Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e39302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          TSIIk022P3FkDRYWwmpkDc3cJTmu3vrZn9cjUAG3lYI=
Subject key identifier:   C7:28:37:DF:82:CD:34:9A:24:06:29:F8:75:60:93:ED:5C:7A:35:27
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5A62BE317E0B6A8436A336FE230431EA941E886A
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:33 +0000
ROA not before:           Fri 15 Nov 2024 18:34:33 +0000
ROA not after:            Fri 14 Nov 2025 18:39:33 +0000
asID:                     212238
IP address blocks:        216.246.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:62:be:31:7e:0b:6a:84:36:a3:36:fe:23:04:31:ea:94:1e:88:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:33 2024 GMT
            Not After : Nov 14 18:39:33 2025 GMT
        Subject: CN=C72837DF82CD349A240629F8756093ED5C7A3527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:08:67:ef:ae:10:18:f4:08:64:c7:a8:fa:
                    95:69:20:94:a3:c4:8e:12:64:3f:b9:ca:f6:94:67:
                    75:38:d8:d1:47:dc:e1:96:f7:e2:54:5c:b1:d7:3f:
                    3b:c5:59:ac:77:24:2f:c5:10:ae:14:0f:54:b0:a6:
                    5f:46:59:db:c1:49:d1:4b:ef:b0:44:cc:91:ac:ca:
                    06:0d:9b:63:94:e4:0b:d2:a9:0e:eb:fe:eb:f6:1c:
                    6d:6c:32:3e:12:95:c3:dd:a9:b2:f2:5c:bb:22:e1:
                    58:36:ab:60:72:b0:b2:63:7a:e4:bf:c3:92:8a:98:
                    10:6c:4e:81:2d:d7:58:7e:71:fe:00:5f:00:1f:9f:
                    e7:16:eb:29:ca:d6:93:6d:68:40:e0:31:d9:7a:2d:
                    67:9a:e8:11:68:d4:c2:7d:ec:c5:49:9c:49:74:f6:
                    d4:83:96:d7:33:22:ab:aa:ca:b1:59:9d:af:ed:c1:
                    a1:3d:fd:ef:53:85:c6:35:0f:76:52:34:a9:01:71:
                    e0:54:bf:6c:1f:1e:03:c4:43:f8:28:53:e7:a6:45:
                    f3:67:93:97:4b:6d:1d:ab:a2:eb:74:d4:7e:14:c4:
                    14:f9:da:14:d0:73:50:53:0e:db:6f:51:76:de:bc:
                    93:f7:54:a4:17:23:9a:d0:41:d8:7d:7f:ac:29:02:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:37:DF:82:CD:34:9A:24:06:29:F8:75:60:93:ED:5C:7A:35:27
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:fd:d1:3b:94:b4:21:ff:35:a2:89:2b:fb:41:90:72:b6:16:
         15:75:b7:62:af:6d:e3:8a:b0:2d:f5:b8:e3:d5:1a:1d:83:6f:
         69:be:dd:50:b5:2e:5f:44:30:2a:2a:52:0f:99:20:f5:1b:9e:
         6c:83:44:da:87:6a:4e:17:c4:73:4b:c6:ba:97:8e:1d:eb:8d:
         a4:b3:47:42:8c:1e:80:98:89:62:97:f0:ae:97:48:6a:82:92:
         c3:a7:be:9b:e5:aa:9b:ce:96:64:94:76:c5:94:70:aa:e3:3c:
         5f:ae:35:00:de:33:71:cb:55:85:15:99:ed:5c:8f:58:5c:4c:
         c1:c9:d2:62:12:a8:7f:fb:58:ed:f9:29:87:68:e6:45:75:1d:
         3c:30:b8:44:d5:de:9c:49:3f:9d:e0:6a:42:e3:35:8a:d6:de:
         73:67:87:8a:e7:95:54:49:7f:e6:55:80:ea:ff:66:dc:c7:99:
         47:cc:32:28:f0:13:cc:11:49:3b:b7:0f:42:73:06:87:48:0b:
         2a:cf:26:ac:64:8b:25:42:70:e4:f1:7d:14:2d:5a:6a:84:f4:
         38:ea:35:81:1a:5c:41:ae:5c:52:ff:d7:9b:6d:ee:6a:96:84:
         89:13:d0:d4:80:09:95:92:5a:9b:79:ba:46:cc:07:9b:7d:34:
         92:23:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----