Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e20323131313932.roa
File:                     3231362e3234362e35382e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier:          cy42cP4OOD0ul7sn2QppoCs5tp6V/SKt9zHLWSExwak=
Subject key identifier:   C9:16:9B:DF:56:64:AF:9D:DA:A2:E1:7C:8F:1C:59:18:AA:C5:6E:6A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       16861F9459784D863127349A12987BA7348DB4E9
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e20323131313932.roa
Signing time:             Fri 15 Nov 2024 18:39:33 +0000
ROA not before:           Fri 15 Nov 2024 18:34:33 +0000
ROA not after:            Fri 14 Nov 2025 18:39:33 +0000
asID:                     211192
IP address blocks:        216.246.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:86:1f:94:59:78:4d:86:31:27:34:9a:12:98:7b:a7:34:8d:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:33 2024 GMT
            Not After : Nov 14 18:39:33 2025 GMT
        Subject: CN=C9169BDF5664AF9DDAA2E17C8F1C5918AAC56E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:43:f7:99:a4:60:a5:98:60:7e:ab:c1:d7:
                    15:f2:f3:78:c7:8c:4b:0d:13:35:66:96:dc:c3:55:
                    c0:d7:ed:75:06:73:6d:bd:6b:a5:3c:3b:8c:19:c7:
                    dd:5c:87:2b:0d:2d:0a:2e:06:0e:f4:96:de:7c:3f:
                    6f:fd:dc:14:90:27:08:0e:43:c5:43:e6:73:17:94:
                    dd:43:e9:12:c1:aa:9e:95:e6:b5:76:eb:7b:a3:a2:
                    1b:98:8f:0c:9f:c0:9d:2a:8b:5c:93:01:b3:3c:3f:
                    08:6d:ea:85:f1:4d:00:45:d1:de:8b:55:47:1a:70:
                    0d:a4:36:28:b4:89:5f:8b:5e:1b:72:c9:59:59:64:
                    80:a5:fa:47:a8:de:96:1a:7c:62:22:1a:90:8f:a6:
                    8d:c9:5e:8e:03:5c:7c:bd:61:c1:b3:0b:78:ae:6d:
                    a0:86:9e:81:f4:55:b4:16:84:df:c1:2b:73:92:6a:
                    70:08:1a:8f:07:d0:30:4a:84:4c:ef:c8:68:1b:66:
                    b0:86:af:64:49:75:c6:83:f9:b7:a6:18:ba:27:90:
                    1c:40:f2:9b:c1:de:73:cc:e9:24:9a:f6:4c:2e:96:
                    1a:1a:e0:3d:9d:ec:1f:2f:5f:93:2c:a8:50:75:29:
                    e9:75:67:28:15:a6:a2:5d:3d:2b:73:2e:36:e8:01:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:9B:DF:56:64:AF:9D:DA:A2:E1:7C:8F:1C:59:18:AA:C5:6E:6A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e20323131313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:31:00:b5:4a:2d:07:63:0d:09:2d:a6:e6:ff:a8:2d:59:0b:
         55:61:1e:8d:fd:89:76:62:c9:39:bf:89:bc:96:c8:83:de:61:
         2f:bf:f6:2d:2b:21:f5:52:d7:23:a8:8d:9a:54:68:14:de:46:
         b5:0c:99:d0:0d:eb:af:45:63:cf:a4:be:16:0c:96:24:6d:c1:
         a4:ae:74:75:b2:8d:df:00:6e:c9:6a:fb:df:d3:b1:4b:dc:4c:
         5a:75:56:37:56:ee:f3:45:b4:2a:db:b9:83:dc:3c:9b:d1:7e:
         a5:a4:d7:04:33:16:86:f7:fc:83:b2:13:18:3e:77:48:1b:a3:
         11:fb:2a:98:00:42:df:5b:5e:52:31:7d:da:5c:9d:13:05:4f:
         3e:f4:54:b2:19:e3:af:a5:db:2e:2e:04:60:77:f4:a9:67:b0:
         22:e4:d0:f4:18:c0:09:97:99:c5:2e:fa:23:73:22:44:9e:48:
         27:00:fc:d0:30:c4:47:cf:f6:5d:b0:a1:4b:2c:ef:0f:a0:ce:
         4e:a7:0b:a8:87:4c:e3:58:2a:c2:64:e6:96:dc:e2:c9:29:fd:
         8a:52:ae:f4:40:dc:bd:df:e2:9e:bf:1b:5c:15:fa:c5:65:c5:
         c3:95:51:0c:ef:60:42:62:9e:77:4c:b2:09:fd:88:92:37:ca:
         cd:62:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----