Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          6JFA+QKdqUM0mqSIHkX3KkWDztlsPFF2EPdjFJWiNO4=
Subject key identifier:   7C:A5:DA:9C:B3:66:F1:B2:85:BA:21:40:D2:BD:92:D1:C2:B6:9D:A0
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       455791090AF3C26E5F7CE82836C9F506AF28EB61
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     54681
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:57:91:09:0a:f3:c2:6e:5f:7c:e8:28:36:c9:f5:06:af:28:eb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=7CA5DA9CB366F1B285BA2140D2BD92D1C2B69DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:6a:1f:ce:03:4b:ed:b7:f2:a1:d0:29:58:
                    21:c3:68:bd:e0:74:1a:f1:6e:c6:d7:a5:35:36:b3:
                    ff:21:03:bf:8a:4e:8b:38:b9:17:c7:15:6f:ba:68:
                    ae:8a:81:83:79:6d:96:bd:b5:fb:81:ca:a4:6c:78:
                    00:c8:44:e8:4c:01:91:90:98:99:47:bb:aa:4f:44:
                    ac:96:32:35:5e:db:1d:12:a3:6d:f6:52:88:87:04:
                    80:fe:88:63:02:4f:c7:34:2f:1d:f0:a1:7b:8e:20:
                    4d:8d:b5:7f:e6:74:3b:02:f1:82:91:37:8e:a1:32:
                    29:59:32:e4:1b:37:af:37:4b:cd:9e:44:7a:be:21:
                    7b:6f:dd:0f:93:de:a1:fb:14:4d:69:0d:b8:62:47:
                    f0:50:2b:3d:6b:3f:8f:77:ce:af:ac:49:b7:f3:92:
                    b2:aa:50:c8:b4:db:56:7d:3d:85:1a:5d:12:c5:a3:
                    e2:09:3f:80:d8:98:62:15:be:33:6e:27:2e:f1:5a:
                    29:60:ea:b0:de:42:41:36:bd:1a:27:e9:ef:c4:e6:
                    70:05:54:68:3a:c6:d8:87:6d:b9:40:6b:2c:40:7a:
                    db:b8:52:39:cf:4f:b4:0a:3d:d9:b8:45:26:aa:f9:
                    5c:dc:fe:fc:78:46:28:7c:4c:c3:31:f4:92:11:a6:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:DA:9C:B3:66:F1:B2:85:BA:21:40:D2:BD:92:D1:C2:B6:9D:A0
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:90:f6:dc:f0:f1:65:60:bd:35:54:26:ca:89:c3:69:5b:
         31:27:0c:06:44:73:ec:3e:d3:ab:fd:e8:47:51:68:a9:4f:ae:
         1f:a2:c4:cc:8a:fd:1f:31:0d:b9:56:79:12:01:73:c4:a2:43:
         e0:5e:57:0a:6f:7d:19:94:cd:ce:11:10:01:0f:90:ac:e9:f7:
         d2:b0:04:ad:d4:c2:65:ef:2c:13:41:e3:5b:06:4a:b5:e5:a5:
         b3:62:6a:6f:fa:81:6c:be:c7:df:5e:3a:03:6a:9e:1d:59:24:
         6f:bd:b5:80:88:c7:25:7a:04:65:64:b3:d6:2f:12:8f:d5:23:
         e7:a8:e7:55:9f:d9:34:8a:3f:4a:78:25:a3:94:05:ae:10:c6:
         0b:90:5c:c0:54:b2:ad:95:66:f4:49:02:65:4a:7c:76:59:93:
         f8:91:ca:39:e0:64:7b:77:99:74:91:0a:ab:2e:26:1e:bc:60:
         41:f6:46:ef:c5:39:64:ea:97:2e:1d:e5:f1:6c:e4:63:6f:53:
         28:91:ad:46:ec:02:11:04:4d:a5:70:a0:06:9b:8f:8d:5d:4d:
         1b:4d:51:02:ca:0c:4b:95:aa:a5:52:f3:2e:60:36:75:9a:91:
         23:47:fa:2d:fc:ed:30:1c:b9:d2:8d:b3:02:1f:3d:db:00:92:
         b5:2d:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----