4
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3B310472072FC9BC9A04E4EB397890AF488BAFEB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:04:72:07:2f:c9:bc:9a:04:e4:eb:39:78:90:af:48:8b:af:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=DCE08F263E192DF1E18680306AFD2BB411C845E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:ec:b7:93:fe:59:ce:69:93:f6:a7:6f:9a:
                    3e:16:07:58:3e:b9:fd:29:c6:74:19:32:c7:61:9c:
                    fa:ac:07:21:99:6a:28:10:e0:17:5f:e7:02:3e:da:
                    db:0a:b3:b8:c7:69:54:24:0e:ca:d0:fe:c0:e5:6e:
                    71:95:9b:a7:03:b1:84:98:f7:f2:20:fd:94:33:2e:
                    d5:ed:da:aa:53:77:5f:c9:3b:a6:df:b9:08:29:05:
                    c3:cb:6d:11:64:58:ff:cd:4a:68:fb:06:84:cd:d2:
                    11:79:27:05:66:13:6d:d7:2d:66:cb:4b:18:81:fc:
                    dc:bc:a7:da:09:2d:26:b7:d4:8e:cf:19:49:05:1b:
                    40:71:ef:14:6c:dd:71:96:5f:24:54:3c:72:80:ce:
                    df:f9:13:06:fb:41:ef:01:23:ff:13:4b:a4:69:8c:
                    37:94:35:5a:1a:71:e8:1f:f2:0e:a0:a4:d9:0d:5a:
                    31:c2:dd:4c:bc:96:df:9a:38:1c:02:44:38:d0:5d:
                    a5:6f:0f:8a:85:14:d2:9e:8b:86:cb:c4:1b:7f:5d:
                    f4:52:24:ee:09:1c:0b:ea:65:1b:e2:ee:db:64:a8:
                    38:39:49:b5:bf:1d:0f:75:53:c9:26:79:c9:10:fd:
                    f1:04:59:f7:a8:fb:a7:00:11:a7:22:a2:bd:d7:be:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:8F:26:3E:19:2D:F1:E1:86:80:30:6A:FD:2B:B4:11:C8:45:E4
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33352e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:67:d2:20:67:75:dc:a3:22:0b:21:91:d5:c2:f2:ae:a9:a8:
         2b:a2:fe:b5:aa:53:28:a3:6c:d7:c6:32:41:ab:08:f2:fb:44:
         5d:d2:45:c2:dd:0c:c5:b2:a0:74:bb:3b:59:8e:78:df:cb:e8:
         7d:cd:b9:c5:c2:79:ca:c1:d4:88:5d:34:d4:c4:4f:09:f8:a4:
         75:dc:75:dd:f7:5c:37:98:47:4f:07:cd:0b:74:4d:13:19:ba:
         70:82:72:cf:7e:97:59:4c:5e:93:c8:5d:dd:45:c0:95:64:5a:
         c4:9b:29:a1:2c:84:c1:67:2d:f9:95:d0:64:83:95:b0:77:40:
         00:a3:51:70:f8:21:7d:e7:30:fa:eb:cf:b0:fd:ce:92:7b:14:
         70:13:13:b6:be:ee:9b:58:9d:61:99:20:47:40:a1:af:e7:31:
         3b:05:a6:8b:f4:a2:49:4a:f1:20:66:a9:28:a5:46:e3:5c:4c:
         59:dd:d3:26:2e:17:1c:54:9f:0c:f7:75:0e:c0:d4:4c:cb:a1:
         3b:5f:3d:a2:98:a7:98:8d:42:d3:6d:f1:4a:99:03:65:d8:19:
         3b:f9:30:f5:ac:0f:55:b2:3e:33:bb:ef:42:43:be:76:31:70:
         b3:b8:0c:29:8e:cc:48:7d:99:98:3e:58:fa:6c:71:3d:3f:38:
         a3:95:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----