Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          ltLZ5g43B9i+x7WSIyJFNfxbNJSGK0+BowwaFRO0dWk=
Subject key identifier:   86:C4:AC:E2:20:1C:EC:CA:54:E5:65:19:3E:C0:55:68:2B:E0:D1:CF
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       0E6FE398C37239E717B5CB6C91EED925ABEB037C
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
Signing time:             Mon 26 Feb 2024 12:08:52 +0000
ROA not before:           Mon 26 Feb 2024 12:03:52 +0000
ROA not after:            Mon 24 Feb 2025 12:08:52 +0000
asID:                     57870
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6f:e3:98:c3:72:39:e7:17:b5:cb:6c:91:ee:d9:25:ab:eb:03:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:52 2024 GMT
            Not After : Feb 24 12:08:52 2025 GMT
        Subject: CN=86C4ACE2201CECCA54E565193EC055682BE0D1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:8a:cb:91:c5:65:4a:8c:5c:ce:8b:5b:d3:
                    03:bf:bc:fa:23:64:e7:0a:98:44:00:ce:1e:10:28:
                    d8:e6:d9:7a:c7:a4:09:92:53:4b:40:5f:7d:0d:3c:
                    cc:a8:33:88:d8:24:de:b6:a7:44:1a:cb:6d:44:e3:
                    81:f3:9c:16:c9:07:78:fb:e3:57:86:a1:87:3d:ea:
                    a1:86:cd:26:f0:57:40:27:21:d9:86:22:05:28:4a:
                    80:5e:4f:99:95:2f:3a:b6:be:5f:66:b2:61:e2:54:
                    d5:1a:8a:ea:4e:ff:4c:7d:f2:35:b9:8a:74:8f:52:
                    18:e5:fa:c3:de:41:d4:ce:c4:bc:60:d2:5a:81:8a:
                    2c:c4:66:a5:3a:92:24:94:07:59:b7:cb:60:56:47:
                    b5:a4:10:8a:14:ce:91:c7:59:af:e7:6f:bd:ec:a7:
                    78:db:ff:6b:40:d1:a7:17:3b:3b:58:bf:c9:a8:c8:
                    4f:60:b1:52:0f:47:c0:da:e5:f4:bb:05:24:2b:92:
                    7d:28:8b:94:10:c0:b2:78:0e:f4:79:1a:20:5a:a8:
                    fa:ce:c5:6f:2e:ef:1b:b8:bf:90:69:fc:e5:5d:ee:
                    32:b7:7f:1e:ae:04:9d:68:c3:92:73:e4:09:f5:54:
                    ce:ba:26:16:d2:4e:9a:c9:5d:07:35:37:3c:53:54:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:AC:E2:20:1C:EC:CA:54:E5:65:19:3E:C0:55:68:2B:E0:D1:CF
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:96:c8:e7:76:dd:a0:ef:51:56:cc:28:f7:e4:6d:ea:d7:ba:
         c4:9a:9f:39:72:a3:6c:7c:c9:fe:a5:5b:3a:c4:5f:1f:92:6c:
         49:07:ba:6f:6c:ad:6e:3b:74:05:48:36:70:8a:9a:9f:db:d7:
         0c:9c:ad:e1:ab:96:b4:78:77:e8:0b:c9:d8:9e:1c:8f:a8:bc:
         f5:79:e7:88:1d:88:2e:20:02:41:a3:d9:8d:3e:ea:a3:67:10:
         4f:b4:c2:0d:b4:1f:c9:26:fd:64:84:24:58:0b:32:dc:45:3d:
         ed:03:2c:32:c5:06:36:06:79:6d:4d:b7:8d:51:6e:95:fa:cd:
         7f:18:5a:fe:b6:fe:61:5d:ab:b3:b0:4a:6b:b7:a9:e7:b7:c6:
         e7:ee:a1:ad:19:34:33:23:86:6d:1d:d7:f2:9e:68:6a:db:ac:
         7a:5a:a5:2e:63:1c:6c:d4:de:dc:ca:c2:35:47:81:a3:d2:ee:
         48:81:11:08:b6:3f:15:ee:c7:c7:44:a3:4e:fc:76:6f:43:d4:
         d9:84:35:cb:fd:28:a8:cf:9b:de:c2:85:7e:10:07:ef:8e:50:
         6a:c4:ca:ac:ac:e7:3e:b5:cc:08:84:17:8a:99:a0:de:4e:5a:
         1f:26:76:ca:8d:24:1c:11:e6:28:c2:09:ce:b1:c1:4a:19:a7:
         18:21:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----