Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36362e302f32342d3234203d3e20313432303336.roa
File:                     3231362e3234362e36362e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          6roCFmQHErMiJAA8QEFkofEg3R+K4WD3jl3ksixwUQw=
Subject key identifier:   D4:DC:B5:EF:10:DD:DB:13:E6:BC:A5:6A:48:7A:61:D3:F0:A0:AB:87
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       148766CB9A105A4D3617551D4007604033E66058
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36362e302f32342d3234203d3e20313432303336.roa
Signing time:             Fri 15 Nov 2024 18:39:31 +0000
ROA not before:           Fri 15 Nov 2024 18:34:31 +0000
ROA not after:            Fri 14 Nov 2025 18:39:31 +0000
asID:                     142036
IP address blocks:        216.246.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:87:66:cb:9a:10:5a:4d:36:17:55:1d:40:07:60:40:33:e6:60:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov 15 18:34:31 2024 GMT
            Not After : Nov 14 18:39:31 2025 GMT
        Subject: CN=D4DCB5EF10DDDB13E6BCA56A487A61D3F0A0AB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:9e:72:85:54:55:5c:ad:3a:a3:a4:eb:7a:
                    e9:3c:65:2d:58:bb:04:95:e1:a7:66:c7:27:e6:f2:
                    01:e3:6f:ab:45:0b:e9:75:3b:f1:19:27:1e:e1:2c:
                    e2:90:39:c4:4e:a5:73:77:3f:38:92:dc:6c:48:33:
                    d2:8d:6e:29:8d:d5:ef:68:bb:a4:a9:b9:98:13:58:
                    ed:5f:e1:99:c6:78:9c:dc:7a:de:16:a5:fc:8e:d9:
                    0a:c9:88:a0:a0:de:e4:49:48:28:bb:5d:0f:ec:97:
                    54:9f:36:e6:dc:8d:f7:59:99:db:f0:93:7a:7b:79:
                    32:41:e4:89:0d:1a:a9:d7:df:82:0b:44:3d:c3:34:
                    e7:14:2a:95:fc:bc:6f:98:a0:23:6a:66:89:3a:7d:
                    fa:e8:1d:ce:36:42:52:85:83:8d:05:92:c6:9e:31:
                    44:05:87:cb:ec:04:47:02:6b:f3:7c:f2:4e:d6:fb:
                    48:d4:3d:7d:a9:71:36:60:72:e3:f2:70:d8:03:70:
                    0e:2b:3a:b1:6a:4b:93:ab:96:81:e0:13:41:65:b4:
                    90:9a:6c:81:31:33:44:ac:0f:be:07:95:84:f5:09:
                    53:7a:3f:1c:3c:b0:c4:f5:74:d4:c3:bc:cd:8d:3f:
                    4f:a7:c6:b5:f2:45:85:2b:50:ae:fe:88:51:a8:0a:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DC:B5:EF:10:DD:DB:13:E6:BC:A5:6A:48:7A:61:D3:F0:A0:AB:87
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36362e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:2d:9b:63:93:44:34:dd:76:03:ec:1d:06:68:b9:69:1a:cc:
         a4:ee:fc:7e:1c:d7:35:63:0c:a1:15:20:c5:25:32:a0:ba:06:
         3d:73:79:1a:54:79:8f:85:4b:74:1a:3e:6e:69:a6:fe:bc:ed:
         15:ba:22:a2:02:b1:d5:6d:f6:2c:c2:3a:04:96:d4:b8:72:d5:
         88:ac:70:82:c8:76:7a:2c:0f:9e:80:6b:df:25:00:1a:7f:ee:
         b7:de:fb:91:0d:62:69:a0:b2:8d:11:da:7e:68:b9:53:51:a6:
         dd:62:b2:3c:45:06:4d:ed:5f:9f:5c:bf:ad:20:59:ba:49:21:
         5f:f4:db:24:8a:35:df:85:29:71:2c:8e:71:12:40:86:0d:f2:
         36:37:36:e5:b4:c6:4a:e5:ca:a5:b6:e4:07:b6:33:f6:2c:ee:
         8d:1c:b7:1e:51:45:45:1b:4f:01:30:ee:2d:c2:e0:94:6e:02:
         f8:34:01:83:18:5a:74:e2:f6:ca:31:26:a6:c7:75:7f:5e:e5:
         5a:d2:da:8d:4c:e5:f1:cc:ce:84:4f:23:ae:a9:58:db:51:c9:
         b9:d9:70:fe:6e:99:02:58:b4:bc:7f:d1:34:4d:15:0f:49:1a:
         f7:2e:de:34:75:2e:36:50:ae:96:3d:e1:49:ca:8e:f8:8a:29:
         18:b1:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----