Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier:          su5gV8WvRGbZTnMMktxBicnxYmG1spn5w5tBS8FBhu4=
Subject key identifier:   26:1C:78:FD:94:F8:FF:22:39:D0:20:5E:3F:80:E4:C5:FF:46:DB:B4
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       2A4A19C587334985DE3BF3573821A2152742C75D
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     203619
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4a:19:c5:87:33:49:85:de:3b:f3:57:38:21:a2:15:27:42:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=261C78FD94F8FF2239D0205E3F80E4C5FF46DBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:10:fc:43:3c:80:93:06:5f:68:04:94:c4:
                    a3:99:fc:d3:e0:21:1c:4f:fc:97:2d:81:66:38:5a:
                    20:11:8a:8a:c4:17:2c:36:62:80:a8:60:4f:7b:93:
                    35:71:e5:34:d0:ae:d3:2d:a6:e0:b3:14:f8:a6:e8:
                    93:2c:b9:87:23:b9:08:3a:a2:78:a7:81:da:45:66:
                    b9:a2:4e:2e:bb:5e:2b:aa:b2:ef:17:2b:90:b8:38:
                    30:ef:02:7b:42:32:15:16:87:fb:93:f7:6c:45:ea:
                    14:aa:19:52:59:8b:4e:67:c3:b1:7e:dd:67:0e:6b:
                    10:e7:63:e3:b3:12:e1:ed:73:6e:77:67:98:b9:89:
                    65:0d:01:3e:d8:34:85:9c:94:0f:6a:9a:2f:e7:3d:
                    0c:9a:07:28:6e:0e:0a:c1:64:4b:70:db:f1:4d:33:
                    1b:a0:4c:70:c6:22:c7:6c:74:03:02:13:b6:a3:c8:
                    66:c3:99:2f:3f:56:e9:0e:85:02:5b:05:07:ad:78:
                    7a:3d:b3:00:dc:b6:8f:40:9d:e9:6f:a6:1e:54:e8:
                    6e:6c:27:92:a9:5b:8f:52:88:13:fb:cd:02:62:ad:
                    b9:97:d5:68:d7:66:99:75:97:76:85:4d:92:29:bb:
                    a2:de:49:20:fc:1f:d6:63:cd:c9:fc:ea:27:5f:fd:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:78:FD:94:F8:FF:22:39:D0:20:5E:3F:80:E4:C5:FF:46:DB:B4
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:ba:68:b8:31:a2:39:6d:52:a2:f0:57:99:0b:aa:45:37:
         c1:69:28:ed:55:75:99:ae:db:6e:1a:09:ef:f7:4c:6b:6d:04:
         79:22:9e:aa:a5:29:b7:f7:c4:c1:ab:f9:ea:1f:71:eb:ba:6d:
         05:4e:4c:ba:1d:54:ff:81:46:bb:29:a1:b0:6f:23:7c:07:b5:
         bc:17:b8:2c:8f:8b:7d:58:e1:cb:c9:5e:37:eb:bb:60:03:82:
         ba:94:b4:2d:3a:fd:e6:5c:7f:64:d2:9e:1f:6b:cc:cb:36:dc:
         99:a9:34:0a:5c:ba:db:aa:e5:90:26:8d:da:e0:f9:e9:b2:d3:
         97:54:9b:20:97:63:a2:cd:9a:40:d6:c4:c8:d1:79:39:e8:bd:
         bf:c0:c2:93:06:4b:49:55:ca:c9:13:52:cb:7b:71:ca:34:16:
         59:0e:cc:ad:c2:48:f7:a7:7e:10:fa:31:92:70:42:bc:9e:74:
         a7:00:6f:d2:60:36:45:94:15:65:eb:12:39:ec:4d:56:9e:63:
         8c:69:74:3a:0a:0c:02:5b:4f:fa:a9:8f:ce:fe:cd:1b:f1:48:
         98:16:d7:d3:cf:0e:33:c3:bd:31:50:80:b7:16:cf:2a:22:22:
         62:8c:31:c2:ca:73:d6:62:bc:d0:fd:64:31:3a:0e:e0:98:2d:
         18:76:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----