Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa
File:                     326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa (raw, json)
Hash identifier:          CKC0bU8+wwL3PUqMBTKnFx16Ujf03kcQmJQYeT1ug24=
Subject key identifier:   C7:E4:FB:C1:04:80:EB:BA:38:23:87:5C:B1:39:0D:EC:E8:BD:EE:B7
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       376C6CA3A881AE92BD30B54934B57357511F2F10
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa
Signing time:             Fri 11 Apr 2025 14:27:23 +0000
ROA not before:           Fri 11 Apr 2025 14:22:23 +0000
ROA not after:            Fri 10 Apr 2026 14:27:23 +0000
asID:                     13852
IP address blocks:        2a0b:4e07:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6c:6c:a3:a8:81:ae:92:bd:30:b5:49:34:b5:73:57:51:1f:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:22:23 2025 GMT
            Not After : Apr 10 14:27:23 2026 GMT
        Subject: CN=C7E4FBC10480EBBA3823875CB1390DECE8BDEEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:ed:34:fa:90:ae:19:08:4b:7c:2b:ea:de:
                    e8:40:ae:91:da:da:1e:ee:29:09:fa:d0:40:9e:8a:
                    20:0b:13:4d:39:b8:fa:f0:c4:8a:9e:7b:cd:67:58:
                    d5:18:9b:20:98:df:cd:ed:fa:b7:79:a9:68:f0:66:
                    96:ed:97:cf:b1:52:c5:8c:ac:7f:30:63:bd:e4:6b:
                    1f:6b:51:72:9c:49:5f:ed:c5:a2:b8:ed:c5:1c:3f:
                    fb:e6:c8:b5:06:25:47:b2:f6:7e:ae:c7:51:b3:92:
                    37:d9:73:9e:7a:fa:b2:af:4f:ca:00:8f:54:f3:cb:
                    ba:b8:7c:51:5f:01:e8:5a:ed:b7:f1:06:97:a4:ad:
                    31:a5:a2:0a:92:0e:3f:36:d3:f1:1e:cb:6b:af:2d:
                    dd:a4:a1:cd:94:f6:f6:7b:b0:7d:3b:24:20:0e:f8:
                    2d:ce:74:31:2c:65:48:1e:9a:a0:96:ae:b1:0b:f4:
                    08:ca:f0:e4:42:40:42:3f:5b:1f:a1:29:24:53:f8:
                    cd:f5:1b:ef:5f:e8:89:d2:47:55:3c:04:3a:c7:2d:
                    bf:08:a6:52:6e:9b:85:c1:16:8c:c8:a4:7e:c5:35:
                    57:c4:38:82:c9:ce:9a:70:eb:c9:da:21:77:20:c3:
                    79:51:f0:7a:57:a9:68:dc:34:55:7a:73:24:ba:39:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:FB:C1:04:80:EB:BA:38:23:87:5C:B1:39:0D:EC:E8:BD:EE:B7
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:67:c1:5a:43:f9:d6:21:08:71:08:3d:b4:1e:7c:08:72:
         d3:02:55:8e:0e:ed:56:10:ad:ea:42:ee:9b:f6:11:c0:29:4f:
         30:4c:f3:c5:08:33:51:6c:d6:0a:47:e7:1b:42:ad:b6:c1:5f:
         6d:41:d5:c9:0d:72:c9:c4:d8:e8:ee:3f:9a:7f:65:15:88:62:
         e4:19:0c:32:8f:9b:6d:3b:89:de:63:26:57:b1:e6:93:92:ee:
         6d:d0:d6:9a:b9:f5:9d:50:26:ab:42:e3:00:6b:c2:b6:1a:03:
         0b:83:8a:5f:f1:d4:b4:9a:4f:6f:5f:42:ba:30:43:f9:ac:22:
         93:59:90:40:62:5c:17:08:3e:ed:44:e1:f2:3d:b7:81:5e:fc:
         ba:1e:00:d4:0a:6a:26:5e:4f:d1:21:bc:eb:d3:6e:79:ea:a2:
         ec:da:87:27:a7:b4:32:c2:51:d8:94:1b:f2:37:44:2b:e6:07:
         63:8b:9e:b9:cd:fc:e9:03:4a:ce:1f:2e:ae:e0:a5:bf:f1:e5:
         e7:d7:4f:4a:f8:ff:b8:c0:d2:16:ac:9a:ca:1f:f7:dd:34:97:
         d1:b5:13:db:7c:98:89:3e:57:b4:54:48:20:1f:88:26:eb:cb:
         e9:78:db:63:f6:01:41:b6:2b:ec:d6:c8:2e:70:f9:29:68:5d:
         c0:ba:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----