Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS199203/0/326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa
File:                     326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa (raw, json)
Hash identifier:          2sJv+1JULybbDLom8ub71ZfP3GDzrCOP/58bomKD/GA=
Subject key identifier:   2E:94:42:4D:FD:D9:20:9B:E6:CF:D0:7D:86:8C:91:E4:00:38:88:43
Certificate issuer:       /CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
Certificate serial:       1E5C3E20B86B9C5B29B3B3B7E3C161D5AB571135
Authority key identifier: 95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
Subject info access:      rsync://rpki.co/repo/AS199203/0/326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa
Signing time:             Wed 21 Aug 2024 15:08:50 +0000
ROA not before:           Wed 21 Aug 2024 15:03:50 +0000
ROA not after:            Wed 20 Aug 2025 15:08:50 +0000
asID:                     142046
IP address blocks:        2a12:dd47:3025::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:3e:20:b8:6b:9c:5b:29:b3:b3:b7:e3:c1:61:d5:ab:57:11:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
        Validity
            Not Before: Aug 21 15:03:50 2024 GMT
            Not After : Aug 20 15:08:50 2025 GMT
        Subject: CN=2E94424DFDD9209BE6CFD07D868C91E400388843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:f5:61:9f:6e:c8:45:a0:99:4b:6a:c8:a7:
                    e0:28:cb:1e:18:51:74:d4:80:3a:a3:60:5e:81:fa:
                    49:86:9c:39:09:3e:f5:73:e0:df:64:c5:26:0f:2e:
                    bf:0d:ef:34:73:1b:3b:12:ef:80:2b:ca:2f:17:a3:
                    69:12:b6:ca:a9:12:55:e7:15:43:a6:03:c4:8d:5f:
                    d9:2d:62:76:8e:db:72:11:60:09:a0:74:09:be:59:
                    f6:f2:02:b3:a4:28:fc:da:fe:bf:8c:0a:05:e9:a2:
                    63:4f:7c:00:c8:05:9b:cf:1c:05:b3:56:ff:ad:54:
                    7f:28:63:a9:0e:e6:4c:c5:1f:d4:0b:81:2c:05:74:
                    0e:e4:91:d3:db:a5:63:9d:17:54:21:c1:63:7c:5f:
                    9d:89:fd:6c:37:f0:0b:fe:f6:68:79:01:97:0d:3a:
                    f6:a2:91:c0:23:5e:18:dd:7f:fb:d3:60:41:d8:4d:
                    c5:c0:23:a9:0d:3b:8b:c4:e4:e6:2c:33:8f:f9:7c:
                    b7:63:fe:bb:76:c6:d4:c1:9a:c2:bf:87:74:73:79:
                    61:f8:ea:96:97:0d:75:1a:4b:63:83:90:c5:e7:a8:
                    2f:b9:71:d7:c3:83:cd:1e:14:21:db:f1:44:dc:87:
                    b2:4a:ff:e7:d3:17:53:fe:97:2f:56:67:dd:0a:32:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:42:4D:FD:D9:20:9B:E6:CF:D0:7D:86:8C:91:E4:00:38:88:43
            X509v3 Authority Key Identifier:
                keyid:95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199203/0/326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3025::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:70:d6:30:de:77:c0:ea:4f:fd:5f:a1:a5:26:1f:7f:af:
         72:9a:f7:05:78:85:49:3d:ee:ea:43:8e:10:61:a3:0c:90:b6:
         13:85:29:3d:3b:6f:62:93:d0:3c:af:7d:ee:ea:a4:6f:72:a8:
         5d:07:e0:1a:75:a6:50:e7:70:e7:1b:42:9a:8f:67:02:27:eb:
         f5:ed:ad:e2:6e:5d:c9:f1:11:5c:c5:8f:12:b4:c7:0f:48:86:
         d7:30:b8:8c:d4:10:d5:a0:11:3f:4b:2c:44:7b:ad:8f:be:34:
         b0:c5:18:6b:b8:bb:44:50:c5:67:82:95:e0:56:37:e7:77:1e:
         e0:42:fc:5b:bd:3a:3d:a8:db:d0:d1:41:2f:b3:ea:b1:98:ea:
         76:f1:01:ee:f2:95:77:b7:1c:9c:4f:2d:8f:bf:d6:1a:3e:e0:
         17:49:20:ab:05:33:2a:69:5a:8a:0d:2d:3a:26:65:c5:98:48:
         ac:c8:17:c3:e5:98:6a:00:6a:5e:9c:6d:98:c2:3e:29:96:47:
         82:cf:6c:2f:04:1c:02:72:d1:11:c9:86:54:ae:d6:32:3f:a7:
         e2:80:96:42:4d:0d:11:36:75:b0:3d:a7:9e:23:5d:b2:68:13:
         e4:c4:81:95:e6:2c:0d:f5:05:3d:3b:9e:0e:77:3c:c6:5f:f3:
         87:48:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----