Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          OKoZO9n+kDdbxb4mTmgfS4Oy9Vhbgyjz/HIuuxVgKGE=
Subject key identifier:   ED:CA:78:15:06:C9:B9:26:52:69:21:D9:07:A6:93:AF:2F:9E:E7:66
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       0A1126649B1D85125944224AED691971F19024AF
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     60900
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:11:26:64:9b:1d:85:12:59:44:22:4a:ed:69:19:71:f1:90:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=EDCA781506C9B926526921D907A693AF2F9EE766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ba:d9:72:d1:2c:a6:3a:03:49:ce:8c:7a:09:
                    87:2e:05:b9:a6:c5:2e:53:64:a2:b8:03:d1:6e:fe:
                    ab:42:df:92:bd:b5:ef:21:35:a9:33:d8:3e:0c:98:
                    dd:ac:6e:54:fc:1c:54:ca:0b:2c:00:22:da:65:b4:
                    84:d4:3f:c6:49:f8:44:d1:de:a0:6e:46:d1:64:56:
                    08:2c:3c:07:b0:5a:da:68:5b:85:35:c9:55:7e:2f:
                    c2:db:c3:7d:87:4b:0a:74:5f:a5:d9:fa:1a:a9:ab:
                    bf:c9:60:4e:8a:d6:9a:c3:b3:34:25:07:5a:e2:1d:
                    93:54:82:50:87:a2:94:a8:5f:cb:05:8a:51:8a:b3:
                    f0:82:f1:2e:4e:6b:75:ad:8d:58:0e:b9:1e:0e:97:
                    71:4a:b6:83:bb:fe:38:d0:ee:6e:42:04:78:70:8c:
                    3a:f1:9e:12:b3:f3:e6:21:79:61:c2:8d:65:fc:ee:
                    74:63:8b:3a:1c:90:84:c1:97:0c:e7:4a:da:b6:1c:
                    11:f2:7d:b8:6c:4c:79:00:31:54:f0:4c:55:71:a4:
                    da:07:ba:64:42:0d:48:00:66:c8:b8:17:93:f6:0a:
                    ec:5c:54:17:b9:1f:c5:70:a7:9e:cc:11:02:96:9d:
                    9f:79:eb:bc:ed:10:65:d7:4f:2b:50:b8:ae:83:c7:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:78:15:06:C9:B9:26:52:69:21:D9:07:A6:93:AF:2F:9E:E7:66
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:32:e9:f9:7e:a3:05:62:cf:db:97:48:ee:9a:eb:9c:28:
         20:b8:58:d4:48:90:59:68:aa:d0:4a:18:c5:ba:e0:8e:c1:06:
         1b:1f:05:a9:f3:3a:52:9a:e8:c8:79:69:fb:6c:16:e7:d1:d1:
         b8:14:0e:c8:9d:ca:10:8a:25:b3:50:db:fb:48:bc:bb:33:b5:
         91:c8:b3:dd:b0:eb:de:59:9a:a9:1d:94:4e:ee:f6:24:c1:e7:
         34:37:f6:c8:77:e1:06:75:7a:cc:95:cf:37:26:1a:e5:0e:05:
         9f:9c:01:1e:b3:4b:8a:a1:73:34:ee:a3:ea:df:41:cc:78:a9:
         87:21:d4:51:ba:99:12:2c:73:6f:85:73:7c:8b:30:76:b3:83:
         da:e7:3c:c6:66:3e:7a:6e:6f:ad:dd:99:fc:5a:15:32:28:bd:
         44:de:00:4f:f1:43:d9:3b:92:d6:59:21:45:94:5a:22:71:64:
         5c:e6:ff:58:35:ac:ab:fb:04:55:13:0d:d9:41:78:4d:e5:90:
         6c:4a:03:8c:41:44:16:4a:88:1f:a5:40:d5:f3:f8:47:fd:e2:
         50:25:d0:1d:78:5a:77:ba:ec:f6:cb:37:8e:a0:7b:37:28:e9:
         96:7f:c8:5c:73:08:0b:8d:02:d6:cf:bc:94:be:db:c6:ba:9f:
         6c:37:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----