Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326130623a3a2f34382d3438203d3e20323134353433.roa
File:                     326130623a346530373a326130623a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier:          NDQezPk1vO05AIRnVXyaf2S+3iC/xmC8m4KQlIpr6NQ=
Subject key identifier:   C8:4F:E1:DD:B7:16:D3:C0:96:64:E4:B8:15:50:06:22:8F:5E:9D:91
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       5AC4FAD3A1845B98AF8D7FF683FF67B025A0CB31
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326130623a3a2f34382d3438203d3e20323134353433.roa
Signing time:             Fri 11 Apr 2025 14:29:23 +0000
ROA not before:           Fri 11 Apr 2025 14:24:23 +0000
ROA not after:            Fri 10 Apr 2026 14:29:23 +0000
asID:                     214543
IP address blocks:        2a0b:4e07:2a0b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c4:fa:d3:a1:84:5b:98:af:8d:7f:f6:83:ff:67:b0:25:a0:cb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:24:23 2025 GMT
            Not After : Apr 10 14:29:23 2026 GMT
        Subject: CN=C84FE1DDB716D3C09664E4B8155006228F5E9D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:24:84:4b:45:5c:51:0e:68:ed:54:02:5a:
                    db:34:16:01:ed:46:9a:00:0e:7d:9a:c5:db:b4:1e:
                    b8:2c:47:12:94:0a:9b:38:8d:c8:bf:fe:b6:af:67:
                    eb:c7:77:d2:b2:c1:7e:47:fa:e4:20:bf:86:e6:2f:
                    4a:0b:59:9f:ee:6f:de:82:04:fd:fd:f4:1d:4e:e6:
                    b1:bc:3a:92:be:63:70:1a:a1:96:37:40:e2:df:78:
                    be:47:39:23:1a:9e:bc:ff:33:87:cf:38:dd:ed:3a:
                    2e:1e:fb:89:b9:35:96:0b:53:96:51:99:b8:d7:f5:
                    1b:a3:65:5a:5a:77:a5:65:c8:74:b3:b8:06:e1:68:
                    f7:b3:39:5b:ae:b5:ca:da:8e:dc:91:80:7f:44:c4:
                    5c:3d:f5:ae:bd:44:ce:19:6a:05:84:86:2d:04:f1:
                    3f:32:34:2e:3d:8f:07:fa:64:ca:fd:82:ea:48:8a:
                    e5:df:03:f4:bc:0f:28:ea:bc:11:0f:a7:27:0c:2c:
                    d7:f6:1a:4e:b7:6f:a6:48:fc:74:09:f5:f0:d1:11:
                    39:23:5c:1d:e9:78:5f:c6:45:ec:9f:55:9e:8b:f1:
                    49:d2:b0:bc:e7:b3:60:de:b6:12:ae:c1:31:ce:0e:
                    71:fc:50:45:f5:e4:55:ee:ea:59:03:f5:ad:83:4c:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:E1:DD:B7:16:D3:C0:96:64:E4:B8:15:50:06:22:8F:5E:9D:91
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a326130623a3a2f34382d3438203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2a0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:09:7f:02:f7:46:d5:75:5f:5d:7e:7b:69:f7:4f:c6:c4:bc:
         0f:1c:e4:fb:dd:db:2f:4d:58:91:5e:60:9a:4e:91:71:17:a1:
         fc:3a:ca:2d:05:9c:a5:cd:af:28:61:22:3b:af:7b:26:94:d1:
         41:14:db:8e:e3:54:d2:15:18:cd:0d:9a:af:f9:be:b1:f8:d5:
         c2:5c:7c:4b:56:03:7a:ec:8f:83:88:9a:37:95:8c:ee:ec:f9:
         fd:03:6c:41:f7:1c:06:b4:39:9c:c2:68:18:84:7c:c3:3e:f0:
         29:02:99:dd:38:5a:8e:8a:69:33:26:14:92:34:2a:33:08:c3:
         39:fa:07:f6:81:a3:77:91:13:2e:b2:88:88:60:4f:6f:27:44:
         80:7a:09:b0:64:dc:98:b7:6e:3d:75:de:0a:b5:cf:e4:98:f9:
         75:f2:8d:64:6d:32:3e:c3:76:b3:dc:0f:73:17:9c:18:bb:09:
         73:f5:57:1c:e8:d6:44:f9:a8:05:ed:65:35:2c:fe:04:97:cc:
         ec:66:f4:3f:29:e7:19:d2:d3:9a:ca:66:55:06:ef:e8:86:a7:
         d9:b9:f7:10:06:dc:cb:2f:1d:71:48:fd:bc:9e:eb:20:27:1e:
         ca:af:bd:a1:f8:8a:4a:83:0e:14:36:44:02:34:0f:78:8d:35:
         23:1a:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----