Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3438203d3e203230343733.roa
File:                     326130623a346530373a343030303a3a2f33362d3438203d3e203230343733.roa (raw, json)
Hash identifier:          su/S/oQykO6JHDyzLGPy5jerUBH6EOCdx+YXtchKyCQ=
Subject key identifier:   F2:CC:47:67:7D:BC:0F:B0:AF:9D:FE:93:61:4E:0E:A5:53:43:E6:48
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       16B4C2E3A00A9C5740505C809D1EECEBC7AE6606
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3438203d3e203230343733.roa
Signing time:             Fri 11 Apr 2025 14:27:40 +0000
ROA not before:           Fri 11 Apr 2025 14:22:40 +0000
ROA not after:            Fri 10 Apr 2026 14:27:40 +0000
asID:                     20473
IP address blocks:        2a0b:4e07:4000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b4:c2:e3:a0:0a:9c:57:40:50:5c:80:9d:1e:ec:eb:c7:ae:66:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:22:40 2025 GMT
            Not After : Apr 10 14:27:40 2026 GMT
        Subject: CN=F2CC47677DBC0FB0AF9DFE93614E0EA55343E648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:ae:cc:58:1c:1a:dd:73:e1:3f:d9:5b:af:
                    1f:2f:8f:b3:49:06:56:95:31:29:6a:f2:99:57:4b:
                    2c:b0:08:26:22:c9:3b:be:12:17:24:cc:6b:5a:63:
                    5d:c8:6a:9d:14:79:2d:c6:c7:ec:b5:46:1d:01:4e:
                    d2:7f:2f:81:0e:70:53:35:ac:0a:67:31:9b:34:2d:
                    17:ba:1f:8d:7b:3f:98:cd:f8:04:b1:bb:30:ab:d9:
                    13:4a:9c:5f:2c:30:55:98:40:82:e8:73:59:47:99:
                    be:ed:0b:fa:06:d7:10:d4:17:a2:07:16:06:fb:cf:
                    ae:21:d0:c7:a5:b6:04:0e:22:1b:be:a7:ce:5e:5d:
                    69:a9:c7:91:68:b0:87:6c:90:2a:f9:f1:08:b5:14:
                    9d:a8:b2:61:20:dd:3e:38:e5:80:35:f7:1e:7f:43:
                    06:17:a8:df:b5:76:ab:84:3d:35:9c:ee:6e:50:00:
                    62:35:54:dc:81:13:41:86:00:cc:06:3a:33:0c:eb:
                    ce:b4:cd:ca:2d:51:dc:9a:0a:fc:ec:53:88:ef:e9:
                    90:8c:b3:ca:b7:1d:98:82:cd:50:5a:d4:73:84:f1:
                    7d:df:67:bd:57:b1:4d:3e:ee:b6:5e:6a:e4:11:ca:
                    2e:72:25:b0:65:b2:b6:b4:c0:aa:63:b5:b5:df:83:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CC:47:67:7D:BC:0F:B0:AF:9D:FE:93:61:4E:0E:A5:53:43:E6:48
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:a6:71:a7:57:30:94:50:68:64:0d:78:cf:b5:86:3c:23:
         65:c1:81:0b:03:82:16:8f:65:6f:95:19:c2:ff:2d:2d:44:07:
         2b:0f:d4:dc:f0:4e:fc:ab:ce:f3:55:7a:29:2f:db:4d:da:fd:
         88:eb:0b:00:aa:0c:11:7e:de:e5:86:3d:e2:58:e4:ee:1a:ca:
         e4:22:49:f6:8d:b0:4c:38:2a:4f:99:ac:8a:9b:36:c8:e1:e0:
         47:33:01:2e:2c:20:ab:66:13:ec:99:aa:c8:59:c8:de:af:74:
         36:3e:1b:85:2b:15:db:34:a2:63:88:14:b8:6f:9c:10:84:2c:
         a9:e4:28:a2:4e:80:9d:ca:3a:58:6c:e0:1a:45:58:d9:15:10:
         84:9c:6c:84:27:ea:35:11:62:81:98:4c:a5:2e:4b:5c:42:a1:
         85:f4:f1:9c:3d:69:bf:09:72:3f:59:20:d7:1c:a0:02:e0:fa:
         2a:19:f6:e2:9a:d1:ac:26:0b:36:fb:bc:a7:fb:dc:e1:0e:d8:
         dd:58:7a:94:42:b8:ea:5c:75:f2:f2:08:f7:7d:d5:b1:4c:f9:
         8e:70:4e:93:c7:54:6c:b9:a3:37:c8:0c:07:aa:da:ac:d0:68:
         b5:e2:fc:cb:8e:e7:df:3f:e1:0c:16:07:28:07:b2:11:11:b9:
         6b:db:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----