Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e31332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          w1MPs7HbG+YWFXrIZYperh1hRzLw/aXonXT/BgyjMZs=
Subject key identifier:   3C:85:FD:95:73:15:40:95:55:1D:66:76:97:BF:7D:58:E3:2E:A4:E2
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4424CA1340C72304A96FB8F669F18DACC217E037
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:24:ca:13:40:c7:23:04:a9:6f:b8:f6:69:f1:8d:ac:c2:17:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=3C85FD9573154095551D667697BF7D58E32EA4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:14:ff:44:0e:2b:08:20:a8:0d:e1:f3:6c:
                    4f:a4:c5:df:0c:1b:83:1a:a7:ab:e4:c6:47:00:3f:
                    dc:e9:b8:10:c7:25:60:3f:c1:c9:d4:f3:c2:8b:59:
                    d8:44:a6:ea:6d:0b:9a:e9:77:4c:01:1a:28:bd:08:
                    c7:de:71:81:81:35:db:a1:32:71:6e:8d:f5:86:18:
                    84:93:d6:90:bc:fb:d2:71:20:6b:a4:41:da:0e:46:
                    ef:06:dd:b3:94:69:6b:84:60:22:6d:00:1a:39:c5:
                    d9:ec:35:30:24:e7:1b:b5:39:c7:d7:86:70:11:be:
                    6d:31:ea:96:5f:26:64:5e:20:2f:a1:2b:e2:37:83:
                    95:a5:00:6b:42:d6:06:86:59:2c:8b:66:28:70:60:
                    56:a9:f3:43:a0:8a:44:9b:da:b7:e4:9f:d9:d0:9a:
                    32:ce:b6:8b:23:3a:40:71:d2:b9:70:28:60:de:69:
                    fe:65:d1:e5:3c:e7:52:88:71:86:bc:86:52:95:1e:
                    ec:aa:a8:bd:eb:fa:2c:6a:36:c8:3b:3b:7e:dc:2a:
                    52:71:dd:42:09:00:85:a6:22:d0:86:e2:d3:20:0c:
                    f8:7e:d0:00:97:21:d8:82:02:5a:73:9c:e5:9c:4b:
                    bf:45:67:ce:65:05:03:8d:33:ec:54:31:3c:af:7e:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:FD:95:73:15:40:95:55:1D:66:76:97:BF:7D:58:E3:2E:A4:E2
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:50:5f:40:1b:20:e6:25:74:4a:f8:b2:0e:a1:63:26:a0:
         6f:f3:8a:8c:25:54:7e:5b:73:6d:bb:99:75:ae:d4:5a:f0:11:
         0b:e8:4b:04:16:75:71:eb:6a:33:74:4d:a8:08:cd:0f:8b:4a:
         94:37:cc:c1:62:2d:0b:2b:5c:81:f6:c8:d7:88:00:86:22:13:
         f9:db:85:e3:dd:b4:19:b4:21:e2:c9:e5:ee:47:0b:36:ee:30:
         b0:fd:80:05:3c:d7:aa:2a:cb:02:07:af:29:50:48:b4:ab:74:
         f2:30:42:dd:e2:27:ea:09:85:09:6b:e8:39:82:be:db:19:33:
         6c:17:97:cb:a6:f5:ec:a2:14:97:c2:04:5d:b9:bf:d2:71:33:
         93:89:80:23:dd:7f:4a:65:9c:ed:c8:21:96:06:5a:1e:1f:2b:
         bf:2e:07:ab:a9:92:ab:fb:56:25:58:1e:37:83:10:28:12:e5:
         c4:a6:da:49:0d:f3:4b:23:67:2d:a2:66:d2:75:7d:ed:62:c1:
         02:5d:21:ea:ce:92:4c:93:48:a7:35:0d:f3:94:f7:0e:90:65:
         00:3a:b7:b0:bc:0a:0d:c5:29:5e:b4:38:49:e9:e3:86:68:30:
         35:46:19:5d:43:9c:35:d9:c1:d2:fc:82:23:4d:96:cc:6d:49:
         59:b2:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----