Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3436203d3e203230343733.roa
File:                     326130623a346530373a633a3a2f34362d3436203d3e203230343733.roa (raw, json)
Hash identifier:          0BEeYKQIAwsLldWyjavqtnSAFFq1JBUDBnpYjzp7+bo=
Subject key identifier:   41:E4:1E:78:88:D5:FC:14:D7:1D:70:C7:82:39:AE:6F:28:97:5A:BF
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       0A6EF0058B79BE8065C062E8ADDBB5B07F8298B5
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3436203d3e203230343733.roa
Signing time:             Fri 11 Apr 2025 14:27:14 +0000
ROA not before:           Fri 11 Apr 2025 14:22:14 +0000
ROA not after:            Fri 10 Apr 2026 14:27:14 +0000
asID:                     20473
IP address blocks:        2a0b:4e07:c::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:f0:05:8b:79:be:80:65:c0:62:e8:ad:db:b5:b0:7f:82:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:22:14 2025 GMT
            Not After : Apr 10 14:27:14 2026 GMT
        Subject: CN=41E41E7888D5FC14D71D70C78239AE6F28975ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:60:f5:17:3b:96:85:cd:a9:f1:c2:13:a4:
                    eb:de:51:f6:16:8d:e3:66:a5:8e:04:7a:b9:94:20:
                    c9:dd:93:7b:8c:67:8c:b0:83:e6:74:cb:45:75:70:
                    4c:46:ec:22:46:02:b0:90:51:34:7b:df:93:6c:14:
                    2b:da:dc:a4:2a:ac:61:6b:c7:91:98:9c:24:36:61:
                    89:36:f9:4e:b9:bb:69:46:bb:bf:d7:78:16:96:ea:
                    87:52:5a:c3:90:6b:26:0f:74:55:21:ef:59:cf:79:
                    f6:81:89:3c:e3:7a:b6:d2:15:36:6d:48:c8:ef:39:
                    ae:e9:22:e3:f3:0b:0f:a4:73:47:bc:5c:e8:a2:a5:
                    1d:c7:00:96:71:c9:cc:c1:4b:78:01:a7:97:86:7e:
                    2f:9a:65:24:98:6d:25:e8:d9:5b:81:b9:da:52:62:
                    57:bb:41:91:0b:46:9d:4d:94:eb:24:1d:98:06:b5:
                    ee:b3:a7:51:e0:8d:6e:22:f9:72:ec:f5:96:c4:57:
                    a0:e3:3d:c9:15:24:6d:9a:4d:30:6f:0c:f6:c4:0a:
                    ff:ed:4f:c6:3c:6a:9b:58:b3:3a:1d:66:3a:68:f8:
                    ec:d1:1e:3a:7b:0e:b0:4d:2c:56:f8:75:c1:66:59:
                    15:66:de:13:5b:99:c7:b2:f6:6b:40:09:a5:d7:8c:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:1E:78:88:D5:FC:14:D7:1D:70:C7:82:39:AE:6F:28:97:5A:BF
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3436203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c::/46

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:d6:8d:30:0a:37:a0:b5:3c:5d:4f:37:0e:fb:0a:5b:e5:
         fa:e4:34:bd:e3:32:88:b1:03:91:f6:14:65:81:bb:71:34:1f:
         54:f9:e8:66:ba:9d:2a:b4:c0:b6:84:aa:ca:42:be:f6:79:65:
         5d:4b:26:7a:b3:0d:19:f8:56:0e:fe:86:66:51:b7:ef:50:5a:
         c2:09:77:b9:a0:3d:aa:e7:66:a8:1d:c5:53:20:2b:ba:e2:17:
         46:cb:8e:de:a6:bd:76:e1:da:81:d1:50:f3:de:01:d9:89:98:
         b5:68:e7:1c:b9:e3:9e:d5:c6:7b:f6:fc:ed:b2:33:c6:f4:b9:
         6b:89:21:08:69:fd:77:32:ea:12:7e:0b:a2:44:4f:f2:b5:07:
         88:46:7e:8a:ff:d0:2a:35:84:51:e0:22:f5:9e:2e:28:74:8a:
         c0:69:ab:1c:99:e4:ac:ff:08:7c:b2:d1:44:9a:28:36:44:09:
         04:8c:f1:97:06:1f:b3:0f:c9:9d:8d:7f:52:a4:ae:3f:ed:0b:
         12:9c:87:3d:aa:26:36:1d:c7:ce:14:bb:d4:3d:58:dd:31:57:
         b1:7d:ae:5b:bc:e5:6a:0b:48:19:cf:cf:28:64:ca:11:3f:79:
         22:7e:44:c6:49:38:7b:e1:9c:9d:6c:98:83:00:fe:d6:a0:73:
         a3:4d:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----