Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          2tEqWjW39HC/vt39roP7igl8S8fke4hG3hRcK+EfG9U=
Subject key identifier:   5E:17:69:18:1D:E7:30:D3:78:36:69:AB:0D:44:B9:7F:D1:22:BD:08
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       5E6B37368155BD9CA10C3515324DDA9793820C0D
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     60743
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6b:37:36:81:55:bd:9c:a1:0c:35:15:32:4d:da:97:93:82:0c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=5E1769181DE730D3783669AB0D44B97FD122BD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:85:4a:79:8b:a4:23:b3:f9:88:b2:cf:dd:
                    82:cd:71:56:ff:f3:91:da:36:08:af:45:74:9d:3b:
                    77:fd:0f:38:13:ec:fc:1a:03:07:4c:54:82:5a:7c:
                    7d:11:6e:6e:89:2d:36:dd:65:80:4c:b7:9c:1a:62:
                    7f:5c:21:07:12:de:8a:ed:7e:5f:3f:7a:78:da:2f:
                    11:f4:bc:cb:de:e7:17:5b:b4:93:c5:99:aa:91:61:
                    5c:43:74:91:37:7b:d0:48:0b:2f:7b:b8:85:8e:da:
                    5b:37:00:58:3b:d2:07:d8:81:a5:ab:4b:5b:65:c5:
                    e8:14:fa:51:0f:cf:e9:6d:82:c9:7d:78:dc:0b:87:
                    e6:f6:b4:3a:5a:8c:09:7b:5b:4d:b1:99:22:53:23:
                    cb:56:52:0e:bc:32:f4:45:d2:11:a6:40:7f:06:e0:
                    d5:a5:e6:a1:6b:7d:36:6b:44:1f:f3:17:ab:f4:ea:
                    99:ee:52:11:b6:94:ee:63:73:7d:0d:e2:26:5e:29:
                    71:b5:f8:a6:5f:cc:d7:f0:54:a8:73:7e:63:40:95:
                    06:af:3d:0d:6c:35:02:fc:7c:67:0b:2d:90:86:cf:
                    fe:96:1c:e2:7b:3b:0f:22:cb:9e:0f:7a:c9:2a:82:
                    58:b7:d7:1d:8f:4d:0d:67:bb:04:db:29:46:75:6c:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:69:18:1D:E7:30:D3:78:36:69:AB:0D:44:B9:7F:D1:22:BD:08
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:a1:cb:a6:a5:88:68:1d:4c:b5:6c:9e:c2:b2:0f:5c:4f:
         54:9b:16:ab:02:3e:d7:ae:d9:cc:73:c1:93:ac:5b:bf:39:88:
         e6:45:36:c0:dc:ec:4a:22:69:ee:70:83:05:66:98:f2:d6:f8:
         c5:e1:8e:4c:a3:a0:db:51:f7:6b:98:8d:84:8c:7f:eb:2b:bb:
         15:ab:f1:9d:df:24:30:44:11:c9:93:90:06:47:40:49:ff:8b:
         d2:84:89:f8:a3:59:51:f6:aa:78:7c:af:a6:3b:bc:cd:71:3b:
         bb:92:82:f4:6f:20:e4:86:a2:ab:57:bc:a9:43:04:ca:d6:d0:
         17:24:ee:39:c9:10:f0:a3:e5:f0:52:ac:76:b0:2f:bf:eb:aa:
         16:11:2b:5c:7b:18:21:e8:9d:f0:19:ab:23:79:e9:59:be:32:
         1a:cb:30:74:88:61:d9:a2:59:b0:27:2c:53:2a:0b:0b:fd:7e:
         98:19:70:7d:5f:06:6f:f4:41:4d:1a:14:c0:67:2e:63:f7:8c:
         22:31:da:2a:4c:d7:13:eb:09:86:c9:3a:fd:d9:36:3e:5e:c2:
         0e:1a:dd:58:c8:9b:30:f5:be:b6:66:40:c5:de:ea:9c:0c:ea:
         2b:40:16:bf:e8:77:64:81:5e:2e:9b:db:3c:ad:44:7a:a4:23:
         1f:cd:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----