Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e20333936333536.roa
File:                     3231362e3234362e322e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          hXosunds2oz7/nMtXqFdnmkC4lBkG3Pq3zaeCeYMJPk=
Subject key identifier:   4B:0E:61:98:4E:87:C3:52:0A:8B:62:7B:14:1E:87:CF:69:CE:C9:58
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       1DD55FC8FB6679F364122CA1BF55A775CB99DF06
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     396356
IP address blocks:        216.246.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:5f:c8:fb:66:79:f3:64:12:2c:a1:bf:55:a7:75:cb:99:df:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=4B0E61984E87C3520A8B627B141E87CF69CEC958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:33:53:1e:bf:ac:4d:4d:11:04:d0:50:74:
                    d2:51:7c:1b:37:f2:22:37:36:ce:6e:00:e1:46:0a:
                    b8:f1:f9:0a:ab:e4:5b:c2:40:82:40:bd:f4:c4:87:
                    8a:e4:49:1c:64:8d:b2:d8:3a:51:23:89:6d:dd:33:
                    b0:42:79:19:c8:98:3b:29:25:d9:b7:fe:38:9f:b8:
                    f0:70:17:c4:29:80:9c:4f:15:fc:f1:3d:c5:83:96:
                    80:0d:ad:61:9c:66:d6:cd:2a:43:e4:cf:9a:80:0d:
                    f9:27:35:74:20:0b:c3:a6:8f:d7:e8:cb:d5:71:54:
                    c4:cc:9c:1a:c3:76:4e:76:98:95:82:a2:61:b6:50:
                    1c:f3:ec:56:88:47:32:d4:ce:08:a5:59:20:bd:7f:
                    d3:29:22:74:f1:64:32:c5:d2:d6:ad:e9:cb:5a:d8:
                    b3:b6:b1:9d:69:e3:f3:78:59:be:fe:38:c7:7b:32:
                    d7:27:ec:62:df:5b:a4:e3:2b:d5:70:31:4f:75:d1:
                    8d:ed:01:bb:97:95:25:ff:43:b7:51:b7:29:8a:f8:
                    0b:23:b6:a4:37:96:c9:ac:fb:ba:f7:61:cb:bf:a5:
                    46:8b:72:aa:b8:2c:f9:6c:ad:76:8b:c9:98:f0:76:
                    de:25:2d:ed:46:d4:33:db:87:79:cd:92:81:16:4d:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0E:61:98:4E:87:C3:52:0A:8B:62:7B:14:1E:87:CF:69:CE:C9:58
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:1d:6a:e3:90:36:df:9c:9b:34:e4:3c:4d:eb:16:2e:ab:b4:
         5b:09:f1:f9:a4:20:fd:73:5f:98:4e:a3:ed:04:fb:f2:96:a2:
         33:bf:e8:08:7c:c6:c4:77:dd:93:dd:ad:1d:d5:8e:0c:9f:43:
         c9:6b:82:52:38:10:64:27:ca:9b:33:8b:4a:39:12:6d:44:55:
         6d:23:1f:a0:eb:43:d2:1a:34:70:32:be:8a:b4:13:eb:5d:8e:
         18:12:cc:05:f1:9d:ea:be:25:83:9d:ab:90:6b:64:ef:5d:76:
         b5:6e:67:13:95:7c:75:b8:db:9a:f0:f1:d2:76:aa:7a:cd:da:
         c4:94:67:e3:1f:75:b5:2a:23:4e:16:15:39:5b:21:03:5b:9d:
         4e:a4:c7:05:ec:0a:7c:15:18:69:85:e8:17:88:e3:74:fe:61:
         df:e9:55:1e:e0:88:6e:37:da:6a:da:ae:68:3d:a3:bc:5e:75:
         b2:0f:cf:93:41:39:61:fd:00:96:a8:72:4b:ee:22:2e:9e:47:
         ef:a6:e8:f8:b8:81:bf:37:82:c8:5f:a0:eb:5e:ab:7e:c6:de:
         49:ec:b5:49:18:92:a8:7b:1e:ff:f6:ea:77:7f:86:4c:4d:84:
         66:61:20:15:80:e5:f7:2b:56:6e:c3:17:e3:ee:23:0f:64:0c:
         eb:51:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----