Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          6+1ivP8zIKBDAAQkbkLZckO8rvTNCzGL7e+6AzslTM0=
Subject key identifier:   B4:38:03:5E:C5:D2:99:DE:0F:42:12:40:69:11:FD:7B:7D:99:E7:B5
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       57E04A0C19D8E0B35D36F1FE2369B9EAE5866548
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     200676
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e0:4a:0c:19:d8:e0:b3:5d:36:f1:fe:23:69:b9:ea:e5:86:65:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=B438035EC5D299DE0F4212406911FD7B7D99E7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:7b:95:f1:08:11:c9:76:5a:68:74:09:0d:
                    d0:16:1c:2e:68:b4:fc:40:d6:4f:bc:40:44:86:7f:
                    bb:86:2b:42:b5:ea:a8:d3:2f:42:33:6d:f1:06:72:
                    a0:32:79:40:87:29:c8:9c:b5:e2:46:16:a2:9b:54:
                    8e:1d:37:b3:16:82:23:19:4b:2f:1f:cd:64:5c:ea:
                    0d:56:29:0a:29:1d:09:c7:47:2b:d7:a6:dd:d9:33:
                    94:35:a5:51:a9:ff:98:a9:47:f1:21:aa:b2:63:57:
                    a6:3e:aa:48:39:3d:1d:06:e0:7b:9f:48:de:39:82:
                    94:7b:41:7d:63:0e:74:fe:e3:32:4e:fb:a7:b9:52:
                    8b:a7:23:46:d0:a2:f1:5b:67:ac:3c:29:5f:67:e6:
                    11:71:26:16:ac:e2:3f:fc:ba:ba:c0:78:18:02:58:
                    a3:29:a7:4d:25:40:2a:14:2e:fd:e4:76:99:3c:9e:
                    d6:c6:f1:b3:78:72:33:ac:a8:96:e2:a8:78:60:e1:
                    12:45:10:b8:c2:22:69:ae:4f:bd:02:86:d5:d8:b5:
                    c3:72:09:57:ba:f4:01:94:d5:de:3e:03:13:b6:0e:
                    e5:cb:78:17:36:1c:b4:fd:cf:44:02:5e:8f:86:90:
                    bc:ac:fe:c0:24:56:fd:ae:72:0c:22:a8:69:03:9c:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:03:5E:C5:D2:99:DE:0F:42:12:40:69:11:FD:7B:7D:99:E7:B5
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:31:ce:4f:29:69:66:94:17:92:09:e4:49:e3:2e:d5:09:
         28:9b:ed:58:7f:8b:5a:99:7a:e8:31:9f:29:cb:76:ee:d9:4e:
         44:8e:a2:df:16:7f:d3:e7:74:db:bf:48:88:ec:94:79:c9:df:
         1b:57:80:5e:d1:c4:a1:fa:06:b2:30:87:20:55:9e:79:c3:a3:
         57:76:8f:c8:10:e6:74:44:74:f2:84:4d:b7:48:9d:ca:12:c9:
         8f:ea:20:8a:c4:3d:71:e3:37:c6:95:23:ec:f4:90:03:d8:8a:
         fc:36:e5:65:d4:cc:ee:83:ad:5a:b1:30:e1:83:7e:0b:c1:c6:
         e0:18:3b:fd:05:b9:fd:9b:39:28:bf:2c:d2:17:b4:7f:fd:2c:
         88:34:4a:83:63:dd:bf:5a:23:8d:2b:b0:10:c3:87:27:98:eb:
         f1:59:41:d4:bb:f5:51:35:11:41:a0:b1:b4:93:7d:89:f3:7a:
         b7:ce:58:2f:0e:4b:e1:4f:2f:b3:a9:73:f0:61:d2:cc:40:b5:
         bd:17:12:f7:4a:be:72:ff:93:73:19:46:2b:7c:1b:82:51:4c:
         92:10:38:a5:d6:2f:cb:d6:89:1e:3a:af:65:7b:05:75:40:a8:
         47:71:9f:39:d4:6d:c6:c3:ac:37:ab:0c:82:35:0a:4a:00:fa:
         e0:a2:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----