Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e2033333536.roa
File:                     3231362e3234362e3130362e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          tn6NIaTQwXwVZVOiQDTmUnJ9jCEiBuqIFrZO2tJ0dlk=
Subject key identifier:   BD:E4:3E:AB:25:1E:6C:49:80:7D:1E:86:BE:1C:F7:21:81:FB:F8:E3
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2FBE3DF912774E6DC91F973AC123EAD17D0C1E1B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e2033333536.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     3356
IP address blocks:        216.246.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:be:3d:f9:12:77:4e:6d:c9:1f:97:3a:c1:23:ea:d1:7d:0c:1e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=BDE43EAB251E6C49807D1E86BE1CF72181FBF8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:29:b1:f3:e8:3c:b6:46:c2:22:42:66:6c:
                    07:86:02:bd:97:d0:15:48:02:f3:d3:f0:03:bb:18:
                    f8:ea:9d:e8:8c:f5:67:ba:7f:46:9e:af:a1:84:26:
                    c6:34:35:b6:54:ff:71:cb:13:21:6f:92:90:47:f4:
                    13:97:6a:70:e9:cb:3f:ed:e5:c9:1c:49:5b:af:67:
                    d9:9d:16:23:41:6d:fc:4a:7d:09:b9:bc:66:3b:50:
                    99:3d:a5:24:88:f1:e6:c5:95:05:d1:60:7f:3b:8c:
                    10:a2:2a:9d:98:d4:31:4b:b9:41:70:9e:b8:5a:4c:
                    69:b7:64:28:fb:df:5f:30:45:0a:0d:59:f7:3f:6c:
                    e9:1d:b3:12:09:d2:03:f0:74:0e:d3:ee:92:63:87:
                    6a:eb:87:9e:c1:f6:bd:3f:62:98:c5:1d:33:1d:10:
                    1e:da:19:19:ec:83:c6:27:51:7c:0a:7f:86:61:16:
                    19:6a:97:cb:04:43:fa:33:f1:d1:53:59:23:8b:3f:
                    f0:d0:ab:f2:86:64:b8:5a:04:56:4b:42:51:63:67:
                    b2:67:aa:99:31:9b:a5:5b:2e:2a:c8:56:80:5d:93:
                    ff:85:9a:e7:74:f1:9c:42:9b:b2:30:c6:87:80:b5:
                    4a:ff:c1:23:96:59:d6:23:33:b9:28:04:b0:e2:ef:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E4:3E:AB:25:1E:6C:49:80:7D:1E:86:BE:1C:F7:21:81:FB:F8:E3
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3130362e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:48:b8:f3:db:f0:6c:0d:50:6d:0c:38:34:86:56:86:fd:
         60:41:9f:31:d8:a6:59:64:0a:71:af:de:8c:bf:1a:9b:34:6d:
         d5:0f:4d:06:a5:1d:61:73:45:6d:a3:15:09:15:42:db:23:36:
         ea:ca:95:ec:7a:8c:c8:1d:ea:6f:ab:61:ee:76:77:66:36:3e:
         f7:c8:bc:95:db:b3:17:6a:bc:79:8b:fe:e8:29:16:0c:12:58:
         37:6e:ec:28:19:ea:c6:96:ee:a2:c4:b7:32:19:e5:ab:82:13:
         83:85:4e:24:b4:eb:fb:80:9e:7a:bc:bb:ec:0c:d6:b6:c2:5a:
         2d:d6:c0:88:c2:67:81:a4:dc:3f:13:48:9c:9e:2a:d7:6c:79:
         6e:69:97:29:4a:ad:bc:a3:bb:9a:c8:60:bd:d3:87:22:4d:26:
         15:6f:e3:44:66:ff:d8:74:18:74:8c:1f:9d:cc:ec:f0:00:16:
         a9:b4:56:23:c6:e0:7d:af:ac:bd:2f:5d:ab:0a:97:92:97:dc:
         79:d4:00:eb:f9:c0:90:ac:c5:51:71:c4:07:14:e6:2e:4e:5e:
         01:dd:16:aa:79:b6:7a:03:5a:39:8f:ea:a0:08:2e:bd:da:3f:
         e7:7b:19:14:6b:ab:54:fb:bf:a5:98:15:5b:26:81:48:d4:82:
         d2:31:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----