Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          g0kS3IcSoDQs9roYS+EABIxRtWEqPtKAgGgSRdlZbTM=
Subject key identifier:   E1:80:62:A2:C7:93:32:34:FB:B1:63:AE:33:EC:E3:FB:2C:84:92:66
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       189192504A463B48E9A829D7123F3C318ED62ABD
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
Signing time:             Mon 26 Feb 2024 12:08:52 +0000
ROA not before:           Mon 26 Feb 2024 12:03:52 +0000
ROA not after:            Mon 24 Feb 2025 12:08:52 +0000
asID:                     50755
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:92:50:4a:46:3b:48:e9:a8:29:d7:12:3f:3c:31:8e:d6:2a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:52 2024 GMT
            Not After : Feb 24 12:08:52 2025 GMT
        Subject: CN=E18062A2C7933234FBB163AE33ECE3FB2C849266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:a3:ff:bc:15:12:3a:c1:0a:51:f9:ad:25:
                    b8:9a:9a:0e:a8:18:0d:1c:06:7a:c7:b0:b2:e7:86:
                    96:41:ac:9c:b1:8a:3e:b0:a5:06:22:bc:79:99:db:
                    8d:c9:93:7a:86:50:4c:5c:77:5b:c3:38:86:28:72:
                    de:15:79:d5:44:3f:ea:0e:bb:ab:a8:d2:c7:ae:da:
                    33:ad:d8:0a:f6:db:7e:b0:34:48:67:55:90:85:1b:
                    c1:3a:48:5d:32:d5:cb:3e:6e:c4:97:25:64:0e:2d:
                    70:17:31:d6:73:9d:80:e1:e4:a5:8c:1e:e3:2e:2f:
                    e7:74:6b:b0:2c:f5:99:07:4d:e6:9d:fc:78:59:a4:
                    89:d9:a2:88:16:09:75:14:dd:78:af:73:59:99:a8:
                    72:95:bb:d2:f3:95:8b:cf:ca:4f:14:68:fd:64:6e:
                    88:ce:e1:f4:ef:e9:81:90:b0:f2:24:55:80:8d:f1:
                    6a:8f:72:bf:6a:4e:b6:bb:09:a7:4c:32:6c:14:26:
                    28:b0:e3:6c:c2:bd:e0:cb:2f:dc:68:6c:c8:e0:86:
                    e6:6e:0b:15:93:d8:17:a2:81:de:ba:4c:61:6c:ba:
                    b7:96:f8:46:d4:1c:d7:fe:0b:f9:33:1c:59:b9:4c:
                    f4:6d:98:35:0f:6b:8f:58:f2:54:f8:58:fb:15:f7:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:62:A2:C7:93:32:34:FB:B1:63:AE:33:EC:E3:FB:2C:84:92:66
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:43:ef:c8:5d:dd:6f:d3:31:0b:ac:bd:9e:c2:39:db:f8:
         0d:6c:5d:07:e7:69:2d:2c:34:25:bb:ad:90:6b:d7:67:25:a6:
         f3:f9:d1:98:1a:e1:6d:e7:e3:8e:66:4e:81:76:86:29:e6:f8:
         c2:58:48:76:36:20:34:51:2c:d7:bd:87:fe:33:c8:52:69:61:
         8b:8f:e6:f0:79:10:48:53:cc:c8:81:f4:8a:0b:86:8c:ca:b5:
         27:f3:2e:c5:10:ff:9b:de:e7:e4:b8:58:e9:8e:86:77:85:80:
         bd:59:ae:95:dc:d4:51:d3:45:de:c7:10:f7:11:fc:64:a0:4a:
         56:20:a7:3d:0b:31:e3:99:88:1c:88:f3:88:98:2a:d4:cb:da:
         7d:72:9a:e5:38:fb:3c:9c:f4:72:48:cf:36:90:9c:d1:4f:38:
         5e:6d:b1:73:31:1f:b4:a9:9a:8d:40:70:c1:43:0a:6a:a2:d9:
         9d:d8:82:40:72:d6:dc:f2:38:97:4e:8c:e5:1c:3b:5b:78:70:
         35:05:fd:31:ee:54:ba:51:c6:7c:ad:14:0e:4f:84:18:c2:9b:
         1a:23:68:f8:97:98:26:c8:86:b0:6a:31:eb:ab:b0:8c:29:87:
         9d:39:b6:71:9e:96:89:52:79:3c:1d:51:34:73:bc:67:e4:4f:
         0b:0a:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----