Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e34332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          QuUQEgEl3fe02SJVL6tbXpmy9lZ2F2NxCQDXhLnAvxc=
Subject key identifier:   47:DA:AB:70:9D:A8:7A:0C:9F:25:8C:21:05:4F:84:63:04:3F:89:C1
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3A9458FF4BDBE3F900FA11E1827FAB2FD2DA331C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     212238
IP address blocks:        216.246.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:94:58:ff:4b:db:e3:f9:00:fa:11:e1:82:7f:ab:2f:d2:da:33:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=47DAAB709DA87A0C9F258C21054F8463043F89C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:3d:7f:45:ab:ba:fe:24:49:f2:68:b8:10:
                    4e:1e:9a:be:28:c9:76:58:86:06:ac:9c:75:39:2c:
                    d7:83:ab:e2:2b:2f:1a:4a:26:e4:bc:25:22:31:d9:
                    a7:aa:9f:a0:bc:aa:44:48:73:2e:be:44:10:3b:76:
                    a8:bf:72:5e:03:d6:20:56:22:fe:d6:38:19:01:05:
                    43:9c:03:45:64:10:f2:a5:1d:e0:76:87:48:73:61:
                    55:ad:5e:5f:ee:ec:be:53:c4:de:c0:e3:5c:5b:da:
                    55:77:c2:eb:79:6e:d2:2a:7e:79:54:b6:10:45:57:
                    27:b7:62:17:38:5f:48:f4:1a:ea:bd:01:b4:da:97:
                    3f:3a:49:67:b7:88:f2:13:3d:3f:d9:33:31:57:62:
                    54:14:a2:ef:d2:31:c0:24:cc:9a:b6:9a:a9:c3:9b:
                    23:28:85:cb:89:de:54:09:9d:67:b4:ff:9c:61:c3:
                    fd:8f:49:92:cd:ff:af:35:ea:73:9a:c7:7d:2d:71:
                    a3:83:ab:87:fb:f3:de:ff:da:35:b7:fc:df:1f:fb:
                    fa:bb:82:7d:59:7c:cc:a7:f8:6a:83:82:53:c5:1b:
                    f3:af:11:3b:9f:7a:f7:90:19:ad:cc:ff:be:81:36:
                    70:2d:63:0a:7a:9f:3a:04:04:7a:67:ff:32:df:fa:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:AB:70:9D:A8:7A:0C:9F:25:8C:21:05:4F:84:63:04:3F:89:C1
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:f3:bf:6f:aa:ae:1b:28:d3:e6:ca:7a:9b:8e:f8:42:f5:
         ee:9d:08:51:be:f2:b9:d3:4a:b3:3a:96:88:b4:71:6b:55:db:
         99:83:7b:ff:4d:cd:9a:14:30:12:1f:9f:b7:96:52:b4:2c:df:
         5d:ab:35:0e:a0:7f:27:4d:ba:9c:a1:b0:50:51:1e:61:11:fe:
         45:ff:1c:0c:06:46:ba:4b:7f:7f:8d:50:4e:32:41:27:16:26:
         26:53:5e:74:82:48:a4:b9:4e:e3:09:5f:86:56:45:23:bf:8f:
         39:3f:7a:d7:a4:4c:d7:4f:5f:16:b8:b6:96:08:49:79:55:09:
         e2:ef:31:a2:a8:50:9a:49:d4:d9:1e:b2:97:76:80:42:c9:d1:
         f3:1e:ed:79:5b:33:bf:4f:4a:99:5d:01:46:1f:d3:3f:24:7f:
         c5:65:c1:15:b8:be:aa:0e:b6:c2:3f:da:00:2e:e1:ca:a2:ce:
         b6:c6:98:75:d4:4e:b7:d2:1f:37:46:7f:24:d7:06:90:26:34:
         3b:e6:b8:7f:86:a3:ac:bc:ab:fe:30:c0:16:d1:31:cd:95:ea:
         d9:d6:7a:5a:48:11:ce:aa:43:cb:de:e4:f3:5c:de:ec:24:52:
         f5:08:2c:e8:27:d4:24:a8:62:33:3a:ec:b8:08:42:59:39:ff:
         69:96:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----