Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32322e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e32322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          BvbE5WultiKn2/pOQpK7IOILMfGqbvTaBeVPeRwSs/U=
Subject key identifier:   BC:C4:2C:35:26:51:DA:EC:78:DE:3A:71:45:6C:13:0E:C6:B6:1E:9A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7B3B0B1E2E9895CB1DBA6E169551CD34C27C1D22
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32322e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:0b:1e:2e:98:95:cb:1d:ba:6e:16:95:51:cd:34:c2:7c:1d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=BCC42C352651DAEC78DE3A71456C130EC6B61E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:ec:ea:75:14:d3:de:5f:92:7c:c8:c3:85:
                    c1:bb:19:f2:d2:83:65:3a:60:f2:35:77:9a:71:7a:
                    92:92:3c:44:00:1e:bc:f8:56:c4:8e:b8:1e:1d:18:
                    e7:2c:f1:2f:3a:e4:ab:94:07:39:62:7c:5d:00:4e:
                    6d:84:24:37:66:56:1f:f1:e0:3f:4f:98:c7:10:0c:
                    8e:00:24:b5:3e:48:27:41:42:b8:03:c6:f2:d7:0f:
                    36:d1:2c:37:a6:9e:e3:6b:8f:4d:b2:cc:40:db:3a:
                    ad:f2:a6:cc:74:b5:2e:a8:e5:80:33:14:cd:86:f9:
                    81:50:70:e8:47:32:7f:fb:c0:51:26:89:dd:da:96:
                    ae:30:fb:8a:8b:4c:23:44:01:45:c4:b0:4a:b6:fe:
                    14:ea:66:09:99:b3:11:75:b9:d9:ae:cf:db:80:11:
                    31:1b:1f:59:5e:bc:8f:4e:a9:52:d7:e9:de:fd:b7:
                    27:20:52:d9:da:be:20:af:f5:2d:f4:97:33:1f:3f:
                    04:79:df:3d:f1:1b:e7:6e:b0:8c:3d:9e:9b:34:eb:
                    2c:10:ce:dd:f0:d8:8b:f3:fc:3e:04:01:84:17:16:
                    45:87:d9:23:c6:a2:b6:d7:e7:6d:9a:6c:c5:22:44:
                    8f:5b:89:fc:5f:6a:46:6a:56:59:36:09:52:8c:4f:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:2C:35:26:51:DA:EC:78:DE:3A:71:45:6C:13:0E:C6:B6:1E:9A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e32322e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:db:c1:77:73:96:0c:5f:78:49:65:f8:58:18:c7:59:88:40:
         bc:14:a9:94:2f:95:84:0e:0e:67:ed:e7:9a:d2:e3:83:bd:f8:
         59:cb:59:8e:0d:c4:f1:15:84:4e:7f:12:f8:2e:b7:be:8b:e3:
         8b:ae:89:a8:b5:08:53:ed:21:a9:6c:d8:15:d5:69:64:6d:be:
         78:bc:76:03:55:94:2f:9e:30:df:bf:cb:fc:02:5a:e1:b2:ef:
         2d:48:6d:1f:8b:57:aa:49:1f:ad:c3:5b:f5:54:e9:99:02:a6:
         b5:22:4a:36:0c:7a:54:9f:f6:0f:5d:08:2a:74:29:4d:03:fd:
         38:e2:ab:8d:52:a1:85:db:18:92:b6:8c:30:b3:2a:2b:8e:a8:
         55:f3:57:ae:b1:f4:e4:c8:fd:cf:47:b3:4b:da:cd:6b:9e:67:
         fc:1e:75:0a:ad:dd:76:39:77:2f:21:76:af:ae:b6:54:ac:cd:
         3f:a2:be:63:b6:df:06:9d:ee:67:36:d3:95:24:6d:e1:6f:d5:
         ef:0c:f1:27:1e:0d:9c:9b:75:b8:20:a1:b5:06:5e:e4:4c:11:
         95:49:ba:03:2a:78:66:04:f4:85:0f:b1:ac:30:14:45:1b:7e:
         c3:79:6f:5d:4a:81:ee:c2:d5:19:f8:a3:49:bf:4e:fa:c1:97:
         c5:2d:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----