Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          PykCAl1hE2pM9Ol7kpDOqZoEAAmdM2r8pfPTHADpNko=
Subject key identifier:   45:A8:2B:4B:D7:EF:8D:AE:7E:CF:4F:3F:7E:71:30:CF:31:F8:05:B8
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       3994922D00673A83A05EF319C281F05274AFF789
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     200454
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:92:2d:00:67:3a:83:a0:5e:f3:19:c2:81:f0:52:74:af:f7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=45A82B4BD7EF8DAE7ECF4F3F7E7130CF31F805B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:cc:ff:38:d5:68:67:d0:b3:07:0f:ff:72:
                    09:e8:f9:7d:9c:60:16:c6:b6:2c:0d:ca:7d:11:9e:
                    bb:f1:b1:18:07:64:e4:e7:ba:03:ca:2a:e0:42:89:
                    0d:09:8d:94:0e:fd:8d:34:ef:be:34:09:50:3d:ed:
                    0d:59:01:06:54:da:7d:47:1a:c8:23:4c:da:ac:16:
                    5f:b9:b7:ed:9f:9d:6d:61:17:87:8b:cf:a4:25:40:
                    7e:e8:8f:1a:a0:b6:7b:02:d2:16:f6:12:15:da:df:
                    b7:f7:ff:49:1b:1a:e7:96:98:52:1f:4e:2a:c5:11:
                    b6:74:87:26:f0:95:3b:3e:81:91:c0:4f:55:36:83:
                    20:00:4c:5b:b7:69:75:b0:f4:31:29:d8:7e:d2:0d:
                    88:08:7c:1d:84:14:63:ca:a4:b5:a5:39:7a:26:8e:
                    2c:85:f6:53:46:8f:a3:ec:72:42:50:01:f6:ce:2a:
                    c0:47:99:c6:c3:e6:5b:b9:f2:e2:cd:04:77:a2:d9:
                    c5:c7:8b:65:f1:39:fb:d1:5b:f6:f2:8a:54:11:36:
                    ea:71:7c:fc:41:4a:64:8e:7b:67:98:cc:ce:fb:0b:
                    dd:73:c4:e8:a0:53:c6:dd:42:69:46:87:a2:67:19:
                    7f:0e:ed:65:c7:f6:fe:3f:5a:7c:0b:a0:78:24:fc:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:2B:4B:D7:EF:8D:AE:7E:CF:4F:3F:7E:71:30:CF:31:F8:05:B8
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:d2:e0:9b:5f:67:c9:e1:44:a9:55:36:66:17:e5:36:c2:
         8a:1a:8f:7f:67:a0:3b:0a:b4:e9:e3:56:d4:9f:69:6a:47:ac:
         4a:6d:2e:b0:69:9c:2d:78:2f:17:86:9f:5f:9f:64:08:ca:ec:
         6d:16:12:21:2d:a2:07:14:83:cd:e9:5c:7c:74:39:a8:74:50:
         56:f3:17:97:9c:92:f0:6a:55:45:06:e6:ae:f1:8d:ac:fa:95:
         26:2e:86:8e:a1:b8:a5:a9:91:73:68:b7:a9:f8:07:5f:a7:2c:
         90:8c:c5:c2:8c:22:91:25:9c:03:e6:2c:32:63:11:a8:98:7d:
         a1:2f:f1:01:de:33:20:5e:4f:47:ea:25:fd:e6:c9:a4:be:34:
         ae:fc:11:0b:ba:c4:90:49:49:8b:7e:a1:0e:18:e7:fe:42:e8:
         86:a2:f0:6d:4c:7a:12:52:cc:06:dd:78:63:0e:94:8e:bc:fd:
         14:15:df:35:11:7d:70:d0:a9:0a:1c:69:fe:ac:0c:0c:e3:dc:
         6c:53:d7:31:78:31:9b:1a:65:50:60:e0:62:60:44:85:4c:2a:
         85:87:21:89:ea:55:84:23:ca:e6:88:2c:9e:b7:94:de:b7:ed:
         c3:01:ea:46:64:94:9f:db:17:49:9e:04:4d:ed:0a:07:e9:89:
         07:9d:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----