Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (raw, json)
Hash identifier:          MepYKbizEaHDCIOXlC4heCZyBza1pVPzfsvpsnztrKo=
Subject key identifier:   BA:F1:B6:31:90:E3:84:57:CC:47:B0:1C:D9:82:BC:F3:27:6D:75:79
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       5422A6B2B092AE4E51DCB80DAB026B1FFF81F61A
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     210645
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:22:a6:b2:b0:92:ae:4e:51:dc:b8:0d:ab:02:6b:1f:ff:81:f6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=BAF1B63190E38457CC47B01CD982BCF3276D7579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:13:dc:bc:a6:a3:1e:a7:cd:8f:0f:84:6d:
                    43:c9:76:39:6b:39:c0:80:1b:33:df:bc:c2:54:e7:
                    5c:37:ea:9d:66:1a:4e:ae:af:00:b1:44:be:6a:78:
                    06:2f:7c:e2:73:65:94:5d:8d:bc:1f:b0:75:90:de:
                    1b:68:9b:b5:5d:52:5d:ea:20:1c:ba:cf:20:86:2e:
                    f7:2f:bc:6b:61:f3:ed:56:9a:54:94:0f:bf:f4:30:
                    97:a5:7b:12:46:f2:df:05:9f:68:ad:08:fe:1e:a9:
                    ec:10:2c:1b:63:ae:85:a9:0e:c2:b9:08:2a:3d:5b:
                    3b:33:e9:70:a0:89:71:6d:94:99:df:d4:1d:08:90:
                    f4:c7:f9:5f:30:85:bb:7c:0d:ea:f2:73:2d:90:c6:
                    19:a5:f1:d4:d2:fb:48:79:18:e7:0d:d0:ad:28:b6:
                    52:01:8d:06:25:b9:06:72:d7:32:31:41:30:91:4b:
                    35:40:b0:48:77:b9:dc:87:c3:5b:ce:0b:52:a8:97:
                    2f:41:4f:e6:ed:b7:24:22:e6:66:bf:6d:99:93:2e:
                    51:6c:2a:1f:2c:54:07:8c:82:30:49:ae:75:74:b3:
                    ab:05:7b:3a:7d:53:6d:16:83:a6:24:76:5e:24:40:
                    40:d9:71:49:a9:7f:41:22:a6:f2:a6:94:26:82:d5:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F1:B6:31:90:E3:84:57:CC:47:B0:1C:D9:82:BC:F3:27:6D:75:79
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:41:92:05:88:3a:08:d1:4d:8c:8c:4d:5f:8c:71:0c:45:de:
         d7:c2:6c:ec:24:25:9d:13:0c:d6:5d:60:79:b1:85:86:50:fd:
         0f:eb:aa:e7:8b:e3:f3:8f:e7:fb:31:80:9c:90:06:b7:11:6e:
         18:91:42:29:1b:33:6d:fa:c1:14:21:e2:89:de:3b:d0:c1:71:
         65:9f:76:f4:d0:9f:f7:a7:92:59:6b:56:33:b3:e8:c8:71:ba:
         01:10:71:14:6e:89:57:6c:84:76:1f:49:22:ed:ed:e4:9b:dd:
         d8:d6:96:98:82:56:6b:ab:a2:bb:e7:12:a1:c8:cd:79:0a:7a:
         d3:a3:a6:08:31:d3:20:5c:0e:d2:d0:42:c4:c7:a6:e1:b8:6a:
         85:1b:83:42:38:cd:67:c5:ac:97:ac:fc:00:14:e4:c8:e7:ad:
         55:bd:c8:5f:15:eb:40:a2:61:9a:88:94:85:d5:8e:12:f4:af:
         47:89:81:2b:31:e2:fe:8a:3d:c7:30:f6:59:37:d7:24:92:da:
         17:82:f3:da:52:3f:6e:1c:1b:78:cc:44:ba:57:df:9a:97:74:
         87:c7:f5:35:c7:de:91:a7:0c:79:0f:71:b1:5e:96:77:56:02:
         18:02:ec:6d:51:30:b3:d5:14:ff:c4:27:30:5e:04:31:7e:3f:
         43:64:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----