Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3132332e302f32342d3234203d3e20313432303336.roa
File:                     3231362e3234362e3132332e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          gB54uxtT06pL6AqO3OxM9jZHx/HuJNJHPcU03ybJ7zs=
Subject key identifier:   36:63:57:B0:F9:49:63:63:91:1B:82:59:F7:02:62:60:DC:AB:63:40
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       558BECB6E8FC79C2E7303CEC48FC6F738BEB843C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3132332e302f32342d3234203d3e20313432303336.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     142036
IP address blocks:        216.246.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8b:ec:b6:e8:fc:79:c2:e7:30:3c:ec:48:fc:6f:73:8b:eb:84:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=366357B0F9496363911B8259F7026260DCAB6340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:71:cd:1f:55:55:bf:77:29:1d:04:95:82:
                    2b:a7:6f:35:12:41:29:97:24:b5:fb:34:b9:92:79:
                    09:fc:30:dd:4f:87:d6:b7:14:eb:d9:e1:5a:c9:6a:
                    60:32:77:0e:47:52:f1:50:84:ee:95:7b:f5:13:b2:
                    a6:be:27:14:58:f5:a3:c6:04:5c:27:3d:2f:96:d3:
                    70:0b:05:6b:5a:45:c2:10:63:ce:da:1f:c2:03:23:
                    3f:04:e7:d3:d7:83:85:ae:fc:fb:fb:30:07:8d:45:
                    bc:3e:e9:c8:60:bb:64:e9:74:00:36:b5:97:6a:5e:
                    db:5a:a2:c5:ef:16:be:67:9f:58:49:a7:dc:43:e9:
                    25:2f:1c:0b:98:41:dd:46:26:b7:88:b6:50:c1:93:
                    d0:ef:19:96:83:00:48:a3:28:2a:95:47:e5:b4:46:
                    b5:cf:ad:ab:b3:f5:5b:b4:14:47:fd:8d:90:89:73:
                    07:98:30:b4:3d:0f:cc:97:cd:9b:e6:8f:1b:2c:3a:
                    63:11:87:d6:eb:dd:70:c0:e1:f1:78:8c:f8:18:09:
                    46:19:10:14:42:d1:e5:88:49:61:d9:0b:39:d3:3c:
                    53:be:64:0a:27:22:4a:14:f1:2d:15:00:69:a9:48:
                    7f:75:5c:ed:5a:ef:bc:0a:d3:9c:28:96:bf:bb:de:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:57:B0:F9:49:63:63:91:1B:82:59:F7:02:62:60:DC:AB:63:40
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e3132332e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:73:d6:1c:3e:5f:cb:54:ad:9e:c1:f0:83:58:37:da:bb:
         00:a3:aa:8e:62:63:b6:8b:5b:01:fd:6b:05:08:aa:96:63:53:
         49:cb:aa:4b:df:0e:dc:cd:01:ff:ed:fa:5d:6b:0d:b4:35:a1:
         2d:cb:c2:73:21:91:41:a9:b1:3d:b8:8d:4e:1d:ca:88:18:37:
         4a:5c:a7:ae:14:f4:20:02:77:7d:0f:47:4c:53:a9:77:5b:b5:
         57:9e:fb:8d:c2:fe:24:d6:df:82:c0:24:68:6a:fd:d8:26:e5:
         4f:7c:3c:c2:78:2b:a3:75:2b:79:38:60:8a:ef:c8:fa:b3:6e:
         43:86:82:31:35:8e:4e:db:7d:d2:3a:34:e2:95:19:54:1c:2d:
         fa:a2:02:ae:63:97:e2:ed:7a:16:60:67:05:b1:bd:6c:dd:08:
         3c:c6:49:e0:1f:28:c4:b6:fb:2a:d8:96:fe:5b:b6:19:c9:c0:
         a2:d2:cb:d9:69:7d:24:59:8c:b0:1f:1e:e6:92:c8:c6:95:e4:
         e7:81:8e:45:83:bb:45:07:8d:65:e0:d2:eb:b3:ab:ab:30:4b:
         10:85:5d:2f:ac:20:fc:5e:83:d0:60:86:1e:6f:9f:81:d0:56:
         d0:f8:23:1d:21:d8:40:05:88:09:41:40:39:ba:e1:2b:90:51:
         c0:03:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----