Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e302e302f32342d3234203d3e20333936333536.roa
File:                     3231362e3234362e302e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          b28/3kmIDIFvLOwLctoJgV5jOXjWSYROj1I2OjkowdE=
Subject key identifier:   FE:20:5B:AE:DE:42:1B:24:5D:4E:DB:9A:E6:61:E9:1E:09:E6:94:D0
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1FA6EDCF9001D4956E41D6B52C5371E086F0E674
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e302e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     396356
IP address blocks:        216.246.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:ed:cf:90:01:d4:95:6e:41:d6:b5:2c:53:71:e0:86:f0:e6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=FE205BAEDE421B245D4EDB9AE661E91E09E694D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:87:86:89:e9:9e:e8:28:1a:cf:1d:f8:45:bd:
                    50:05:11:cc:28:3a:2a:9d:b4:de:d6:04:e8:10:b8:
                    b7:d2:da:80:14:0b:b1:eb:17:2b:60:6e:18:29:11:
                    b5:f0:cb:4f:57:0a:a8:b1:c2:64:4e:80:36:fe:28:
                    f9:67:33:1e:65:47:90:e2:76:63:c9:63:8f:38:dd:
                    39:28:58:63:91:4f:63:f5:bc:18:21:71:9e:67:ac:
                    b8:68:7f:2b:07:db:83:7a:69:f4:54:7d:46:d6:45:
                    27:f8:c5:5a:e8:cd:c2:34:00:8a:fc:72:87:08:8d:
                    a3:1e:1b:86:e6:6e:eb:7f:ab:22:f2:e4:9b:f9:e5:
                    89:67:56:58:c1:ca:79:cc:b0:82:12:81:01:07:1f:
                    e1:18:11:f6:b3:e8:12:bb:50:49:91:50:91:7a:1a:
                    63:70:2c:b3:23:85:49:76:a5:88:8f:d2:6d:75:78:
                    bf:ca:d1:fa:b4:1c:bc:b8:63:72:a1:d4:6d:a1:29:
                    fc:21:fd:92:7e:e7:b0:bb:e4:98:c8:12:4e:cf:42:
                    db:74:e1:45:be:f0:e6:4d:d5:f4:1a:b2:41:b3:f7:
                    f9:64:47:e9:e1:c3:35:b7:78:8b:4f:7a:2a:65:6c:
                    d1:bb:87:58:36:00:1e:09:b5:00:50:6a:f1:c9:92:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:5B:AE:DE:42:1B:24:5D:4E:DB:9A:E6:61:E9:1E:09:E6:94:D0
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e302e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:25:fb:9e:bb:c2:39:cf:ed:59:51:8c:9f:22:de:c3:b8:63:
         90:63:24:00:c0:75:c3:44:dc:1b:9f:5e:c6:51:57:ea:92:ea:
         ca:bc:8a:a5:3c:8f:2a:9a:6b:d1:05:fd:3d:34:30:de:4f:b3:
         25:64:51:fa:8c:ef:57:2d:91:c8:44:31:99:78:14:3c:d2:74:
         c5:fe:39:47:17:f5:b9:6a:6a:fb:63:8f:27:dc:b3:e7:3c:d7:
         53:4e:54:74:3f:9e:7c:fd:a0:2e:57:a7:28:b7:d5:f8:d9:5c:
         24:02:9f:6a:7c:9c:9f:04:d3:10:d8:bb:54:a3:db:ca:3e:bd:
         a3:02:cc:c9:fc:4b:b1:71:cb:c7:96:9c:53:63:d8:33:c6:af:
         9b:4b:85:e6:cf:e4:0a:9c:61:c2:a2:f3:f9:6d:a2:ba:2e:b2:
         76:c9:ca:3d:3b:77:9d:6f:69:a1:5b:56:2b:26:01:fd:a6:85:
         64:99:56:f6:ac:60:af:b3:ef:0e:24:8c:dc:21:a7:e9:04:42:
         e6:dc:19:59:94:35:08:55:8c:60:01:7f:3d:39:b0:36:86:84:
         9a:ab:f3:1b:5c:c8:43:1c:2f:b6:90:90:92:5a:4a:97:85:e2:
         5d:dd:03:36:84:01:25:ed:6d:28:e1:87:99:ee:c2:e1:d9:36:
         21:9c:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----