Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (raw, json)
Hash identifier:          W+71JIezDIBAfdtTKud7vYLr8GFJMwQiAbX9HQaqtpE=
Subject key identifier:   87:5F:8B:93:AB:CC:9F:AE:E2:0B:F3:F0:4E:85:06:A2:DC:B1:04:43
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       1536EC1E010E26FFE3D683D5F1DA90C76802FC7A
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     200952
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:ec:1e:01:0e:26:ff:e3:d6:83:d5:f1:da:90:c7:68:02:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=875F8B93ABCC9FAEE20BF3F04E8506A2DCB10443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:68:29:9f:f0:47:35:94:0b:e3:3b:92:1d:
                    f5:dd:96:4f:87:21:22:88:6e:44:65:02:99:60:fd:
                    b7:91:f0:8b:57:e7:5c:07:34:c3:96:8b:7c:ff:47:
                    e0:c3:66:7e:58:a7:0a:29:02:1e:a6:20:c7:07:bb:
                    ce:a3:15:97:0d:79:92:eb:55:ac:8b:20:dc:45:66:
                    a8:4d:2e:e8:f5:5d:09:d4:b1:f3:5e:56:63:43:8e:
                    85:7e:96:4d:16:13:1b:1a:a4:8d:ed:fd:c2:cd:8a:
                    01:08:79:42:0e:d3:2b:15:01:ed:30:69:10:57:d5:
                    eb:f5:b2:fc:64:10:cc:e1:2e:1a:b5:03:18:69:ab:
                    3d:77:37:e1:ed:65:45:35:79:de:3d:d2:92:bc:e5:
                    8b:54:d2:ab:28:8f:33:e4:f0:9c:fe:72:f6:85:a3:
                    93:21:1d:fd:09:8d:54:49:5b:c5:8a:93:0a:21:0e:
                    7b:6d:94:c3:9e:bd:7e:0e:d1:e9:81:af:cb:43:70:
                    9f:9f:20:63:90:28:0b:41:49:99:22:1f:1b:6c:48:
                    24:d4:3a:56:c1:ed:d1:22:43:b7:04:1b:17:38:21:
                    3c:cc:92:8a:da:09:1d:2d:06:ac:f4:f4:56:ff:99:
                    f8:34:59:c9:49:83:c3:8f:8c:29:d4:f4:ab:6d:b8:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:8B:93:AB:CC:9F:AE:E2:0B:F3:F0:4E:85:06:A2:DC:B1:04:43
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:81:16:20:d7:43:87:52:b9:9a:cd:c7:5a:1e:47:90:bc:ac:
         b8:6f:e5:d2:b3:7a:a4:0d:e5:4d:b1:95:6c:f7:7e:dc:57:a8:
         94:a7:ef:89:7b:55:a4:fa:dd:cf:bc:67:4e:85:a5:eb:c3:bd:
         e5:bf:d8:47:1c:ad:73:87:9e:ed:3c:2e:fa:7e:2a:14:55:43:
         49:0c:c4:1c:ac:8f:4d:f3:5e:7f:96:b7:f2:37:d7:6a:b2:64:
         7b:94:63:62:4b:67:68:64:0f:4c:ba:8b:cd:0f:94:15:47:88:
         29:51:21:48:40:7a:02:0c:d0:c8:35:73:24:d6:95:67:cc:ca:
         08:d1:b6:7f:ea:a0:c6:3d:75:09:ba:33:50:11:28:a3:78:58:
         da:61:d8:05:33:e9:3f:e4:77:d6:24:ac:1a:c5:9b:b1:f3:f2:
         d5:e3:4f:f1:12:b8:db:bb:4e:fb:d2:8c:90:1f:58:40:85:54:
         2c:16:47:ba:2d:1a:a7:f7:0c:92:8f:1a:f7:6e:e9:fe:39:73:
         85:4e:4e:2d:22:7f:f9:65:69:f5:76:ab:7f:27:e1:fa:41:22:
         14:9e:0f:c1:07:51:eb:54:38:f2:4c:0d:d0:2f:6e:e8:74:14:
         dc:1e:06:fe:dc:9c:c3:30:da:9c:e5:6e:42:ce:5b:4b:d2:3d:
         08:49:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----