Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34322e302f32342d3234203d3e20333936333536.roa
File:                     3231362e3234362e34322e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          W+w+UTfsJHVZK9EPh0NlqUCbTe5zUyzzzv7TZ7ESx9A=
Subject key identifier:   71:E4:7E:B5:7D:BE:C7:4C:88:F3:00:E1:93:13:3B:46:6B:75:40:26
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3DEBC6123AB7C73432B95E2C3BFEF487AB3B3982
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34322e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     396356
IP address blocks:        216.246.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:eb:c6:12:3a:b7:c7:34:32:b9:5e:2c:3b:fe:f4:87:ab:3b:39:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=71E47EB57DBEC74C88F300E193133B466B754026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:a7:b9:f7:d7:79:35:63:55:06:06:64:c4:
                    8b:e2:65:7a:3d:cf:8c:11:bc:b3:2a:71:f3:f4:65:
                    45:a0:2f:28:53:b4:ff:aa:2e:fb:36:d7:df:a7:5b:
                    4a:51:0c:8c:4b:63:bd:7e:60:38:8a:85:ae:65:47:
                    c9:c8:6a:86:9d:96:5d:2e:c4:ec:5e:08:c8:07:4a:
                    7b:62:a3:fd:69:0d:2c:85:38:28:21:bc:1b:c0:22:
                    28:01:27:23:35:4d:1b:73:fc:5c:c0:51:57:ce:5e:
                    98:51:25:85:03:a1:64:d3:0d:66:00:d8:91:2f:b0:
                    e8:bb:0f:e3:ce:d0:1e:56:ca:af:d9:c2:ef:aa:2b:
                    f1:31:f6:ee:1d:d7:ba:a4:e0:fb:77:9d:24:ae:db:
                    d8:dc:3c:1b:54:af:be:d0:6f:c0:47:8c:01:0b:ab:
                    9b:14:c9:2a:3e:4a:06:6b:fc:8b:8b:fb:f8:2a:29:
                    81:f9:ea:00:28:19:28:36:2b:f5:32:ad:c0:6c:cc:
                    de:0d:a2:9b:a5:cc:cb:4b:79:10:ce:1b:60:a9:f3:
                    97:28:72:45:e5:4e:e8:74:01:a4:14:da:1e:d4:dd:
                    e5:3a:98:b0:0f:d7:47:59:ae:04:b0:25:e0:3c:c6:
                    c9:c7:4c:ec:3c:6d:14:85:63:d8:cb:42:5d:fc:16:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:7E:B5:7D:BE:C7:4C:88:F3:00:E1:93:13:3B:46:6B:75:40:26
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e34322e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:5c:62:8b:fe:3b:44:fd:69:3b:38:77:fc:1d:46:6b:fc:
         0b:93:48:46:6c:a5:77:a7:de:33:5a:61:f0:e6:18:da:e9:e9:
         a5:51:48:fc:d3:c1:6e:ec:3a:5c:1b:67:06:3d:b8:77:21:77:
         4c:0f:47:2e:41:be:d6:40:66:ef:bc:65:85:23:e5:be:07:48:
         c8:9e:dd:42:1c:d2:03:70:41:ea:bd:11:9e:e1:63:14:d7:80:
         f2:58:b4:27:aa:04:cf:66:bb:92:ad:d8:b6:7f:52:35:a4:72:
         01:1d:7d:c4:21:92:c9:4c:88:0a:49:48:8b:52:74:db:83:dc:
         90:f9:a5:fe:7e:57:9b:fa:42:c3:6f:d2:f4:a6:8b:cf:1c:21:
         f0:94:45:ee:85:e4:a8:a4:35:6b:10:73:98:5c:1f:d8:33:a5:
         f7:47:fd:e8:e6:36:f8:b8:a3:02:4a:05:08:1f:d3:e5:68:e2:
         b0:20:36:27:e7:1a:06:ba:47:d4:1c:93:f5:19:e5:5c:a4:85:
         5c:d2:cf:12:2c:58:25:43:ad:ec:d0:e6:73:5e:34:0b:38:ff:
         ea:16:e2:0a:75:a1:08:55:b5:c4:4b:8c:95:1d:bf:4d:3f:23:
         75:08:e8:60:f2:e5:b9:c8:b6:64:ef:ad:21:06:28:ec:76:dc:
         2e:83:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----