Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (raw, json)
Hash identifier:          l8I+he6ymqsWqNdhrgKxmwiJkL0I95zVbeaHcUv/NF0=
Subject key identifier:   70:82:35:10:18:32:2A:76:61:79:CD:0A:D1:7C:15:EE:66:ED:97:5B
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       324BE8E6DEFB76B722E537DAD1A78B5AEEC85425
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     213163
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:e8:e6:de:fb:76:b7:22:e5:37:da:d1:a7:8b:5a:ee:c8:54:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=7082351018322A766179CD0AD17C15EE66ED975B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:05:f6:4b:12:ee:b4:78:df:a8:95:18:8f:
                    92:c3:32:bb:00:da:68:3a:0c:18:d3:c3:00:ec:70:
                    bf:85:3f:56:2b:9f:50:fd:c7:9c:d0:66:d7:d5:9c:
                    89:40:6a:80:e9:5d:5c:eb:a6:66:c8:bb:b5:15:5c:
                    b1:af:d3:90:dd:b8:22:45:24:50:a6:9f:b1:84:57:
                    4b:9e:8d:03:1a:ec:83:10:ce:09:7c:4c:93:c9:57:
                    ec:e9:dc:b5:97:3f:55:3d:5b:56:39:31:31:f8:87:
                    11:ad:53:b1:35:1c:34:6d:5e:25:32:83:ec:34:e7:
                    c5:f7:88:5f:2f:19:2c:d4:54:e6:ef:fb:81:fd:f9:
                    a2:d2:c9:06:ac:6c:86:77:44:f1:4b:9a:a0:ed:4b:
                    5d:96:ce:78:15:9f:d4:a1:d2:e6:06:76:7d:4f:0b:
                    01:c2:48:4f:85:59:7d:d0:99:ea:77:46:e2:07:96:
                    2a:bf:76:cf:f8:29:cd:bd:04:92:87:04:01:f1:c4:
                    a2:0e:ba:53:0a:01:5b:88:3f:da:50:80:68:3a:15:
                    7e:74:96:2f:d1:60:8c:92:cb:07:ff:85:18:e6:06:
                    fa:15:9a:03:a6:a6:d5:99:59:d6:02:57:ac:15:6b:
                    cf:ce:7d:b1:5b:1f:15:e1:9b:c1:6f:76:09:1c:c3:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:35:10:18:32:2A:76:61:79:CD:0A:D1:7C:15:EE:66:ED:97:5B
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:50:0d:2d:17:66:71:12:3d:f3:42:f3:eb:82:e1:f4:78:6c:
         29:cc:75:86:30:17:90:34:e3:ec:fe:ae:36:98:f0:ca:46:9d:
         90:47:54:1e:9e:5e:bd:32:04:0e:54:e0:cc:cd:4e:1f:93:0a:
         06:52:35:b2:bd:6a:11:0b:6f:a2:a2:d5:71:73:ca:55:98:14:
         65:59:34:fc:83:61:88:01:e8:70:4f:28:2e:70:de:55:6c:17:
         ef:c5:2b:c5:9a:f4:55:a9:4a:4d:c9:67:0c:51:ed:d8:e0:04:
         cf:fc:fb:e9:7d:c8:d3:a1:68:b1:8f:17:82:d0:73:7a:d3:e3:
         31:2b:e6:49:b1:12:d8:48:0b:26:c4:42:84:9b:3f:c6:1e:e5:
         a1:9c:a6:7a:92:72:fc:90:22:51:1b:fd:9f:ac:f0:f8:5c:fa:
         dc:7e:07:19:5e:03:ce:4e:0c:99:ca:77:37:ac:1d:b3:7b:2f:
         95:ff:5a:15:f3:ab:63:06:9a:94:f0:53:86:7d:d3:18:72:97:
         1b:6f:c1:39:5b:1f:22:77:8c:8f:b6:f4:2c:dc:5b:2d:29:20:
         cb:26:0a:14:2f:80:46:b9:aa:1a:3b:5b:9b:94:ee:6e:bb:ca:
         1f:b1:2f:b0:b9:3c:3f:a7:de:fb:a5:ef:bd:71:1b:2d:fe:35:
         aa:13:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----