Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33322e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e33322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          Bnk7ESJWKloGiNzPXRH6iiucxPyfsBB+yTKzsX98H+c=
Subject key identifier:   D4:8B:F7:4B:0E:EC:28:EA:CA:D7:49:72:B2:68:A2:26:F9:25:BF:7B
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6FA47C87CBCE4589909E9675FD579360362A4F60
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33322e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:33 +0000
ROA not before:           Fri 15 Nov 2024 18:34:33 +0000
ROA not after:            Fri 14 Nov 2025 18:39:33 +0000
asID:                     212238
IP address blocks:        216.246.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:7c:87:cb:ce:45:89:90:9e:96:75:fd:57:93:60:36:2a:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:33 2024 GMT
            Not After : Nov 14 18:39:33 2025 GMT
        Subject: CN=D48BF74B0EEC28EACAD74972B268A226F925BF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:7f:cf:e9:94:1f:11:fd:67:88:67:84:67:
                    db:96:d6:b4:f1:2b:85:de:8c:9c:d9:e8:a1:7a:e7:
                    19:05:1d:42:36:a7:73:3e:4c:cc:2a:f1:a6:1f:b0:
                    56:57:4f:31:45:bc:b1:bc:58:c3:67:db:fa:ce:ae:
                    b2:c9:e4:14:71:8a:ef:26:65:65:d6:ce:3d:29:99:
                    eb:c3:9d:69:26:26:d8:58:b9:aa:a0:f2:6f:a2:6d:
                    13:1a:ba:5e:d6:49:00:58:c3:41:51:38:28:6c:b7:
                    cf:56:a2:fd:0a:24:be:a7:8f:44:43:e1:dd:02:66:
                    12:ca:df:a1:a5:8c:24:9b:83:c3:bc:52:53:73:02:
                    c9:4c:7e:40:84:f5:86:b5:2c:70:ad:aa:d3:60:e4:
                    8e:36:1c:f7:d2:b5:9b:dc:02:c6:bf:96:71:f9:e9:
                    99:e0:b9:2a:2e:dd:8e:69:9e:c9:ad:67:50:f5:ab:
                    a6:a2:1c:0a:d1:62:e9:b8:90:41:1f:56:e3:c7:5a:
                    c3:82:43:5d:92:16:eb:4e:4b:29:57:df:7f:60:31:
                    ed:4d:1d:75:fb:68:29:ab:16:9a:79:e6:f9:54:c7:
                    3d:77:c3:b9:cb:09:db:9e:f1:b2:ed:f6:48:aa:dd:
                    ef:2c:2e:b7:d2:9e:18:9b:09:8c:c7:54:26:30:3a:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:F7:4B:0E:EC:28:EA:CA:D7:49:72:B2:68:A2:26:F9:25:BF:7B
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e33322e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:f1:22:48:b1:79:a2:84:8a:c9:b3:5d:59:57:19:40:3c:
         04:25:52:9d:cb:70:f1:08:b5:ac:79:26:50:f9:5f:46:72:bd:
         dc:87:20:c2:0d:f2:66:46:25:98:15:28:95:9d:c6:46:93:de:
         3d:5f:f2:b0:2a:44:c1:50:e0:c8:f7:1d:67:27:aa:79:fc:5c:
         5a:9b:fc:8f:0b:e5:0c:c8:d7:35:2f:3f:30:7f:5a:cf:ae:f5:
         6a:bd:8f:7c:dd:45:4d:83:3a:a3:d9:40:66:e0:74:94:8d:1e:
         6e:8b:04:93:04:d5:02:1d:4d:c6:0b:5c:15:51:c6:c7:7e:3a:
         4d:fa:01:6a:a7:da:18:32:2c:c0:6b:07:49:0a:f5:90:af:46:
         13:5d:c4:0c:e4:68:b1:35:5f:97:cb:4c:c7:74:1a:92:e1:08:
         c8:1a:dc:c7:3a:ee:ab:13:2f:60:24:89:29:2d:69:76:36:d7:
         c1:85:95:33:8c:14:df:ef:f1:1c:84:73:ae:18:e4:6a:71:45:
         1b:0c:21:23:79:c2:03:e6:e5:7a:5f:9f:7d:25:96:b7:f7:4c:
         2d:6a:63:4d:b2:93:b9:88:7c:7c:b0:fe:45:f4:41:a8:38:22:
         82:af:80:ec:8f:5a:0a:f0:c9:b2:49:96:f3:46:a4:34:6d:41:
         d7:52:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----