Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          MoITOP8xKdbFcPpJvZ5vdXOJgBcTlkFY/9s1czalFxI=
Subject key identifier:   A4:0F:EB:BA:2C:4D:31:D1:AF:EE:FF:A7:80:B0:C5:B0:F5:6B:45:83
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       4D2F2193A129FF5A5DD22A637DBDF02BE27EC764
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     200690
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2f:21:93:a1:29:ff:5a:5d:d2:2a:63:7d:bd:f0:2b:e2:7e:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=A40FEBBA2C4D31D1AFEEFFA780B0C5B0F56B4583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:53:67:b8:e8:66:22:0d:70:69:29:35:e4:
                    ca:5d:80:d7:c3:c2:ea:69:04:11:51:6b:c9:ed:f4:
                    93:11:a2:05:8a:e5:a2:14:48:2b:7b:c3:20:be:f8:
                    45:c7:c8:c1:a5:5e:67:da:ab:a3:7d:78:fd:a6:96:
                    b8:87:5d:3f:4f:d3:3d:46:87:cb:63:12:c3:33:bf:
                    97:b8:90:34:87:28:3e:81:88:a8:32:8a:16:1e:2c:
                    05:11:fc:ec:4a:c4:fa:f7:08:0e:e0:30:f6:4a:0f:
                    35:c5:a4:7f:0b:f6:8b:0b:4a:1f:01:32:68:71:f5:
                    55:c0:27:8e:1b:47:85:25:a6:7e:d6:67:68:4a:a6:
                    54:7e:8a:df:e7:86:07:4e:78:60:ad:82:4f:15:f5:
                    42:3a:16:12:d5:4d:48:f0:8c:ce:e8:40:1a:c9:6d:
                    08:cc:fa:59:5e:cf:df:df:f6:7a:1d:30:38:9e:cf:
                    3d:ba:3f:e2:61:50:ec:0e:c8:e6:84:9b:bf:71:c9:
                    75:4f:74:d1:32:e2:01:a2:db:83:54:eb:48:34:54:
                    e0:c3:07:c4:b9:bd:51:47:8f:7e:8c:14:11:95:b3:
                    0d:73:1c:8f:99:52:38:b2:b9:de:4f:71:16:0b:6d:
                    ac:34:91:5f:51:f7:de:b1:23:d0:b7:7b:c1:a2:88:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0F:EB:BA:2C:4D:31:D1:AF:EE:FF:A7:80:B0:C5:B0:F5:6B:45:83
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:89:7f:ee:9c:7b:41:36:05:d1:8e:ab:4d:19:38:53:c7:cc:
         59:bf:8c:0e:05:cb:57:06:b3:17:4d:2c:51:20:e2:c8:d7:6a:
         f8:3d:f8:c7:b1:5e:f9:9a:46:58:17:91:2d:68:7c:46:cf:b7:
         a0:07:05:91:1b:e5:04:33:51:2f:be:37:4e:75:78:09:37:a4:
         f6:25:37:8e:1d:1d:ba:e8:12:93:c4:fe:68:da:bf:23:3e:ec:
         f2:92:01:38:f0:ff:2e:b4:ba:ed:c2:f7:50:bb:4b:05:54:8d:
         2f:3f:92:c6:d0:ab:45:96:c8:fc:f0:8e:76:b2:f9:89:a1:fc:
         84:a1:fd:2f:b4:30:82:95:48:df:fa:3e:1f:5d:b0:67:f2:15:
         03:6b:66:33:c4:8e:c6:be:d5:cf:e0:ad:c9:d3:fb:3f:06:8c:
         24:e5:7b:63:9b:20:5e:0b:92:c0:3c:c7:62:f3:55:33:50:3f:
         34:85:a8:ac:ef:f9:79:f5:58:c9:3b:7d:e8:a7:7e:9e:be:5e:
         35:12:16:bb:9b:84:59:ac:9b:35:98:06:a2:ce:5c:b6:b8:f9:
         73:b0:9b:06:78:64:dc:fc:21:8d:f5:a8:74:4d:9d:74:6d:36:
         0a:40:99:39:0c:0e:92:eb:d9:32:dd:fe:a1:80:47:42:7d:82:
         d5:d4:41:9b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTS8hk6Ep/1pd0ipjfb3wK+J+x2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyMjkyQzBFMjREODg4NUI0NzYwQkM3MDhGOUU0Nzc4
NzBEOUM3MDAeFw0yNDAyMjYxMjAzNTFaFw0yNTAyMjQxMjA4NTFaMDMxMTAvBgNV
BAMTKEE0MEZFQkJBMkM0RDMxRDFBRkVFRkZBNzgwQjBDNUIwRjU2QjQ1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDha1NnuOhmIg1waSk15MpdgNfD
wuppBBFRa8nt9JMRogWK5aIUSCt7wyC++EXHyMGlXmfaq6N9eP2mlriHXT9P0z1G
h8tjEsMzv5e4kDSHKD6BiKgyihYeLAUR/OxKxPr3CA7gMPZKDzXFpH8L9osLSh8B
Mmhx9VXAJ44bR4Ulpn7WZ2hKplR+it/nhgdOeGCtgk8V9UI6FhLVTUjwjM7oQBrJ
bQjM+llez9/f9nodMDiezz26P+JhUOwOyOaEm79xyXVPdNEy4gGi24NU60g0VODD
B8S5vVFHj36MFBGVsw1zHI+ZUjiyud5PcRYLbaw0kV9R996xI9C3e8GiiDvrAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUpA/ruixNMdGv7v+ngLDFsPVrRYMwHwYDVR0j
BBgwFoAUQSKSwOJNiIW0dgvHCPnkd4cNnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNC80MTIyOTJDMEUy
NEQ4ODg1QjQ3NjBCQzcwOEY5RTQ3Nzg3MEQ5QzcwLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzQzNDRmZjI5LTcxODQtNDdiZC05MTcyLTM2MDlmNTlj
ZTZkZi8yLzQxMjI5MkMwRTI0RDg4ODVCNDc2MEJDNzA4RjlFNDc3ODcwRDlDNzAu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNC8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzYzOTMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQAIiX/unHtBNgXRjqtNGThTx8xZv4wOBctXBrMX
TSxRIOLI12r4PfjHsV75mkZYF5EtaHxGz7egBwWRG+UEM1EvvjdOdXgJN6T2JTeO
HR266BKTxP5o2r8jPuzykgE48P8utLrtwvdQu0sFVI0vP5LG0KtFlsj88I52svmJ
ofyEof0vtDCClUjf+j4fXbBn8hUDa2YzxI7GvtXP4K3J0/s/Bowk5XtjmyBeC5LA
PMdi81UzUD80hais7/l59VjJO33op36evl41Eha7m4RZrJs1mAaizly2uPlzsJsG
eGTc/CGN9ah0TZ10bTYKQJk5DA6S69ky3f6hgEdCfYLV1EGb
-----END CERTIFICATE-----