Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          UXCLCLHBTFZyfOAc8sG+jCo6l90sQL0WIcrF4B3+jks=
Subject key identifier:   6E:46:62:43:07:8D:BF:23:85:15:6E:57:36:66:64:46:2B:9A:36:10
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       50BBB4198310BD5ADA8B3DE05B6DE56EFA5E2B4D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:33 +0000
ROA not before:           Fri 15 Nov 2024 18:34:33 +0000
ROA not after:            Fri 14 Nov 2025 18:39:33 +0000
asID:                     212238
IP address blocks:        216.246.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bb:b4:19:83:10:bd:5a:da:8b:3d:e0:5b:6d:e5:6e:fa:5e:2b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:33 2024 GMT
            Not After : Nov 14 18:39:33 2025 GMT
        Subject: CN=6E466243078DBF2385156E57366664462B9A3610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:b7:ec:b6:2f:2a:45:09:49:74:41:cd:32:
                    8b:56:f8:78:60:b1:c5:0a:be:c9:01:61:21:3c:25:
                    32:32:5a:3d:35:e7:f0:30:a3:09:ff:e0:3b:7a:27:
                    61:d8:e1:2b:c3:fd:cc:2f:67:25:f2:2a:14:78:45:
                    77:66:03:5b:fc:2b:3d:66:02:a6:db:0e:aa:1c:8d:
                    96:07:c0:b8:8b:e2:6a:27:4f:48:eb:31:4f:41:38:
                    d4:bf:9b:41:9e:f8:15:98:6d:61:c8:5c:45:c4:a8:
                    f7:c4:26:6c:17:38:c0:9b:c7:44:2e:e7:9b:e6:56:
                    2f:13:85:90:9c:70:0a:37:a3:08:be:97:32:44:b2:
                    d2:2c:d7:0b:e7:b0:31:3a:82:fa:bc:26:d3:de:2b:
                    7f:ce:47:2e:87:b3:cc:01:af:8d:8c:1f:00:72:a0:
                    bc:a5:45:f7:43:ae:60:fc:f6:e1:1e:a8:4c:39:f0:
                    80:0b:da:67:72:a2:cb:28:56:6a:06:bd:ae:c2:f7:
                    00:96:96:2e:b0:16:53:79:b0:9f:3d:89:6a:92:1b:
                    bb:c8:04:72:2f:4d:52:0a:9a:81:eb:4b:91:f1:69:
                    15:49:ae:d8:8b:2f:e8:b1:b3:84:25:3a:8b:9d:09:
                    50:ce:d6:81:a3:25:b0:7f:41:80:58:12:01:72:c7:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:46:62:43:07:8D:BF:23:85:15:6E:57:36:66:64:46:2B:9A:36:10
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e382e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:13:da:db:17:7e:c4:f1:6c:74:5f:8b:1d:f3:f5:e1:45:
         06:e8:99:05:85:e4:e3:30:d7:0c:a4:7c:df:21:e9:b4:b2:32:
         50:dd:01:f0:08:15:02:ab:2c:32:7e:9b:d6:c7:cb:0e:3c:c6:
         d6:4f:4f:4d:3e:03:fa:e7:92:5d:82:b6:f0:de:3a:51:c4:25:
         0c:26:20:49:65:fe:dc:26:a8:2f:66:c0:9e:98:38:22:be:4e:
         e9:12:63:01:70:0e:33:e4:64:56:e7:36:15:51:5d:b4:6f:c5:
         e3:12:60:a7:75:ea:9a:2a:46:6e:88:95:02:88:32:8d:9a:94:
         d9:a1:87:3c:88:e1:0e:fc:6c:bb:6d:7a:76:23:17:63:0b:9e:
         83:5d:6a:48:43:65:f8:43:34:83:d0:c7:e6:ab:8a:c9:1d:e4:
         92:47:ef:d4:ab:fb:6d:25:9c:01:6d:cb:ca:38:16:8b:37:d8:
         03:99:f9:e2:0f:5a:46:8a:80:9f:8c:36:45:30:8b:2d:f3:76:
         b6:9c:cd:1f:6a:42:80:9c:55:13:a3:39:39:52:a5:af:55:5b:
         d5:b4:35:8d:62:f0:6a:2a:99:94:bc:9d:c6:64:2f:d5:16:b3:
         05:13:bf:f3:df:76:c4:fb:2a:7b:a0:bd:a3:56:92:83:c1:03:
         12:f2:de:11
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUULu0GYMQvVraiz3gW23lbvpeK00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMzWhcNMjUxMTE0MTgzOTMz
WjAzMTEwLwYDVQQDEyg2RTQ2NjI0MzA3OERCRjIzODUxNTZFNTczNjY2NjQ0NjJC
OUEzNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDy37LYvKkUJ
SXRBzTKLVvh4YLHFCr7JAWEhPCUyMlo9NefwMKMJ/+A7eidh2OErw/3ML2cl8ioU
eEV3ZgNb/Cs9ZgKm2w6qHI2WB8C4i+JqJ09I6zFPQTjUv5tBnvgVmG1hyFxFxKj3
xCZsFzjAm8dELueb5lYvE4WQnHAKN6MIvpcyRLLSLNcL57AxOoL6vCbT3it/zkcu
h7PMAa+NjB8AcqC8pUX3Q65g/PbhHqhMOfCAC9pncqLLKFZqBr2uwvcAlpYusBZT
ebCfPYlqkhu7yARyL01SCpqB60uR8WkVSa7Yiy/osbOEJTqLnQlQztaBoyWwf0GA
WBIBcscixwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG5GYkMHjb8jhRVuVzZmZEYr
mjYQMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzODJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2CDANBgkqhkiG9w0BAQsF
AAOCAQEAf7UT2tsXfsTxbHRfix3z9eFFBuiZBYXk4zDXDKR83yHptLIyUN0B8AgV
AqssMn6b1sfLDjzG1k9PTT4D+ueSXYK28N46UcQlDCYgSWX+3CaoL2bAnpg4Ir5O
6RJjAXAOM+RkVuc2FVFdtG/F4xJgp3XqmipGboiVAogyjZqU2aGHPIjhDvxsu216
diMXYwueg11qSENl+EM0g9DH5quKyR3kkkfv1Kv7bSWcAW3LyjgWizfYA5n54g9a
RoqAn4w2RTCLLfN2tpzNH2pCgJxVE6M5OVKlr1Vb1bQ1jWLwaiqZlLydxmQv1Raz
BRO/8992xPsqe6C9o1aSg8EDEvLeEQ==
-----END CERTIFICATE-----