Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39332e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e39332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          dviPnRjRYq1mkwblnxFIKfACDoaF2e2dUfFTtd+5+LI=
Subject key identifier:   CE:30:A6:94:D6:FD:08:E6:8A:05:46:F3:BE:20:57:9D:93:6F:F2:55
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       43FBB7892F8D78931E7012135622E4A0B23CD11F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     212238
IP address blocks:        216.246.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fb:b7:89:2f:8d:78:93:1e:70:12:13:56:22:e4:a0:b2:3c:d1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=CE30A694D6FD08E68A0546F3BE20579D936FF255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:d4:10:ce:45:42:cd:63:1c:87:5a:d3:df:
                    5a:41:46:a3:5d:e8:7f:32:1f:8b:4b:e8:b6:b3:b0:
                    1e:26:71:1f:e9:e6:24:26:70:0c:78:f4:23:4b:10:
                    2e:08:7c:6f:52:6d:d6:4e:3e:16:65:4b:84:1c:67:
                    df:23:7d:c2:5a:9c:76:05:5e:87:cd:82:38:0a:43:
                    38:8c:af:54:31:87:27:64:3e:e1:77:57:46:de:9b:
                    fd:6c:56:08:53:e9:d1:b0:d8:9c:83:a5:f9:48:82:
                    aa:6c:5f:83:7b:fa:1f:db:85:dd:4c:aa:11:45:fb:
                    b5:79:58:4f:9d:e1:6d:d2:93:28:e1:3b:98:48:23:
                    e5:8a:e7:c8:52:cc:55:1e:24:f5:f7:1b:0e:70:10:
                    d5:5d:ea:57:dd:25:77:c7:40:d1:97:8c:eb:38:9a:
                    61:5a:56:99:b0:c4:e0:03:d4:4f:93:0e:6a:38:97:
                    52:ea:11:33:dd:99:1a:0b:22:cb:dc:06:a8:b6:31:
                    27:8a:1e:d3:de:ff:49:87:c3:a9:6e:30:54:84:da:
                    88:e7:36:5e:f9:10:6e:6c:c2:db:ee:2b:34:8c:e3:
                    1d:f9:dd:3c:c6:37:93:65:47:04:1b:2a:d5:b2:c5:
                    42:a1:a2:0b:f1:76:ee:1f:87:b6:1e:9d:63:fc:9d:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:30:A6:94:D6:FD:08:E6:8A:05:46:F3:BE:20:57:9D:93:6F:F2:55
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:6e:4c:91:5a:cf:3a:bd:19:bd:75:fb:45:8c:a2:66:34:
         37:03:34:3d:20:34:3f:4e:80:b9:94:67:0e:be:82:42:ec:df:
         25:d9:30:18:78:7a:fd:96:e9:84:66:5f:64:27:80:cf:51:ec:
         29:60:35:01:3c:59:0e:d3:46:e9:d7:c5:c1:33:4f:62:3b:fc:
         0b:f7:50:55:bf:9b:1e:33:59:ed:ce:4c:20:69:44:8a:07:d3:
         5b:00:3d:59:fa:cf:bf:c2:1e:3a:52:5a:74:ec:b6:5c:c3:6a:
         6b:0f:a0:60:b2:70:cc:a9:9e:c4:c8:00:b2:c0:e1:64:55:e9:
         30:a5:c4:f0:dc:1b:b8:7d:f4:12:30:30:57:62:b1:b3:fb:b6:
         8b:16:a7:d1:f2:e5:c0:09:ee:a1:51:3a:0e:d6:4b:39:5f:20:
         f0:e4:ca:a3:c5:e6:ac:dd:9e:c6:6d:18:e5:ef:39:3a:7b:88:
         d3:8e:a7:4c:77:8d:d3:af:86:6a:8c:de:8f:5f:3d:7d:35:52:
         5c:79:95:8f:60:28:af:50:36:6e:53:62:7e:f2:71:8c:0b:47:
         8e:b3:7d:81:f8:bb:bf:47:95:ab:2e:78:5b:c6:2c:0e:d8:ab:
         d1:81:f5:89:30:04:57:0b:12:ac:a1:9c:f5:ba:3b:16:b4:7a:
         35:9a:b5:bc
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUQ/u3iS+NeJMecBITViLkoLI80R8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMyWhcNMjUxMTE0MTgzOTMy
WjAzMTEwLwYDVQQDEyhDRTMwQTY5NEQ2RkQwOEU2OEEwNTQ2RjNCRTIwNTc5RDkz
NkZGMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWfUEM5FQs1j
HIda099aQUajXeh/Mh+LS+i2s7AeJnEf6eYkJnAMePQjSxAuCHxvUm3WTj4WZUuE
HGffI33CWpx2BV6HzYI4CkM4jK9UMYcnZD7hd1dG3pv9bFYIU+nRsNicg6X5SIKq
bF+De/of24XdTKoRRfu1eVhPneFt0pMo4TuYSCPliufIUsxVHiT19xsOcBDVXepX
3SV3x0DRl4zrOJphWlaZsMTgA9RPkw5qOJdS6hEz3ZkaCyLL3AaotjEnih7T3v9J
h8OpbjBUhNqI5zZe+RBubMLb7is0jOMd+d08xjeTZUcEGyrVssVCoaIL8XbuH4e2
Hp1j/J0l4QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFM4wppTW/QjmigVG874gV52T
b/JVMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzOTMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PZdMA0GCSqGSIb3DQEB
CwUAA4IBAQB/Q25MkVrPOr0ZvXX7RYyiZjQ3AzQ9IDQ/ToC5lGcOvoJC7N8l2TAY
eHr9lumEZl9kJ4DPUewpYDUBPFkO00bp18XBM09iO/wL91BVv5seM1ntzkwgaUSK
B9NbAD1Z+s+/wh46Ulp07LZcw2prD6BgsnDMqZ7EyACywOFkVekwpcTw3Bu4ffQS
MDBXYrGz+7aLFqfR8uXACe6hUToO1ks5XyDw5Mqjxeas3Z7GbRjl7zk6e4jTjqdM
d43Tr4ZqjN6PXz19NVJceZWPYCivUDZuU2J+8nGMC0eOs32B+Lu/R5WrLnhbxiwO
2KvRgfWJMARXCxKsoZz1ujsWtHo1mrW8
-----END CERTIFICATE-----