Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa
File:                     326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa (raw, json)
Hash identifier:          tZ3uWZIt3XMGWPDpulBNyAONA+j88gIy0OEKjzlHkLo=
Subject key identifier:   3C:46:65:71:CB:BA:1B:FE:AD:C2:23:B1:7E:25:1C:6C:6D:2D:91:93
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       79ADE38E96D1832AC0BFC96A7F096FBC540A3766
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa
Signing time:             Fri 11 Apr 2025 21:11:01 +0000
ROA not before:           Fri 11 Apr 2025 21:06:01 +0000
ROA not after:            Fri 10 Apr 2026 21:11:01 +0000
asID:                     44331
IP address blocks:        2a0b:4e07:b1e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:e3:8e:96:d1:83:2a:c0:bf:c9:6a:7f:09:6f:bc:54:0a:37:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 21:06:01 2025 GMT
            Not After : Apr 10 21:11:01 2026 GMT
        Subject: CN=3C466571CBBA1BFEADC223B17E251C6C6D2D9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:15:2b:73:c7:a7:2a:19:63:55:85:7d:47:
                    16:93:5b:89:6a:17:cd:6d:44:fa:bc:16:c9:47:ab:
                    e0:a4:6f:9c:2c:84:a1:79:cd:5f:43:3f:35:71:22:
                    e7:09:19:33:c9:c9:3f:3a:5a:9b:93:a9:d0:56:19:
                    0a:aa:5d:2c:5f:74:54:ad:d5:fd:a0:e8:14:d0:ea:
                    45:4f:60:eb:de:94:d8:57:06:7c:ac:cc:e9:0c:47:
                    3f:63:60:17:ee:d7:8e:42:f2:be:f4:e9:8f:c0:17:
                    9f:bd:ae:a4:ee:84:34:61:6f:b4:60:27:63:0c:bf:
                    7f:d0:a4:c7:cc:64:7f:be:35:d2:5d:4a:92:72:31:
                    d2:e5:f1:17:c5:61:9b:d1:e7:50:cb:60:cb:af:67:
                    fe:33:1d:33:aa:b2:be:03:b7:f2:ff:6b:3c:6e:ae:
                    2c:88:81:87:46:07:a5:1b:f0:f8:9a:07:d3:2e:dc:
                    4d:e8:1a:bc:7f:8a:93:2b:d7:21:ea:08:33:6a:cc:
                    03:0c:d8:09:7c:fe:58:e0:e8:7b:a7:1d:4b:cb:e8:
                    96:c5:02:e3:c2:37:99:dd:b5:30:f6:01:f0:10:83:
                    dc:09:8f:64:c2:30:29:92:9f:b5:d7:44:0b:9a:76:
                    9d:74:56:1e:d0:7a:aa:f0:99:9b:ac:3f:29:22:25:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:65:71:CB:BA:1B:FE:AD:C2:23:B1:7E:25:1C:6C:6D:2D:91:93
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:b1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:e4:51:0c:39:8d:62:4d:0e:6a:4f:03:48:7d:4d:4a:0b:
         bb:bd:c9:e3:0d:5d:65:d0:63:0f:69:59:b9:d6:40:64:07:93:
         fa:94:72:ce:c6:7c:94:eb:dc:71:9f:97:b9:da:49:f1:a4:c9:
         79:f1:83:44:f0:02:66:11:f0:23:46:b8:12:b3:59:82:9c:1f:
         88:77:e2:5c:e0:8b:b9:9d:e9:18:01:1e:10:a4:74:07:1a:dd:
         e9:14:91:56:cc:50:28:60:34:87:e3:57:a9:bc:98:c6:70:02:
         5c:18:e2:41:ba:ab:4a:d6:0a:d5:ec:5b:2e:ad:d5:b6:bc:69:
         57:81:2e:94:e1:33:1e:29:81:d6:f2:97:c7:84:16:e9:14:ba:
         87:92:01:4a:40:dd:f5:32:0c:73:37:16:f2:fa:6e:5b:8e:85:
         6f:6c:1e:ae:21:b9:67:10:41:78:8b:96:e4:a4:06:df:d7:02:
         e0:b8:b4:24:9c:36:57:0d:ca:ac:c9:34:58:3a:e0:e2:bf:be:
         df:83:35:3f:17:37:8b:18:d2:40:67:1f:e5:77:42:55:8e:43:
         e4:0d:cb:c9:10:80:99:07:dd:fd:79:15:cf:75:8b:64:14:c7:
         0c:4c:48:63:f7:b3:67:9c:40:c4:75:f3:90:cc:84:13:f4:d5:
         98:03:7d:d4
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUea3jjpbRgyrAv8lqfwlvvFQKN2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTA0MTEyMTA2MDFaFw0yNjA0MTAyMTExMDFaMDMxMTAvBgNV
BAMTKDNDNDY2NTcxQ0JCQTFCRkVBREMyMjNCMTdFMjUxQzZDNkQyRDkxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53xUrc8enKhljVYV9RxaTW4lq
F81tRPq8FslHq+Ckb5wshKF5zV9DPzVxIucJGTPJyT86WpuTqdBWGQqqXSxfdFSt
1f2g6BTQ6kVPYOvelNhXBnyszOkMRz9jYBfu145C8r706Y/AF5+9rqTuhDRhb7Rg
J2MMv3/QpMfMZH++NdJdSpJyMdLl8RfFYZvR51DLYMuvZ/4zHTOqsr4Dt/L/azxu
riyIgYdGB6Ub8PiaB9Mu3E3oGrx/ipMr1yHqCDNqzAMM2Al8/ljg6HunHUvL6JbF
AuPCN5ndtTD2AfAQg9wJj2TCMCmSn7XXRAuadp10Vh7QeqrwmZusPykiJTgbAgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQUPEZlccu6G/6twiOxfiUcbG0tkZMwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYyMzE2NTNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDM0MzQzMzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HCx4wDQYJ
KoZIhvcNAQELBQADggEBAJvP5FEMOY1iTQ5qTwNIfU1KC7u9yeMNXWXQYw9pWbnW
QGQHk/qUcs7GfJTr3HGfl7naSfGkyXnxg0TwAmYR8CNGuBKzWYKcH4h34lzgi7md
6RgBHhCkdAca3ekUkVbMUChgNIfjV6m8mMZwAlwY4kG6q0rWCtXsWy6t1ba8aVeB
LpThMx4pgdbyl8eEFukUuoeSAUpA3fUyDHM3FvL6bluOhW9sHq4huWcQQXiLluSk
Bt/XAuC4tCScNlcNyqzJNFg64OK/vt+DNT8XN4sY0kBnH+V3QlWOQ+QNy8kQgJkH
3f15Fc91i2QUxwxMSGP3s2ecQMR185DMhBP01ZgDfdQ=
-----END CERTIFICATE-----