Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e372e302f32342d3234203d3e20383334.roa
File:                     3231362e3234362e372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          m/w9XDXrCITqKOA5gsY3k/TzeLuWAAIB/u2QoBTSvn8=
Subject key identifier:   3C:C8:66:1B:F2:66:85:D4:EB:EB:E1:83:57:56:F2:40:F5:C9:5C:F4
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       50AF2AE7372DE7EFA441D8499F5AB1F900F7D9C7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e372e302f32342d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 19:02:26 +0000
ROA not before:           Fri 15 Nov 2024 18:57:26 +0000
ROA not after:            Fri 14 Nov 2025 19:02:26 +0000
asID:                     834
IP address blocks:        216.246.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:af:2a:e7:37:2d:e7:ef:a4:41:d8:49:9f:5a:b1:f9:00:f7:d9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:57:26 2024 GMT
            Not After : Nov 14 19:02:26 2025 GMT
        Subject: CN=3CC8661BF26685D4EBEBE1835756F240F5C95CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:f2:f2:43:b1:b7:dd:1c:3e:f5:86:fd:ee:
                    16:ab:3d:ab:5c:a3:54:9e:57:05:cf:28:22:c6:fa:
                    0d:b9:8a:dc:61:50:bb:be:f9:91:83:87:7c:50:48:
                    94:5c:02:0e:d2:23:c0:96:41:77:6a:8b:c0:e4:08:
                    7e:e2:69:a4:e0:ff:6b:bb:e9:1a:e0:91:e6:3a:d0:
                    c5:52:54:33:7d:b8:11:e6:c6:06:cd:5a:90:5b:c6:
                    9d:49:bb:08:24:04:e1:67:51:60:e5:26:ae:ea:91:
                    af:f7:28:89:b0:30:ac:0b:6f:16:7f:04:ff:4d:e9:
                    ca:12:94:b4:cf:bd:81:25:55:6c:26:d9:7f:99:0c:
                    82:bf:23:1e:17:c1:56:b7:93:d3:6a:2e:a1:62:18:
                    6a:82:2f:4c:59:85:e7:17:15:86:db:76:53:31:37:
                    0d:7a:a6:64:55:3e:3d:79:e2:d1:11:04:bc:df:b2:
                    d5:be:f9:59:87:94:85:95:0d:d4:a2:6b:bb:d5:db:
                    79:f6:3d:af:65:d7:1d:2b:04:0a:77:4d:0d:fc:c6:
                    d5:c7:bc:e7:b5:e2:d8:95:cb:bc:58:e5:c7:f1:43:
                    77:c7:fd:4d:bb:84:d0:5a:61:e2:b5:52:4d:0c:1b:
                    69:3c:46:67:7f:86:b5:ee:f8:0e:e4:ed:1c:fc:0b:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C8:66:1B:F2:66:85:D4:EB:EB:E1:83:57:56:F2:40:F5:C9:5C:F4
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:12:c1:ad:e0:ad:75:6d:98:ff:b1:a5:d6:2b:06:85:6f:b3:
         9f:6e:13:76:50:04:9f:e2:90:a1:0b:33:51:a8:64:67:51:9b:
         52:af:7c:2b:95:41:bf:ac:ab:3e:1b:83:91:4f:37:88:7a:f0:
         4f:ae:4f:d2:55:e3:4e:5a:ec:9c:73:d4:20:fb:d0:2e:47:f8:
         f5:91:39:d9:f9:f2:78:7e:05:96:62:03:14:85:6a:10:a8:7a:
         48:e7:16:16:85:b9:ab:53:bd:a9:37:a4:78:a6:72:70:57:5a:
         76:bc:70:6c:e2:62:91:98:d7:f8:4a:49:c5:27:8a:c0:94:41:
         73:54:78:2a:36:62:cb:c6:b6:90:7e:59:3c:16:93:80:a3:bc:
         10:e8:6d:ca:81:f5:2a:51:9d:57:8d:00:9e:85:ba:e9:c7:68:
         0c:1b:7a:36:fd:6b:4b:67:e6:16:1e:1c:78:8b:84:c0:ca:56:
         bf:60:7f:3c:a2:2b:94:5e:fd:16:87:2e:f3:9b:02:35:42:9b:
         db:09:fa:f9:8e:02:7a:86:08:51:17:72:c3:fc:a7:f3:4c:3b:
         db:da:82:c4:fc:bf:09:1f:ec:bf:75:0a:2e:1f:b4:b9:11:95:
         c6:2a:f6:d7:23:42:fd:87:70:c9:20:82:70:1a:b9:27:bd:7d:
         cc:d9:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----