Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34382e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e34382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          liKJTvfzInWDkeplg5SmFkTu/hzVTboIEGX1jshrlz0=
Subject key identifier:   96:A0:E0:AD:CE:FF:55:1B:C4:89:53:0C:67:9F:36:0B:B9:87:1A:FB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5C925B7ECE5881337316E532EDE7F945677D16CC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34382e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:92:5b:7e:ce:58:81:33:73:16:e5:32:ed:e7:f9:45:67:7d:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=96A0E0ADCEFF551BC489530C679F360BB9871AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:f6:50:45:9a:78:95:68:1a:83:cb:ca:67:
                    15:83:76:2d:60:10:b0:e7:52:d7:ab:e4:2f:c1:96:
                    d4:a1:d2:ac:b2:77:53:1d:a2:19:e7:e1:87:b9:56:
                    a6:b0:b5:cb:24:ea:56:fa:a8:c5:9d:3b:9b:8a:d5:
                    87:91:ca:46:b9:1e:98:d0:e6:01:e7:3d:74:89:53:
                    bc:aa:ca:a0:6a:6d:95:6b:e6:6d:50:cc:8d:85:61:
                    ce:1d:ef:0f:90:cd:0a:6c:ed:fd:c1:ae:f8:44:78:
                    28:44:68:64:cc:6e:96:b9:de:16:bf:03:ac:61:1e:
                    1d:5b:ca:a8:90:bd:ca:5d:4c:37:6d:4c:74:ff:5e:
                    db:36:89:22:09:d3:3b:6e:71:b6:dc:04:c8:d5:90:
                    d2:27:d7:6e:57:4d:71:db:25:5f:a4:54:1c:7c:c5:
                    27:9b:f0:d8:ed:05:b1:76:3a:36:31:3a:71:96:8a:
                    9e:df:db:7f:3d:fe:87:92:06:77:c3:b4:9c:bb:82:
                    cd:3d:0b:14:3c:e3:8b:95:ff:1d:71:5a:28:03:0e:
                    df:c9:97:79:05:63:7f:e4:2f:57:d5:97:c7:41:9a:
                    a4:81:83:ab:94:47:5d:f1:4a:fd:1b:16:2b:f1:e6:
                    52:64:27:3d:7f:b2:e6:7e:f4:92:40:11:9b:e2:20:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A0:E0:AD:CE:FF:55:1B:C4:89:53:0C:67:9F:36:0B:B9:87:1A:FB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34382e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:89:8c:32:7c:7c:9c:d6:99:9e:d5:df:66:81:e5:1a:f7:6b:
         ea:2f:10:a1:cc:d2:84:22:32:85:8c:57:1f:be:d0:a0:7d:dd:
         01:1a:2d:0a:e8:ab:16:bb:2f:b6:88:19:99:01:e6:83:8d:b1:
         24:59:f8:2b:72:07:9a:f5:c6:55:7d:fe:23:10:b9:3c:1d:d1:
         14:30:92:6e:2b:f6:c5:61:0b:61:e7:a7:ff:9f:18:26:da:c3:
         93:cb:5a:f1:f9:7a:73:e2:b7:c8:f0:2e:98:7c:e2:6c:6a:c3:
         0a:f4:82:b4:4a:cf:ca:40:49:ce:21:5e:07:3b:b5:64:06:6b:
         21:99:40:3e:5b:9c:b3:69:21:33:e4:f6:2a:2a:01:86:b0:12:
         66:6a:80:ca:b6:4d:5f:78:69:9a:1c:b6:3a:74:da:3c:08:13:
         5f:8b:90:c9:98:71:32:47:83:15:f1:1e:d6:a0:19:9f:6f:66:
         d2:42:cf:ce:5f:0a:42:94:15:f4:7e:3f:aa:f6:9e:41:2b:a6:
         ec:e3:2b:a2:1d:de:38:b8:13:37:04:12:20:93:34:54:d6:8a:
         65:38:e7:8e:c4:de:0b:e4:d0:e9:2e:55:d5:e0:d5:af:c6:84:
         13:55:b2:07:f3:a9:85:38:96:9e:3e:9f:3f:dd:47:f2:af:44:
         ee:3c:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----