Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          xdjy1cePyz1igz6fBs2VOdIEgZPvmsAvc8skoKE6JHU=
Subject key identifier:   26:64:35:5D:14:EC:61:EF:C4:0D:79:97:89:5C:E5:8C:0A:3A:63:C0
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       02433AE742428D011284E8A003177B9D09DFFFA3
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     210667
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:43:3a:e7:42:42:8d:01:12:84:e8:a0:03:17:7b:9d:09:df:ff:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=2664355D14EC61EFC40D7997895CE58C0A3A63C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:e7:52:6b:47:85:77:55:de:b0:5b:bc:38:
                    20:7e:c2:82:70:a5:1c:bb:08:ab:9b:61:75:7e:b0:
                    3e:63:1e:5e:a3:fc:79:e2:af:24:d4:44:04:ee:14:
                    d5:ef:4d:19:4f:e4:79:6c:04:49:28:8d:a7:18:8e:
                    98:62:ec:19:5d:ce:eb:7f:53:47:e7:a0:b8:36:a2:
                    84:67:04:4b:88:71:a4:fe:e4:df:c7:57:b8:23:70:
                    28:00:92:f8:20:aa:f2:32:1b:db:7c:40:d2:e8:92:
                    99:8c:94:4b:fd:94:fb:30:6b:f1:37:15:3a:f7:18:
                    37:ae:18:f4:74:e9:15:49:b6:52:a0:42:3e:6c:9c:
                    85:1a:8e:d4:a5:b7:c7:7c:90:66:e1:db:3b:72:32:
                    70:56:7a:11:42:d8:4a:ff:db:ea:7b:f3:66:9b:6b:
                    4c:7d:62:57:bb:bc:57:e0:ef:0b:64:01:e1:ef:ae:
                    2d:19:f9:82:56:94:56:05:f3:d1:31:1f:07:db:4c:
                    b5:84:1b:d6:26:28:1e:64:b9:00:53:a3:a8:67:fa:
                    0d:2d:fc:7a:15:bf:7b:49:3a:a3:a5:af:8a:2c:b4:
                    bd:de:03:fa:c5:ae:72:be:15:7f:d1:55:1a:76:23:
                    2d:ec:12:88:d8:f9:ef:c0:66:89:f5:b1:ef:41:b0:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:35:5D:14:EC:61:EF:C4:0D:79:97:89:5C:E5:8C:0A:3A:63:C0
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:1e:01:ff:4e:64:06:28:30:14:7c:90:6c:91:98:96:26:
         2b:12:95:f6:c1:3f:08:a1:41:66:52:6b:37:89:42:c0:e4:d2:
         60:50:73:71:10:56:44:85:b7:25:7c:ea:ba:28:06:99:3c:8b:
         65:91:2b:5a:5a:14:c3:e5:e8:ba:17:1e:0e:c1:1e:fa:5c:ea:
         92:e8:cd:41:4e:f4:3f:24:36:3d:f6:56:ff:b5:8e:b3:7b:94:
         5f:73:aa:5e:c7:19:99:2a:44:2d:d2:ba:ce:69:a1:1a:a9:f7:
         a1:8e:b1:d3:14:96:2b:63:7c:b0:89:e5:eb:3b:51:06:21:6c:
         98:fc:69:a8:3f:88:1d:b0:f4:80:0c:07:fd:b7:0d:ac:0d:78:
         5b:b3:cf:e1:08:8c:e1:5b:92:f5:91:80:b7:e5:42:59:63:ff:
         f2:69:05:90:e3:d1:dd:43:39:90:01:fe:38:87:8a:6b:1e:73:
         f6:af:92:0c:71:4a:02:18:81:bc:22:5f:a7:6f:43:cf:36:b0:
         92:b2:87:4d:bf:77:80:08:5c:81:05:a8:12:42:98:7c:3c:fb:
         bc:45:7b:78:e4:e1:4e:3e:8a:f5:b8:3d:fb:3c:a7:cb:6b:31:
         ec:19:c4:f1:60:a6:3f:1a:cd:2c:06:e8:f1:b1:31:83:cb:91:
         53:dc:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----