Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa
File:                     326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa (raw, json)
Hash identifier:          75Y+j8DygJFQ6hxMPkmbf88+VlFfehZvtUshDxsJ4wU=
Subject key identifier:   C0:1F:57:3F:CC:83:E3:FF:4A:AE:9D:4C:BC:39:37:31:42:65:99:7B
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       2E15AFE61599E787640A541C2C560368EC85820C
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa
Signing time:             Fri 11 Apr 2025 14:28:02 +0000
ROA not before:           Fri 11 Apr 2025 14:23:02 +0000
ROA not after:            Fri 10 Apr 2026 14:28:02 +0000
asID:                     203062
IP address blocks:        2a0b:4e07:210::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:15:af:e6:15:99:e7:87:64:0a:54:1c:2c:56:03:68:ec:85:82:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:23:02 2025 GMT
            Not After : Apr 10 14:28:02 2026 GMT
        Subject: CN=C01F573FCC83E3FF4AAE9D4CBC3937314265997B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:07:a3:03:b4:a1:28:7b:b6:93:4f:65:7b:
                    7e:87:67:d0:72:b2:20:15:9d:b3:45:19:01:83:cb:
                    23:57:e1:b3:00:ad:43:65:d0:05:9c:36:de:77:8b:
                    5a:1a:94:33:41:d4:d7:b3:0c:18:de:89:5e:9d:7a:
                    3d:c9:0c:5a:d2:2f:04:3d:c1:20:ee:a1:c3:2b:2a:
                    98:76:3f:02:91:84:37:eb:58:f4:67:37:b2:b7:aa:
                    4b:13:a2:0e:4c:3e:3b:be:5a:5e:8b:d2:ce:76:57:
                    00:79:01:9b:38:ae:66:c9:1b:2c:a4:ea:21:e2:bc:
                    96:cf:13:c6:23:61:9b:0b:06:06:da:ac:be:57:1f:
                    d0:ed:07:c7:6a:63:e8:d8:50:c7:c0:00:65:a0:77:
                    09:32:ab:fe:93:42:12:13:97:a0:19:72:15:48:90:
                    d6:59:8a:0d:62:7f:4a:fa:c6:4d:84:66:f7:63:7e:
                    72:1c:65:e8:e1:d3:90:2d:c9:a7:9b:e5:4f:f1:b1:
                    4e:00:d1:26:e5:22:b9:c2:67:c6:b8:0b:69:41:bd:
                    ca:a6:8b:75:19:2e:99:23:2a:d4:02:5f:12:32:5a:
                    41:08:5e:13:1b:5f:e1:cd:8b:bf:5c:d0:5f:1d:ca:
                    ea:56:63:62:e7:30:89:48:d7:db:53:2d:cd:82:9a:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:57:3F:CC:83:E3:FF:4A:AE:9D:4C:BC:39:37:31:42:65:99:7B
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3231303a3a2f34362d3436203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:210::/46

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:64:a9:0a:29:27:3a:24:1b:49:06:de:4c:ab:f9:5d:bb:
         34:c0:d3:fd:45:3b:15:a1:d6:5b:67:0d:4f:22:98:d2:c5:82:
         2f:9c:91:56:26:e7:e1:61:35:69:e1:93:9b:fa:9a:bf:99:a7:
         13:17:8b:87:83:72:03:20:1f:d0:c7:40:51:4d:e8:4b:50:68:
         32:b7:b7:58:16:26:45:8f:e6:82:f3:4d:8a:d6:79:f7:5c:dc:
         c1:35:97:48:95:75:00:27:3e:f3:83:fc:e1:ef:d1:10:72:70:
         8f:59:e4:2a:e0:41:88:a2:b2:64:d0:89:67:fb:b2:cc:8b:b4:
         a5:b8:4c:36:c2:90:c1:6d:8e:e9:44:e1:d9:f4:6c:98:03:db:
         56:11:43:bc:d7:90:c0:1f:83:5f:ac:25:1e:e8:35:3b:e3:fa:
         e4:b1:38:08:61:f9:7e:eb:9d:f8:36:7e:e5:5b:2a:9f:eb:37:
         8c:4b:58:ec:35:cf:d8:46:47:b0:67:27:c1:b9:fc:48:a9:a6:
         05:c3:30:24:83:65:57:48:13:3b:f2:ef:36:5b:a9:d5:03:d5:
         ba:02:be:be:cb:ba:2f:25:91:97:a3:cb:91:95:02:09:fa:00:
         bc:ed:29:4b:b5:df:f7:7f:5c:17:a5:ef:4e:53:94:0a:2b:a4:
         c7:07:af:58
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULhWv5hWZ54dkClQcLFYDaOyFggwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTA0MTExNDIzMDJaFw0yNjA0MTAxNDI4MDJaMDMxMTAvBgNV
BAMTKEMwMUY1NzNGQ0M4M0UzRkY0QUFFOUQ0Q0JDMzkzNzMxNDI2NTk5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxQejA7ShKHu2k09le36HZ9By
siAVnbNFGQGDyyNX4bMArUNl0AWcNt53i1oalDNB1NezDBjeiV6dej3JDFrSLwQ9
wSDuocMrKph2PwKRhDfrWPRnN7K3qksTog5MPju+Wl6L0s52VwB5AZs4rmbJGyyk
6iHivJbPE8YjYZsLBgbarL5XH9DtB8dqY+jYUMfAAGWgdwkyq/6TQhITl6AZchVI
kNZZig1if0r6xk2EZvdjfnIcZejh05Atyaeb5U/xsU4A0SblIrnCZ8a4C2lBvcqm
i3UZLpkjKtQCXxIyWkEIXhMbX+HNi79c0F8dyupWY2LnMIlI19tTLc2Cmp7FAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUwB9XP8yD4/9Krp1MvDk3MUJlmXswHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyMzEzMDNhM2EyZjM0
MzYyZDM0MzYyMDNkM2UyMDMyMzAzMzMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioLTgcCEDAN
BgkqhkiG9w0BAQsFAAOCAQEAF65kqQopJzokG0kG3kyr+V27NMDT/UU7FaHWW2cN
TyKY0sWCL5yRVibn4WE1aeGTm/qav5mnExeLh4NyAyAf0MdAUU3oS1BoMre3WBYm
RY/mgvNNitZ591zcwTWXSJV1ACc+84P84e/REHJwj1nkKuBBiKKyZNCJZ/uyzIu0
pbhMNsKQwW2O6UTh2fRsmAPbVhFDvNeQwB+DX6wlHug1O+P65LE4CGH5fuud+DZ+
5Vsqn+s3jEtY7DXP2EZHsGcnwbn8SKmmBcMwJINlV0gTO/LvNlup1QPVugK+vsu6
LyWRl6PLkZUCCfoAvO0pS7Xf939cF6XvTlOUCiukxwevWA==
-----END CERTIFICATE-----