Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa
File:                     3231362e3234362e39302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          wjlgj1Xzzg+SZc2pRxSq/IoPcVmPl7UAywVfQrpJj/g=
Subject key identifier:   8D:47:6C:CC:73:3F:B4:24:BF:8B:B4:4D:99:26:99:9D:25:25:72:0C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6B1D8407C85E4637AB995FD85E10CC74481104CB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     834
IP address blocks:        216.246.90.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1d:84:07:c8:5e:46:37:ab:99:5f:d8:5e:10:cc:74:48:11:04:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=8D476CCC733FB424BF8BB44D9926999D2525720C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:04:a9:9a:fe:db:e0:61:15:e2:31:bf:12:
                    31:b0:83:f0:4d:1c:01:b8:1a:93:76:07:14:c9:05:
                    ba:01:f6:a6:73:41:74:7f:db:7d:cc:da:b6:39:f9:
                    f9:37:a7:41:33:95:75:4a:ef:e0:d0:f7:b0:c9:9d:
                    02:6c:e4:c9:f7:e4:c3:7f:55:a9:86:d5:fd:a3:ce:
                    9c:a8:29:a6:1c:fb:62:36:75:d0:60:d1:9d:27:8c:
                    e4:8d:9f:db:b4:5a:0e:80:b6:cf:d3:2b:81:36:34:
                    73:48:8e:46:9c:7f:58:25:2a:1a:1d:fb:6c:95:dd:
                    12:ab:6b:a0:9f:e9:38:a2:af:5f:cc:7a:c6:f2:7d:
                    71:14:f5:6a:f4:6c:bb:9d:94:d9:ed:6f:ba:7b:8a:
                    12:43:88:a5:00:72:9e:f9:2f:99:e8:ae:f7:dc:2c:
                    2d:c5:99:28:f8:78:d1:1a:48:7e:d0:ed:e2:4b:70:
                    25:0c:45:6b:17:d9:dc:4b:11:d0:cc:74:4f:ba:cd:
                    20:08:7b:d2:9c:4b:56:93:5c:72:92:85:1a:33:d9:
                    98:5d:ed:10:00:94:3d:9c:8c:b1:5b:6a:f0:e3:a7:
                    f4:67:e4:e9:ad:6a:bd:97:1a:c0:ad:76:84:04:b3:
                    d2:e7:58:77:c3:75:4b:50:e8:9c:4f:e6:67:13:ce:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:47:6C:CC:73:3F:B4:24:BF:8B:B4:4D:99:26:99:9D:25:25:72:0C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:39:2d:28:25:dd:13:5b:cc:ca:3c:73:62:8f:4b:08:84:
         90:7a:2d:d4:f3:2d:4e:cc:3c:1f:e9:de:80:4c:53:b2:85:1e:
         7f:36:1f:5a:71:ae:eb:e6:13:c8:1a:03:0b:b9:d3:77:30:55:
         36:fd:c0:74:54:0f:44:60:40:00:de:b6:f4:b3:28:61:84:77:
         38:07:b5:6c:64:31:ce:33:c5:70:f1:9a:85:04:4b:ca:ea:85:
         c1:ef:2f:79:32:03:8a:a7:04:9a:54:4c:0b:a4:b1:24:e8:76:
         2c:9f:b0:0d:ce:9b:35:de:e6:67:b7:61:9c:91:fe:cf:14:02:
         5b:ae:ec:7e:a6:b1:5d:41:5b:15:f8:64:e4:53:cb:34:98:6f:
         0e:f8:2c:f1:b4:91:7b:aa:73:47:de:57:49:98:ed:fe:57:98:
         1c:7d:32:65:54:f3:03:19:aa:e1:b9:a4:6d:5d:00:a2:0f:f9:
         51:ea:31:28:2c:6f:cd:d9:72:d1:82:10:5f:d5:18:d1:a1:3d:
         96:3d:33:9a:e7:e8:49:2c:f0:b8:26:1a:fc:80:bc:a8:e2:77:
         24:0f:53:46:37:4b:7f:00:26:7c:10:cb:52:0e:3c:56:d5:a0:
         5f:30:0b:97:28:f7:31:a7:0b:b4:3e:1e:b5:62:f5:b6:3b:4d:
         d1:35:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----