Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35362e302f32342d3234203d3e2035303635.roa
File:                     3231362e3234362e35362e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier:          nbWi5o5232a3yeIM1YoeVth6bkRmI4scyG/stMLx9XE=
Subject key identifier:   B0:BB:B7:AC:B4:DD:26:C8:7B:AD:ED:47:D2:87:9A:34:00:5E:79:E4
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2271B4E1D02BCF00B26C7072400BA863E65068F2
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35362e302f32342d3234203d3e2035303635.roa
Signing time:             Fri 15 Nov 2024 18:39:32 +0000
ROA not before:           Fri 15 Nov 2024 18:34:32 +0000
ROA not after:            Fri 14 Nov 2025 18:39:32 +0000
asID:                     5065
IP address blocks:        216.246.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:71:b4:e1:d0:2b:cf:00:b2:6c:70:72:40:0b:a8:63:e6:50:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:32 2024 GMT
            Not After : Nov 14 18:39:32 2025 GMT
        Subject: CN=B0BBB7ACB4DD26C87BADED47D2879A34005E79E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:02:36:97:52:90:c8:19:ff:a4:6b:62:35:
                    13:2e:5e:c5:33:3e:b1:a7:37:f7:05:a1:38:f2:14:
                    5a:1d:ee:07:43:87:ae:6f:a7:48:55:d6:c7:a6:63:
                    c6:4b:3b:a2:0e:b7:cc:ec:60:0c:3d:27:c3:56:4f:
                    e0:ec:80:58:8d:bb:0f:e8:e2:ef:23:5c:1f:23:ea:
                    49:fe:a8:c1:6f:f3:b7:eb:ff:b6:a6:e3:d8:2a:e7:
                    e8:59:96:31:5a:a6:62:b8:81:11:47:b2:77:f6:29:
                    33:27:b6:5a:fe:55:6a:19:92:e2:aa:80:b9:50:e7:
                    96:48:0a:3a:64:e1:e8:62:3a:f2:9f:e2:3d:df:cd:
                    d8:73:6a:02:8c:a8:62:5d:94:e6:31:e9:7d:93:5c:
                    f7:59:8f:ac:13:a5:40:3f:6a:73:30:1d:13:b1:88:
                    6d:8d:44:4b:49:ea:fd:f6:8d:ef:26:2f:04:58:00:
                    cd:fa:fd:cd:5f:78:52:22:df:02:40:ba:2d:94:c2:
                    eb:4f:95:ea:b9:d3:40:b6:ae:b6:cb:d3:c8:86:f4:
                    b0:be:fd:19:0f:61:00:54:a4:d8:ac:3c:6c:39:ef:
                    f8:dd:45:8a:67:85:50:45:c6:a3:87:c3:bd:76:6f:
                    8c:af:8e:87:6a:b3:6b:54:ae:87:0b:fb:bf:2c:04:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:B7:AC:B4:DD:26:C8:7B:AD:ED:47:D2:87:9A:34:00:5E:79:E4
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e35362e302f32342d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:32:9a:f4:8a:04:de:0e:9c:ec:bb:16:ca:34:af:c6:c1:d1:
         65:b5:bc:85:76:0c:11:45:56:79:9a:84:56:cc:fc:0b:19:1b:
         1a:fc:cd:b5:9d:7d:0f:56:cb:d3:0f:3c:cc:a3:2d:ab:88:ce:
         d1:f8:1f:c9:cb:e2:6c:53:58:35:78:57:42:d6:2c:d0:11:7e:
         45:02:e5:ea:c4:82:db:ed:d4:19:99:1c:3e:fa:a9:29:61:61:
         6d:e2:1f:e2:f4:42:54:fb:13:2d:80:f4:09:ff:03:01:67:95:
         06:35:8a:e3:c6:74:9f:55:54:73:6e:09:2c:63:c1:98:1d:fe:
         95:e9:a5:f6:16:ad:f8:86:c3:fc:35:e6:8c:5f:26:f2:ae:4b:
         56:a2:ce:1d:91:13:c6:9f:a8:c9:5b:2c:1b:6d:f6:4e:88:f3:
         27:f1:21:41:3a:ea:61:e5:7f:47:0c:d4:bb:1e:8c:c9:f1:08:
         54:39:c7:fb:d4:e2:24:08:ea:2b:b6:a9:be:7b:fc:b4:33:36:
         ef:25:03:58:00:43:85:5d:0b:8f:bb:92:e7:c8:c0:03:c7:17:
         2a:95:df:0d:33:4f:75:3b:6a:ba:7e:82:00:bd:b1:8c:69:db:
         fc:68:35:69:c0:ef:20:61:3f:00:42:d9:6f:13:37:aa:91:cc:
         e3:20:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 21:08:47 2024 by rpki-client on console-fra.rpki-client.org