Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa
File:                     326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa (raw, json)
Hash identifier:          ANW1GMpAaEUlZWwDP3EY0Lwcuz1g+IS5T3lX5U8y7RE=
Subject key identifier:   7E:03:38:4F:DD:BB:C0:A3:0B:20:2B:08:CC:44:05:D5:A6:7A:10:6D
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       126B9B133E6E01E3269B6CC9DB21C21038E08F2C
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa
Signing time:             Fri 11 Apr 2025 19:29:07 +0000
ROA not before:           Fri 11 Apr 2025 19:24:07 +0000
ROA not after:            Fri 10 Apr 2026 19:29:07 +0000
asID:                     203062
IP address blocks:        2a0b:4e07:7000::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:9b:13:3e:6e:01:e3:26:9b:6c:c9:db:21:c2:10:38:e0:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 19:24:07 2025 GMT
            Not After : Apr 10 19:29:07 2026 GMT
        Subject: CN=7E03384FDDBBC0A30B202B08CC4405D5A67A106D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:80:c3:88:e8:a1:4f:0c:85:c8:ae:15:72:
                    cb:b7:9a:81:cc:58:06:16:68:28:ba:a6:28:9f:ec:
                    00:9c:ac:94:15:70:a8:f3:9a:ae:1d:48:c1:b6:8d:
                    01:96:54:6b:08:3f:4c:b1:83:34:0e:83:1c:73:10:
                    a7:c3:84:10:78:c1:e0:97:dd:fa:d2:71:cc:46:1e:
                    ea:ba:cd:57:30:c8:7e:50:06:4f:93:19:ee:22:c2:
                    e2:01:7e:00:62:69:12:5e:2d:1b:f2:00:71:94:40:
                    57:9e:1a:ec:f6:50:2a:81:d8:0c:61:1b:22:6b:50:
                    89:a7:14:84:94:78:49:a1:6e:f3:61:cc:8e:68:58:
                    22:ce:f5:8b:7b:5c:70:29:a7:2e:00:14:03:8a:27:
                    ea:77:c8:a9:e3:f8:46:be:7d:0c:bf:6f:02:43:f1:
                    a2:29:77:6b:05:dc:36:8a:84:d0:6e:90:fe:3f:4b:
                    c3:16:df:13:03:97:e6:44:ae:33:fe:51:21:aa:90:
                    2d:9b:5e:0e:65:02:18:3c:44:83:3b:cd:8d:5e:8d:
                    6f:3e:1c:8a:3f:5e:d7:db:93:74:e1:1f:a9:57:32:
                    2e:df:2d:04:ac:37:1b:6c:56:35:e9:12:6b:49:ef:
                    b2:ae:79:f3:b1:1c:db:96:c1:b1:84:0a:9c:bd:a5:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:38:4F:DD:BB:C0:A3:0B:20:2B:08:CC:44:05:D5:A6:7A:10:6D
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:a1:0a:7d:4d:16:dc:6f:b3:6b:e7:ae:e9:6b:0a:f3:63:
         8f:68:1c:15:37:a6:6c:6b:5e:54:8b:83:fb:21:45:e4:12:fb:
         1b:ca:76:e8:85:a2:0c:87:5b:51:1d:ef:d9:ad:52:b0:15:6a:
         98:cf:84:9a:ee:49:5e:1a:50:6a:b3:d1:1b:5f:3d:1b:ea:a9:
         a7:af:77:a4:bf:ad:93:b2:95:55:d9:a9:1c:0e:c7:b0:d0:10:
         d1:e0:7f:d9:d8:ee:37:ea:5c:e1:8c:16:0e:c6:ad:bb:f4:c0:
         ab:d1:0b:ea:ec:15:4e:49:1f:23:8b:9b:73:30:ef:ea:4b:4c:
         61:dd:39:3b:50:a9:c6:ac:92:2c:68:e3:af:95:96:58:fc:a7:
         83:87:ec:b5:aa:a4:22:3a:ce:18:52:f8:cf:eb:c2:0e:65:5e:
         4d:86:42:39:61:26:84:da:d3:e4:10:94:77:11:26:3e:94:a0:
         c3:55:8e:e5:29:e0:be:f0:bc:91:b8:05:74:e5:a6:88:2a:fb:
         4e:37:b7:5c:b6:95:17:61:0d:b2:ed:56:c7:5e:12:d9:42:51:
         b4:01:19:18:45:53:e1:82:94:5c:05:9a:4b:3b:96:64:23:b4:
         b5:49:56:d0:6f:ca:3e:72:01:91:f5:1f:67:bf:33:d2:16:fd:
         26:e4:f3:4f
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUEmubEz5uAeMmm2zJ2yHCEDjgjywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTA0MTExOTI0MDdaFw0yNjA0MTAxOTI5MDdaMDMxMTAvBgNV
BAMTKDdFMDMzODRGRERCQkMwQTMwQjIwMkIwOENDNDQwNUQ1QTY3QTEwNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRG4DDiOihTwyFyK4Vcsu3moHM
WAYWaCi6piif7ACcrJQVcKjzmq4dSMG2jQGWVGsIP0yxgzQOgxxzEKfDhBB4weCX
3frSccxGHuq6zVcwyH5QBk+TGe4iwuIBfgBiaRJeLRvyAHGUQFeeGuz2UCqB2Axh
GyJrUImnFISUeEmhbvNhzI5oWCLO9Yt7XHAppy4AFAOKJ+p3yKnj+Ea+fQy/bwJD
8aIpd2sF3DaKhNBukP4/S8MW3xMDl+ZErjP+USGqkC2bXg5lAhg8RIM7zY1ejW8+
HIo/Xtfbk3ThH6lXMi7fLQSsNxtsVjXpEmtJ77KuefOxHNuWwbGECpy9pf7dAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUfgM4T927wKMLICsIzEQF1aZ6EG0wHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM3MzAzMDMwM2EzYTJm
MzMzNzJkMzQzODIwM2QzZTIwMzIzMDMzMzAzNjMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgtOB3Aw
DQYJKoZIhvcNAQELBQADggEBAHn9oQp9TRbcb7Nr567pawrzY49oHBU3pmxrXlSL
g/shReQS+xvKduiFogyHW1Ed79mtUrAVapjPhJruSV4aUGqz0RtfPRvqqaevd6S/
rZOylVXZqRwOx7DQENHgf9nY7jfqXOGMFg7Grbv0wKvRC+rsFU5JHyOLm3Mw7+pL
TGHdOTtQqcaskixo46+Vllj8p4OH7LWqpCI6zhhS+M/rwg5lXk2GQjlhJoTa0+QQ
lHcRJj6UoMNVjuUp4L7wvJG4BXTlpogq+043t1y2lRdhDbLtVsdeEtlCUbQBGRhF
U+GClFwFmks7lmQjtLVJVtBvyj5yAZH1H2e/M9IW/Sbk808=
-----END CERTIFICATE-----