Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35332e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e35332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          2R7h+PJOBtmbi70QT77rw3iwfZHhMH8TT1s94ia4YKI=
Subject key identifier:   81:1F:63:94:C9:6A:F0:61:A7:B5:8B:CE:B3:EB:8B:B7:E0:8B:EF:A9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0C30487A5C286916A0C2AC86DD029C172C9571B4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:30:48:7a:5c:28:69:16:a0:c2:ac:86:dd:02:9c:17:2c:95:71:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=811F6394C96AF061A7B58BCEB3EB8BB7E08BEFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:5e:80:62:03:6f:cc:51:6f:25:8b:36:65:
                    1c:f6:1d:50:86:5b:23:f2:11:ea:18:da:aa:b1:25:
                    e3:b5:e0:f8:3f:09:9b:d5:9b:72:2f:20:d3:b3:3c:
                    11:ea:1e:6d:d3:8a:87:97:16:3b:bc:fa:e4:c2:fd:
                    6e:f4:ef:37:0e:69:43:10:88:36:6c:b0:ce:51:94:
                    d7:25:72:6e:93:e7:fa:db:99:2f:ea:10:59:5e:69:
                    58:14:90:91:6a:cd:f0:3f:c5:a4:b2:41:44:39:2c:
                    e1:c8:1e:69:9c:bf:ee:04:98:ab:2e:2d:f2:0a:aa:
                    7d:ef:fc:81:52:4e:32:d9:4e:1b:31:32:8d:b7:f7:
                    46:00:54:af:6f:9b:15:e0:2d:72:e9:35:55:cc:07:
                    b4:81:60:41:4c:9d:22:c7:fc:d3:d5:4c:d2:4a:fb:
                    40:6e:2b:4d:73:d6:64:38:eb:0c:2f:cc:75:84:c2:
                    86:ed:89:0c:20:7b:81:89:2b:13:1e:af:19:44:de:
                    d4:a1:f6:3e:19:59:7a:fc:1f:18:01:a2:d9:7e:64:
                    b4:97:6a:e1:8b:d0:81:6c:dc:dd:be:0d:e3:5b:be:
                    7a:c8:32:f0:55:39:fd:af:17:cd:b1:de:24:55:f7:
                    64:df:06:20:e3:4a:73:09:07:df:ac:4d:2c:f2:f4:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:63:94:C9:6A:F0:61:A7:B5:8B:CE:B3:EB:8B:B7:E0:8B:EF:A9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:fe:e2:2f:29:b8:12:a7:97:c5:19:91:6b:3e:50:4e:de:
         bd:82:3b:25:f0:28:96:36:52:37:b2:21:fb:90:13:af:35:9f:
         34:68:7c:91:f5:6e:57:1e:ee:47:ec:30:67:b4:20:e4:72:a4:
         b9:94:0b:75:5a:38:95:e7:0e:14:a3:56:60:b7:9f:97:4a:4f:
         f1:e4:34:19:2a:be:23:35:2f:a7:6b:41:09:cf:60:34:69:5c:
         27:e0:5c:f3:08:c6:ff:b4:19:56:e0:bd:c6:a3:40:ce:33:11:
         87:37:de:2e:fd:42:b4:c5:d4:d5:2d:4d:65:42:c3:a8:07:c3:
         88:c8:58:d1:ec:67:41:86:48:6f:20:a7:7e:55:32:34:c3:e6:
         10:ae:98:cc:3f:a5:3f:67:4a:6e:a2:29:39:b8:50:ce:71:ce:
         f7:dc:5d:18:63:c3:62:04:54:bc:47:80:3f:d8:20:fb:2d:29:
         6c:77:29:11:fc:ef:99:6e:63:3d:ca:cc:a5:1f:d9:25:b0:78:
         e4:cc:e7:8e:57:37:1e:24:e1:c9:70:c0:09:d0:2d:f2:1f:9e:
         0e:06:81:ac:df:e8:7c:2b:c4:42:e3:a7:79:ae:cb:e8:de:7a:
         64:f8:a4:79:25:a9:62:04:53:e9:48:3c:8c:53:59:db:f7:22:
         46:d4:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----