Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32302e302f32342d3234203d3e20313432303336.roa
File:                     3231362e3234362e32302e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          +nTqF+yhhjcSVGQN4x1tuHL0YAIVNgQkI7IlCn8anzc=
Subject key identifier:   8C:07:B3:AB:79:D8:87:E5:45:AF:41:8C:F5:8C:08:53:E7:4F:C3:2D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       070C05964DE2E09C05B1B4D683F12DB230952006
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32302e302f32342d3234203d3e20313432303336.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     142036
IP address blocks:        216.246.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0c:05:96:4d:e2:e0:9c:05:b1:b4:d6:83:f1:2d:b2:30:95:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=8C07B3AB79D887E545AF418CF58C0853E74FC32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:b1:8b:2a:83:a0:eb:44:d4:b3:1d:99:45:
                    91:4c:26:05:f7:53:e1:04:4f:ab:b1:44:1f:e7:05:
                    c0:5b:62:6c:c1:02:c0:2d:be:ce:28:5d:22:96:75:
                    bd:4c:bb:6a:58:36:38:20:5b:b2:e5:12:c0:1f:cb:
                    d2:4d:71:7a:a4:5b:57:b1:db:7e:28:31:93:86:36:
                    42:17:b0:c9:ac:9a:ea:6d:8d:6f:a7:38:63:a7:53:
                    d6:d7:f2:bd:9d:df:1f:a3:25:f0:cd:f6:2c:08:a8:
                    6e:24:d6:27:a5:96:aa:fc:a1:d7:d8:8b:9e:fe:9f:
                    19:a4:ac:a3:31:a7:de:99:18:6d:5f:1e:2d:ee:17:
                    78:7d:45:b1:12:e3:c0:65:5d:a3:62:1b:eb:4b:aa:
                    4a:5d:2e:46:73:f9:ab:b7:06:46:6b:72:b5:8e:c2:
                    9c:94:54:38:21:ca:3c:db:e5:2c:41:7d:48:27:2b:
                    79:ec:09:99:be:41:05:d6:21:ce:93:8a:16:33:e7:
                    31:70:16:a8:7b:39:62:a0:8a:53:ef:a7:0d:87:c0:
                    e4:af:2a:f3:d0:4e:5e:a5:ff:24:65:5a:ea:ea:85:
                    e3:2e:fd:ab:e0:21:9b:a1:39:01:65:9b:bc:2d:43:
                    39:d9:e9:4d:63:0c:3e:08:dc:3d:7a:7b:1c:89:d5:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:B3:AB:79:D8:87:E5:45:AF:41:8C:F5:8C:08:53:E7:4F:C3:2D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32302e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:22:53:25:d3:c3:7b:b6:ea:ec:44:cf:85:2c:3a:65:bc:
         aa:0b:e2:ec:68:32:26:9c:f0:f6:dd:16:2d:99:8c:d4:0b:b9:
         9c:3f:b3:96:41:10:55:10:ba:30:44:7a:c1:fe:a9:f5:bc:6b:
         14:db:a1:1f:96:c2:d6:24:62:0c:53:e1:36:5d:51:52:c8:28:
         7d:31:b5:bb:90:09:0f:94:0e:1a:a6:06:4b:8f:4a:62:b3:ed:
         60:3e:50:ae:14:7b:8d:21:f4:ee:22:57:74:52:a3:44:6d:58:
         1e:aa:03:31:9d:42:2d:3d:34:6e:0f:81:34:73:8c:2f:ef:1b:
         97:76:9b:d3:be:82:4b:b6:7d:06:9a:80:0c:e6:72:ee:66:44:
         25:29:0d:a6:73:0b:44:6a:cb:5c:c7:f7:ec:63:68:1c:cb:2d:
         bb:77:5b:99:e7:bf:65:01:f2:ef:75:07:f4:f2:df:24:74:48:
         38:76:f6:71:4d:2d:0d:1a:3c:a0:20:a0:b1:71:91:f2:b7:b4:
         70:40:87:ac:03:59:01:95:52:ad:9e:f8:ae:5b:f3:1d:66:83:
         cc:4b:d5:c3:a0:7a:d6:9e:1b:d7:7a:c3:7c:9a:da:9b:88:93:
         cb:d9:24:56:84:46:8e:0a:20:c1:3a:32:61:60:c4:8e:46:6d:
         39:43:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----