Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          +wHIXSgIn7KH1C3grRhD2SggeF4ckOZXmBUsTZY6thw=
Subject key identifier:   53:5B:B4:84:E0:3A:90:D8:3B:99:BD:60:55:AC:A2:8B:FA:AF:98:BC
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       497CC803DAD9992A66ECA0A7648135D97A6110E3
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     211380
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7c:c8:03:da:d9:99:2a:66:ec:a0:a7:64:81:35:d9:7a:61:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=535BB484E03A90D83B99BD6055ACA28BFAAF98BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:ac:1d:d9:b2:85:0c:26:fe:8b:74:d5:fc:
                    9a:50:d7:55:12:94:b5:4a:6a:cf:ee:65:e7:fe:f2:
                    83:72:4f:71:e7:00:6a:18:45:e6:d4:94:7f:89:70:
                    74:4e:b2:89:fe:4b:73:26:6a:c4:15:d7:72:90:ba:
                    ad:48:54:f5:b3:20:9d:17:77:e0:4a:5c:6c:7b:d2:
                    d2:c7:d7:f4:15:47:0e:ee:17:33:b3:cd:c0:08:ed:
                    da:97:48:78:4c:58:19:ad:5c:9c:c2:b8:da:5d:7d:
                    77:88:57:6e:11:39:ee:cf:99:0f:aa:d0:a8:16:c0:
                    2a:17:0d:b2:a2:d2:53:73:a3:3f:fc:c3:3e:26:ce:
                    3d:dc:6d:15:71:76:8c:a3:47:87:10:88:02:7c:71:
                    d9:d4:3f:cb:99:45:d6:a6:5c:2d:13:4e:ad:62:5d:
                    73:08:14:78:c4:2e:6c:55:49:f1:c2:9d:18:a1:ae:
                    91:6f:3b:63:0d:0e:0f:22:7a:ec:48:19:a8:f1:52:
                    71:5a:e4:dd:3c:1f:7d:a7:ce:74:c3:e0:b7:c0:09:
                    89:fe:2f:30:82:c9:16:c8:db:63:9d:36:73:4e:e0:
                    ff:8e:18:ff:94:0b:9f:44:2f:72:a2:80:86:fd:f1:
                    11:75:d5:14:67:1f:1a:a0:a6:96:bc:ac:cc:52:aa:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5B:B4:84:E0:3A:90:D8:3B:99:BD:60:55:AC:A2:8B:FA:AF:98:BC
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:74:a8:c1:9e:73:be:0d:2b:3b:37:ce:5b:3e:12:10:5e:dc:
         8c:72:b1:1f:07:d7:85:19:b9:95:84:a4:36:6a:81:f6:89:8e:
         4c:bd:75:e4:49:f5:6f:55:33:c3:c1:f8:da:0f:e9:28:f1:48:
         08:15:dd:58:b4:97:4c:a9:54:49:6f:55:f1:72:12:a4:a6:3d:
         fc:a7:bf:71:c9:7e:00:83:ec:8c:a0:2e:c4:10:80:8e:fd:24:
         c3:fe:93:f6:59:61:c9:49:9c:f1:d2:da:04:87:dd:50:57:e1:
         39:41:64:0e:9c:a5:ab:9b:58:73:b9:15:1a:3d:8e:78:93:25:
         84:1d:f1:e1:73:1a:f7:18:9b:b1:a2:6e:04:ca:8b:37:44:e4:
         7e:8b:3f:31:a9:6e:dc:60:8d:3f:28:21:58:21:51:73:c3:e8:
         00:69:03:62:a4:2d:33:cf:b1:c6:55:14:9f:c0:62:65:17:1b:
         3f:74:a7:29:86:e2:e3:f0:fb:6e:c8:4f:9b:f8:fd:f4:88:84:
         69:14:af:f3:48:39:fb:42:a1:8f:cd:eb:d3:33:45:d5:d8:c7:
         c2:a4:2e:43:6c:80:e6:7c:73:7c:5b:e9:c0:71:2d:bf:37:4b:
         e0:7a:1f:94:ff:38:09:00:99:d1:8d:05:b3:72:4f:93:00:d8:
         c4:a5:8c:5f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSXzIA9rZmSpm7KCnZIE12XphEOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyMjkyQzBFMjREODg4NUI0NzYwQkM3MDhGOUU0Nzc4
NzBEOUM3MDAeFw0yNDAyMjYxMjAzNTFaFw0yNTAyMjQxMjA4NTFaMDMxMTAvBgNV
BAMTKDUzNUJCNDg0RTAzQTkwRDgzQjk5QkQ2MDU1QUNBMjhCRkFBRjk4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Oawd2bKFDCb+i3TV/JpQ11US
lLVKas/uZef+8oNyT3HnAGoYRebUlH+JcHROson+S3MmasQV13KQuq1IVPWzIJ0X
d+BKXGx70tLH1/QVRw7uFzOzzcAI7dqXSHhMWBmtXJzCuNpdfXeIV24ROe7PmQ+q
0KgWwCoXDbKi0lNzoz/8wz4mzj3cbRVxdoyjR4cQiAJ8cdnUP8uZRdamXC0TTq1i
XXMIFHjELmxVSfHCnRihrpFvO2MNDg8ieuxIGajxUnFa5N08H32nznTD4LfACYn+
LzCCyRbI22OdNnNO4P+OGP+UC59EL3KigIb98RF11RRnHxqgppa8rMxSqlF1AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUU1u0hOA6kNg7mb1gVayii/qvmLwwHwYDVR0j
BBgwFoAUQSKSwOJNiIW0dgvHCPnkd4cNnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNC80MTIyOTJDMEUy
NEQ4ODg1QjQ3NjBCQzcwOEY5RTQ3Nzg3MEQ5QzcwLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzQzNDRmZjI5LTcxODQtNDdiZC05MTcyLTM2MDlmNTlj
ZTZkZi8yLzQxMjI5MkMwRTI0RDg4ODVCNDc2MEJDNzA4RjlFNDc3ODcwRDlDNzAu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNC8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMxMzMzODMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQAwdKjBnnO+DSs7N85bPhIQXtyMcrEfB9eFGbmV
hKQ2aoH2iY5MvXXkSfVvVTPDwfjaD+ko8UgIFd1YtJdMqVRJb1XxchKkpj38p79x
yX4Ag+yMoC7EEICO/STD/pP2WWHJSZzx0toEh91QV+E5QWQOnKWrm1hzuRUaPY54
kyWEHfHhcxr3GJuxom4Eyos3ROR+iz8xqW7cYI0/KCFYIVFzw+gAaQNipC0zz7HG
VRSfwGJlFxs/dKcphuLj8PtuyE+b+P30iIRpFK/zSDn7QqGPzevTM0XV2MfCpC5D
bIDmfHN8W+nAcS2/N0vgeh+U/zgJAJnRjQWzck+TANjEpYxf
-----END CERTIFICATE-----