Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35352e302f32342d3234203d3e20323132323338.roa
File:                     3231362e3234362e35352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          xf1I2j99YT34a4L74WMHWFMrWb0VyYd3tZrlFac3rrc=
Subject key identifier:   EA:7F:01:27:34:BF:BC:C2:87:F0:EE:DA:9D:85:48:EC:93:2F:80:14
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       4678C4EF50E7B321CE9014B525224A4A62EBBAA3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35352e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     212238
IP address blocks:        216.246.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:78:c4:ef:50:e7:b3:21:ce:90:14:b5:25:22:4a:4a:62:eb:ba:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=EA7F012734BFBCC287F0EEDA9D8548EC932F8014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:8c:06:95:1d:b5:7c:a2:4e:f3:7a:f3:74:
                    ce:ee:00:9b:e5:69:f1:85:6d:e1:49:d0:09:d5:31:
                    b1:c9:17:5a:30:a9:f7:f4:f2:5e:be:90:a9:03:69:
                    43:56:bb:2a:fe:e5:c4:20:70:d6:55:9e:75:89:90:
                    6a:24:27:6b:85:7e:c3:7f:56:26:15:c0:50:6f:b7:
                    22:7d:26:6d:a4:2b:2e:73:f1:d6:94:c2:08:9b:af:
                    dc:27:a9:42:c6:29:4d:d7:84:da:28:aa:70:16:bc:
                    97:37:24:d4:2b:e6:6f:27:a4:b9:ce:46:5e:8a:ac:
                    f1:e9:de:cb:d6:ce:d1:f4:d0:39:13:bf:dc:08:20:
                    a8:dd:34:75:89:18:71:77:60:eb:4d:ba:5a:67:3d:
                    aa:8c:ee:d8:23:58:98:57:ab:5f:19:61:95:a4:c5:
                    0b:74:28:6a:2b:01:31:28:10:fc:19:dd:0c:17:ad:
                    82:c6:10:ce:bc:a2:dc:d7:e6:5f:b5:0c:40:8c:b5:
                    cc:46:5a:4a:c4:cb:44:e6:8e:08:18:2e:3a:7f:a1:
                    3a:5f:7c:16:64:a8:09:fa:53:ac:42:53:4f:19:72:
                    28:75:03:23:a9:09:3b:c3:2c:8a:e2:c6:8a:58:61:
                    f8:6b:5e:07:04:27:7d:07:ce:39:e7:60:ea:7b:b8:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:01:27:34:BF:BC:C2:87:F0:EE:DA:9D:85:48:EC:93:2F:80:14
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35352e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:59:d6:21:c3:2c:36:f0:01:ee:64:26:63:f0:94:4e:c8:
         a1:44:8a:2c:71:7d:5b:5a:ed:53:f3:6f:63:a2:ea:b2:c1:76:
         ce:6f:28:d5:46:54:61:24:66:4b:11:7c:1b:6b:a0:12:a5:5c:
         c2:a4:e0:9d:65:10:84:31:7e:15:7c:30:f2:9b:ab:cf:e3:f8:
         a4:b5:32:70:35:71:29:cf:dc:dc:5f:5b:01:d8:cd:3e:84:9b:
         8f:3d:bd:b9:14:2b:b4:a3:ff:3c:22:a4:63:d7:1f:fe:2d:0f:
         51:f8:21:2f:c0:ec:40:5e:2c:cb:a1:ba:7d:a4:af:a4:be:dc:
         05:4e:29:7f:f6:31:da:87:30:83:af:db:7c:49:1d:cd:92:75:
         48:1d:e3:96:8b:f4:6b:c7:a1:a1:49:64:42:c3:76:a6:85:0e:
         7d:83:3b:fe:30:d2:8f:e1:c0:b3:1a:19:dc:1a:ce:9b:11:5e:
         22:d8:a3:6e:8e:88:3c:01:72:95:e9:c5:fe:10:32:9d:ed:b2:
         8a:3f:70:a7:a2:a4:25:bb:98:dc:07:f8:46:ae:1d:25:d6:fa:
         b1:d6:fc:a8:40:f2:3f:98:2a:19:f7:80:9f:19:af:20:da:42:
         6d:36:c2:f7:37:87:0a:8f:92:79:99:0a:92:ca:35:46:63:fa:
         a6:f8:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----