Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666236363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666236363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          Bcnm+DvM0Yh5hVeHirp4keBvlZZPGxIeU9k9Z1lBpfw=
Subject key identifier:   C0:65:FB:E1:E5:13:1E:47:E2:B0:89:85:6B:6F:51:C1:44:20:A2:04
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       0FB4260C0097F005535336FFE593BDB4C729AE28
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666236363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 12:36:18 +0000
ROA not before:           Thu 26 Jun 2025 12:31:18 +0000
ROA not after:            Thu 25 Jun 2026 12:36:18 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fb66::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b4:26:0c:00:97:f0:05:53:53:36:ff:e5:93:bd:b4:c7:29:ae:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 12:31:18 2025 GMT
            Not After : Jun 25 12:36:18 2026 GMT
        Subject: CN=C065FBE1E5131E47E2B089856B6F51C14420A204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:43:ae:57:ff:3a:9b:02:07:16:03:e1:e2:
                    b7:2a:af:75:5a:32:81:38:9a:51:38:fb:7d:fb:ba:
                    12:17:ac:d4:df:56:c5:7e:14:96:05:fd:7a:f4:74:
                    31:bb:f0:6d:6a:98:fa:75:f1:19:b7:0f:a6:a3:9c:
                    d8:65:da:c2:18:16:1e:9b:76:09:39:66:33:cb:ca:
                    2c:52:8c:22:6f:ba:a9:0b:76:cf:a7:55:e7:ec:ea:
                    b6:29:72:db:3e:e5:f7:3e:76:71:4f:6c:ed:4d:1b:
                    95:78:da:01:ee:38:10:6f:4e:0a:ac:cb:47:38:79:
                    da:d6:fa:94:9c:86:4e:89:88:3f:d6:0e:13:39:78:
                    b0:17:be:b6:37:16:f3:5e:a4:ba:36:4e:36:ec:b7:
                    54:3d:00:01:04:fb:4a:cc:f3:5f:96:a3:3a:6e:28:
                    07:1e:f0:a1:b3:01:0e:39:5d:33:91:5b:fd:63:0d:
                    de:77:4e:4f:37:5c:6d:3b:d0:49:ee:d6:d9:fa:8f:
                    bf:f2:4b:30:08:48:58:4b:62:3f:69:01:5a:16:bf:
                    69:7d:c1:f7:39:c2:cc:20:37:f0:50:91:fb:55:a4:
                    14:30:9b:7f:54:b7:1a:88:50:37:9f:f5:a2:7a:e2:
                    92:34:11:4a:2b:ee:c5:35:a4:8d:e1:70:45:97:7d:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:65:FB:E1:E5:13:1E:47:E2:B0:89:85:6B:6F:51:C1:44:20:A2:04
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666236363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fb66::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:7f:1e:8f:0b:bc:3a:c7:02:e7:bd:a3:4e:0a:d2:e3:03:
         13:d5:d2:dd:29:5b:83:d0:b8:10:48:43:28:a1:4c:c0:df:78:
         85:f7:a8:e7:18:92:42:f6:3f:3c:46:6e:dc:0b:83:ee:51:56:
         67:8b:b7:0a:49:01:ff:bf:92:73:21:23:70:c4:44:e7:a8:cd:
         7a:2c:fc:67:ed:62:c4:4f:85:d5:70:bd:b6:4a:0b:90:4b:70:
         e3:6c:bd:d6:66:6a:ae:9d:50:6c:5f:11:d3:53:da:0e:59:87:
         0f:35:47:68:e3:91:70:c1:ff:df:b9:41:6a:6f:7b:ac:fe:4e:
         5f:c5:ee:6e:29:4e:2e:43:51:57:1c:76:e7:77:2a:05:55:29:
         96:4d:44:11:6e:bd:97:77:1e:56:00:be:bc:e3:13:33:2f:fa:
         41:0f:40:51:10:32:5a:85:ae:e2:d5:eb:e8:f3:97:5a:00:44:
         7b:cc:47:4a:e3:06:e4:9f:40:b9:c6:c3:fb:c3:eb:a9:9b:55:
         79:83:09:8a:65:ed:46:8a:37:54:fc:0a:52:55:67:bf:56:56:
         9c:89:aa:03:53:a4:d1:d2:e2:40:59:33:c4:c3:f1:67:04:95:
         1b:5c:b3:7e:7e:c6:0b:dd:52:59:6a:96:0f:45:27:6d:96:f8:
         88:6f:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----