Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e203632393034.roa
File:                     3231362e3234362e35382e302f32342d3234203d3e203632393034.roa (raw, json)
Hash identifier:          QXJogMqxe4KI7gRj7VqJgSOhVEDUYSRrg69gTd7lvow=
Subject key identifier:   91:B2:7E:3B:69:50:CE:76:27:4D:3B:B1:2C:47:09:BF:F6:9E:C2:E5
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0A094F1D3063C3A55F273CF356522D7DA9C35976
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e203632393034.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     62904
IP address blocks:        216.246.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:09:4f:1d:30:63:c3:a5:5f:27:3c:f3:56:52:2d:7d:a9:c3:59:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=91B27E3B6950CE76274D3BB12C4709BFF69EC2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:1e:6d:12:db:7b:46:dc:f3:6c:52:02:61:
                    3d:68:52:27:67:08:e1:a1:9c:a7:0c:d6:1e:e0:4f:
                    39:6c:c8:6a:e0:f6:b0:c3:97:74:f5:e8:f8:ca:e2:
                    69:31:ac:4b:97:ee:68:f3:40:21:2c:b1:d0:37:db:
                    15:fd:09:1e:c5:2b:ce:65:23:a8:c8:42:27:35:73:
                    c1:ad:50:66:71:9c:ca:4c:22:b6:c9:b5:8c:3b:dc:
                    50:85:ad:9a:94:0f:52:37:fd:58:a9:5d:31:29:e7:
                    0c:4e:f0:04:aa:09:ad:25:6e:3b:8f:6c:d7:ed:66:
                    a3:3a:0c:0b:f5:ad:a0:90:fe:b3:f6:50:84:c1:15:
                    f0:82:8f:a4:94:44:42:72:f5:8b:85:7e:e9:25:06:
                    fd:7e:5e:81:3a:eb:ec:ec:06:4d:49:25:fa:24:7f:
                    5f:41:8d:0e:32:d4:01:a0:50:29:d6:f1:6c:fb:50:
                    63:64:a3:00:9a:3d:da:6c:d9:22:cf:72:83:da:dd:
                    9e:26:46:61:c5:6b:3a:aa:1c:d8:ea:13:c7:48:52:
                    e6:f1:ad:8e:de:15:77:87:5b:23:94:b4:59:38:6d:
                    b0:e9:4d:31:37:b7:2e:a1:f6:5b:9c:20:68:95:9c:
                    d3:82:bf:b5:ba:7d:ed:ad:77:53:0d:2f:85:db:22:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:7E:3B:69:50:CE:76:27:4D:3B:B1:2C:47:09:BF:F6:9E:C2:E5
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35382e302f32342d3234203d3e203632393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:ad:ad:17:3a:1f:90:f9:6b:0c:ab:b4:42:ba:45:c3:cd:
         50:02:ef:df:90:44:d1:c7:c3:be:79:09:ce:5c:68:01:4d:d0:
         d4:05:c4:65:45:da:ba:57:fc:c8:1f:1a:b1:e9:d3:aa:83:21:
         89:b7:dc:05:f9:80:7e:4a:e6:a0:e0:5b:34:ff:e2:24:2b:ea:
         5d:61:2a:31:b5:07:d3:30:0e:bc:c5:33:1c:50:34:48:dd:05:
         49:e5:62:f0:f0:e8:2e:63:82:d5:f0:70:e7:0f:07:eb:a5:95:
         7b:17:6f:c3:fb:cd:52:f3:7a:ac:eb:04:0b:b1:6c:6d:c8:63:
         92:57:5a:80:8f:4a:57:d0:a5:af:bf:00:39:c6:da:57:b7:b1:
         57:5d:0e:56:5a:de:90:3a:f9:8c:3d:ce:b8:7c:45:e1:cb:80:
         0b:8d:ec:94:a3:fc:d5:20:2b:20:cf:9b:92:71:1a:7f:4e:71:
         f9:cf:fc:8e:1d:8a:d5:f3:f5:ae:3e:c3:86:6a:c3:2d:4f:27:
         51:f2:74:4e:04:cc:02:b4:e4:6c:e7:3a:28:bf:dd:a6:81:73:
         95:2e:51:a8:57:db:46:b7:3c:0e:88:44:a5:25:09:fd:48:1b:
         fb:f4:06:ec:fc:07:0d:28:bd:dd:68:e2:35:4e:2b:36:3c:5d:
         4e:cf:fe:ea
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUCglPHTBjw6VfJzzzVlItfanDWXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMyWhcNMjUxMTE0MTgzOTMy
WjAzMTEwLwYDVQQDEyg5MUIyN0UzQjY5NTBDRTc2Mjc0RDNCQjEyQzQ3MDlCRkY2
OUVDMkU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMUebRLbe0bc
82xSAmE9aFInZwjhoZynDNYe4E85bMhq4Paww5d09ej4yuJpMaxLl+5o80AhLLHQ
N9sV/QkexSvOZSOoyEInNXPBrVBmcZzKTCK2ybWMO9xQha2alA9SN/1YqV0xKecM
TvAEqgmtJW47j2zX7WajOgwL9a2gkP6z9lCEwRXwgo+klERCcvWLhX7pJQb9fl6B
Ouvs7AZNSSX6JH9fQY0OMtQBoFAp1vFs+1BjZKMAmj3abNkiz3KD2t2eJkZhxWs6
qhzY6hPHSFLm8a2O3hV3h1sjlLRZOG2w6U0xN7cuofZbnCBolZzTgr+1un3trXdT
DS+F2yITvwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJGyfjtpUM52J007sSxHCb/2
nsLlMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzNTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMjM5MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2OjANBgkqhkiG9w0BAQsF
AAOCAQEAaZ2trRc6H5D5awyrtEK6RcPNUALv35BE0cfDvnkJzlxoAU3Q1AXEZUXa
ulf8yB8asenTqoMhibfcBfmAfkrmoOBbNP/iJCvqXWEqMbUH0zAOvMUzHFA0SN0F
SeVi8PDoLmOC1fBw5w8H66WVexdvw/vNUvN6rOsEC7FsbchjkldagI9KV9Clr78A
OcbaV7exV10OVlrekDr5jD3OuHxF4cuAC43slKP81SArIM+bknEaf05x+c/8jh2K
1fP1rj7DhmrDLU8nUfJ0TgTMArTkbOc6KL/dpoFzlS5RqFfbRrc8DohEpSUJ/Ugb
+/QG7PwHDSi93WjiNU4rNjxdTs/+6g==
-----END CERTIFICATE-----