Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          2dYKcfYXHyjzIcl7HNEH8NMtZ69b8TXZvqkUGlLF16Q=
Subject key identifier:   E7:79:CB:54:E5:74:2E:BF:61:65:48:3E:6A:AB:7B:28:76:C1:AF:50
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       32EA9E98923D2D36DB674BC1A7E1EE2EE784DD19
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
Signing time:             Mon 26 Feb 2024 12:08:51 +0000
ROA not before:           Mon 26 Feb 2024 12:03:51 +0000
ROA not after:            Mon 24 Feb 2025 12:08:51 +0000
asID:                     59993
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ea:9e:98:92:3d:2d:36:db:67:4b:c1:a7:e1:ee:2e:e7:84:dd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:51 2024 GMT
            Not After : Feb 24 12:08:51 2025 GMT
        Subject: CN=E779CB54E5742EBF6165483E6AAB7B2876C1AF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:d2:b4:29:52:ad:66:39:2a:7d:94:e0:b9:
                    58:aa:68:8a:d9:9e:22:bd:62:3f:3a:2c:1e:b7:52:
                    93:2c:d4:c1:ce:71:69:30:4b:30:73:00:e1:db:6b:
                    ae:49:e5:db:17:87:37:64:4c:69:e9:2a:d2:fd:ba:
                    91:2b:76:b0:1e:8d:68:6c:98:18:fc:ee:c6:f4:72:
                    a8:db:b4:0a:08:05:8c:b3:7d:3f:4a:3e:60:51:39:
                    30:a6:cf:e0:06:99:57:2e:83:96:33:27:57:91:73:
                    d3:fd:3a:07:d2:8e:e4:4e:cc:26:51:b9:99:ab:0a:
                    cb:2a:4c:96:9e:6e:7e:e0:f0:d8:be:10:65:f4:9c:
                    04:c9:72:58:68:5e:92:fb:ce:89:89:f7:86:3f:cc:
                    1b:c9:40:a4:66:2e:bb:cc:f2:dc:d8:f0:10:4b:8e:
                    5e:f1:9e:3c:66:ae:89:20:6b:66:cf:be:a0:00:1e:
                    da:25:45:19:17:85:7d:66:38:bc:0c:ce:e0:41:1a:
                    79:07:18:2c:66:fd:f4:2c:33:5f:01:ab:51:7a:75:
                    e7:df:75:c6:84:15:95:b0:da:f9:cf:d2:9c:03:66:
                    e8:d9:02:4c:57:60:1e:71:e1:6a:2d:79:c9:34:fe:
                    2b:b6:65:cc:2a:2f:08:bc:16:8e:a0:f1:71:cd:75:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:CB:54:E5:74:2E:BF:61:65:48:3E:6A:AB:7B:28:76:C1:AF:50
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:7f:0e:aa:e2:63:53:21:c6:84:72:18:6a:1b:9e:14:88:
         a9:7b:42:d5:86:78:6c:c3:43:c2:e2:d9:06:e6:92:78:d1:5e:
         fe:05:38:a4:c4:a0:ee:2e:c7:c0:f8:db:84:86:fa:d1:3a:3e:
         5d:0b:79:24:3e:35:54:38:f4:9f:51:41:5d:58:72:46:ba:a1:
         07:22:b8:88:4a:c4:b9:1b:51:80:15:8f:b4:a5:22:82:45:ae:
         05:d7:cb:2b:3f:c2:a1:ee:c0:9f:e6:1e:9f:9c:35:88:ed:7e:
         b2:8d:4e:6a:ce:bc:79:d3:93:3e:8a:1b:10:ec:a8:0f:ba:a2:
         a0:c0:a0:5b:06:d0:65:55:5a:7f:d2:0d:5b:bd:b2:bd:6a:cb:
         78:97:b2:22:3b:33:69:2c:60:b4:e3:65:0d:f8:e3:5b:15:13:
         53:d0:cb:65:16:9c:eb:a7:c5:10:36:42:14:07:fc:7e:9e:c1:
         36:1c:a6:47:55:e0:cd:f1:1a:2e:05:c6:5d:8b:0d:66:c9:24:
         4f:9d:a1:40:a0:a2:9a:47:e3:97:af:bf:e8:45:46:dd:1c:6a:
         9e:a3:1f:76:bd:33:08:50:a6:44:35:8a:40:ba:3b:56:75:ff:
         bd:42:7c:a4:53:30:28:fe:09:c6:b3:90:05:01:ad:66:f4:ba:
         67:74:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----