Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203136353039.roa
File:                     3231362e3234362e39392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          YIpG2hYRef2bRp1Z1X/iWxsaVe+ztDlr+tAfBqA5fcU=
Subject key identifier:   AB:C4:D4:B9:99:2C:B5:92:84:78:DA:D2:F6:88:56:55:FF:AF:C4:59
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       281196A0BF3B36D452D24109D05F30CA179ACDF3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     16509
IP address blocks:        216.246.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:11:96:a0:bf:3b:36:d4:52:d2:41:09:d0:5f:30:ca:17:9a:cd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=ABC4D4B9992CB5928478DAD2F6885655FFAFC459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:27:8f:9f:64:e1:cf:a1:bd:bd:49:f1:97:
                    d9:80:64:94:24:63:c7:28:4a:f3:c2:e2:19:67:e7:
                    54:ec:f9:1f:5b:f5:1d:1d:eb:4e:6d:f5:68:95:dd:
                    a1:7c:0d:45:dc:56:9d:10:56:85:59:eb:1d:1b:a4:
                    49:f9:01:ad:4a:b4:40:b5:41:f2:0d:2d:32:7e:fc:
                    07:de:4a:b1:cb:90:ef:f9:2b:ea:f7:a8:00:03:02:
                    71:63:e4:24:6c:23:e1:a7:1b:a8:f0:24:c1:af:1b:
                    cc:fd:59:32:4b:ae:c8:74:4f:53:e2:40:60:f4:de:
                    49:d6:9e:d9:e7:b1:5f:0a:b1:01:39:ee:f5:1a:8e:
                    a9:4b:ae:ce:f8:a1:c5:a8:ae:9d:6a:2f:c3:18:59:
                    76:c7:0e:40:8c:f1:eb:96:2a:c1:9a:8f:c2:27:22:
                    2a:92:16:a1:6f:12:c9:dc:7e:49:cf:01:ba:e2:2d:
                    aa:4e:dc:13:1f:28:10:eb:cd:f7:e3:27:9c:67:d9:
                    61:61:0b:09:d1:5d:99:1d:8e:a8:9f:02:50:20:08:
                    b8:e5:5a:c4:54:af:06:29:75:ae:ff:0c:18:6b:4a:
                    eb:23:d4:f3:99:8b:fc:08:de:ad:cd:93:d8:6a:05:
                    35:b0:e9:cc:b6:59:87:db:17:52:b9:f8:aa:30:c9:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:D4:B9:99:2C:B5:92:84:78:DA:D2:F6:88:56:55:FF:AF:C4:59
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39392e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:74:f4:ef:16:34:d5:cb:2d:f3:d0:86:d3:ca:5d:42:74:1f:
         2e:65:ae:e8:43:a0:43:a8:98:fe:60:4c:bb:78:40:b8:b6:2d:
         88:7f:c0:0f:0f:04:a1:7b:34:f6:c1:8d:58:95:28:f1:28:06:
         b6:09:fb:b1:bd:72:52:96:58:9b:99:61:fe:58:3a:ef:70:63:
         a7:60:4b:e1:db:5f:c8:d4:ae:f5:20:cc:f6:7d:5e:16:3d:69:
         da:f5:2f:d8:86:16:63:3c:df:92:fe:f7:43:08:19:a5:8d:7a:
         eb:ac:12:cd:24:89:e0:c2:0a:2e:36:ca:cb:e5:dd:a7:79:78:
         1c:60:b5:4c:a6:21:97:18:5c:01:f0:31:e2:b3:a4:f8:be:76:
         47:17:45:f0:fe:3e:a7:82:af:de:55:2e:4b:d9:3d:74:18:9f:
         81:e3:fb:6d:bf:b4:92:69:a3:4f:5e:88:c9:42:97:f5:30:d1:
         74:f2:72:d1:2d:8f:c6:ec:93:2a:7a:b4:69:92:01:2b:74:eb:
         43:c7:13:49:00:d0:9e:91:9c:e5:e3:7f:ce:3f:04:2a:a6:9c:
         44:47:a6:c9:33:c3:14:09:b7:77:20:7c:c5:6e:de:a0:6c:c7:
         dd:0e:0f:0d:af:00:0e:18:a6:47:63:ee:38:23:be:07:bb:01:
         82:b7:d9:ae
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKBGWoL87NtRS0kEJ0F8wyheazfMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMxWhcNMjUxMTE0MTgzOTMx
WjAzMTEwLwYDVQQDEyhBQkM0RDRCOTk5MkNCNTkyODQ3OERBRDJGNjg4NTY1NUZG
QUZDNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj18nj59k4c+h
vb1J8ZfZgGSUJGPHKErzwuIZZ+dU7PkfW/UdHetObfVold2hfA1F3FadEFaFWesd
G6RJ+QGtSrRAtUHyDS0yfvwH3kqxy5Dv+Svq96gAAwJxY+QkbCPhpxuo8CTBrxvM
/VkyS67IdE9T4kBg9N5J1p7Z57FfCrEBOe71Go6pS67O+KHFqK6dai/DGFl2xw5A
jPHrlirBmo/CJyIqkhahbxLJ3H5JzwG64i2qTtwTHygQ68334yecZ9lhYQsJ0V2Z
HY6onwJQIAi45VrEVK8GKXWu/wwYa0rrI9TzmYv8CN6tzZPYagU1sOnMtlmH2xdS
ufiqMMnfcwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKvE1LmZLLWShHja0vaIVlX/
r8RZMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzOTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2YzANBgkqhkiG9w0BAQsF
AAOCAQEAR3T07xY01cst89CG08pdQnQfLmWu6EOgQ6iY/mBMu3hAuLYtiH/ADw8E
oXs09sGNWJUo8SgGtgn7sb1yUpZYm5lh/lg673Bjp2BL4dtfyNSu9SDM9n1eFj1p
2vUv2IYWYzzfkv73QwgZpY1666wSzSSJ4MIKLjbKy+Xdp3l4HGC1TKYhlxhcAfAx
4rOk+L52RxdF8P4+p4Kv3lUuS9k9dBifgeP7bb+0kmmjT16IyUKX9TDRdPJy0S2P
xuyTKnq0aZIBK3TrQ8cTSQDQnpGc5eN/zj8EKqacREemyTPDFAm3dyB8xW7eoGzH
3Q4PDa8ADhimR2PuOCO+B7sBgrfZrg==
-----END CERTIFICATE-----