Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
File:                     326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          LZXKAa0qX2gsXKINBFRTPEffmqRmfWC+h7bazpaKEXI=
Subject key identifier:   4C:C2:E5:B5:E7:DF:C6:99:98:44:54:F1:8A:05:98:41:3C:6A:24:D3
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       796E59CF2D2AB2429DBB5624567D99BD26D94866
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
Signing time:             Fri 11 Apr 2025 20:26:42 +0000
ROA not before:           Fri 11 Apr 2025 20:21:42 +0000
ROA not after:            Fri 10 Apr 2026 20:26:42 +0000
asID:                     13852
IP address blocks:        2a0b:4e07:da::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:59:cf:2d:2a:b2:42:9d:bb:56:24:56:7d:99:bd:26:d9:48:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 20:21:42 2025 GMT
            Not After : Apr 10 20:26:42 2026 GMT
        Subject: CN=4CC2E5B5E7DFC699984454F18A0598413C6A24D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:12:d2:3f:68:76:3f:bb:b8:9d:1e:27:6f:
                    d3:6f:a7:6c:54:45:1a:17:61:aa:0f:fb:e9:9c:c4:
                    32:1c:c9:55:75:e5:47:08:35:6b:3e:d4:b3:0e:98:
                    cc:6a:3a:c5:61:f3:ad:c2:8a:62:90:92:c0:0d:47:
                    4f:09:a4:89:aa:d3:f8:0d:1f:8d:0a:c1:9b:b4:d2:
                    42:24:bd:aa:e8:82:2c:6c:2e:45:3a:bb:80:57:63:
                    ea:26:de:fc:8e:31:e1:95:20:29:e2:bf:ef:e9:52:
                    b9:b8:f8:2b:fa:48:3b:0b:7d:63:d9:de:4f:f0:8a:
                    57:9e:b2:4f:79:ba:a2:a3:0a:c5:38:0e:03:80:c9:
                    57:ce:db:f4:c2:ad:26:ad:3d:bd:b1:99:64:21:af:
                    fb:6c:76:d4:bb:91:a4:56:c3:02:35:22:b4:f6:06:
                    ba:32:49:6d:15:99:40:41:ee:d8:c6:77:96:20:0a:
                    ea:00:9a:37:4d:a7:d8:a8:58:a7:b0:9d:47:14:f1:
                    ad:a7:dc:4e:bc:89:2c:56:43:44:45:6b:8d:9a:51:
                    d9:17:25:d8:75:0d:02:92:f3:ef:26:e7:13:85:59:
                    f5:3f:cb:14:8a:15:4b:7d:a2:11:a7:a3:c0:f7:51:
                    27:6a:57:57:fc:46:33:aa:33:b0:7d:e0:61:61:df:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C2:E5:B5:E7:DF:C6:99:98:44:54:F1:8A:05:98:41:3C:6A:24:D3
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:da::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:2d:73:20:18:fc:83:d0:45:b6:b9:96:9a:8a:35:dc:e5:
         ba:cd:b4:c8:6a:8d:d1:81:51:0f:f2:6a:a8:26:ab:ba:3c:f3:
         9f:3d:b8:41:23:b0:ed:82:eb:b2:18:d7:69:ee:d4:82:5c:fe:
         be:a5:1c:cd:08:3d:cc:66:4e:81:d3:8e:d8:9d:b7:62:23:b4:
         ab:5f:57:5d:2f:00:66:da:cd:92:2b:4e:a4:0c:68:f4:3a:e5:
         6e:86:32:1a:b1:ce:af:55:cf:1e:f5:47:ab:d3:b9:d6:d1:1c:
         45:01:28:0c:37:b2:f3:22:f8:3c:f3:9f:b5:4f:7c:c3:2f:ea:
         ce:3d:a4:86:3e:c9:c4:5d:a8:f6:6f:0b:0c:d4:34:d1:92:a8:
         c0:d8:5b:9f:11:64:53:fc:be:c5:bb:22:5f:be:9b:54:85:6d:
         06:79:0b:9d:3d:ed:84:a2:f5:52:b6:dc:55:61:c6:fe:cc:b4:
         db:8e:62:93:94:16:21:b3:95:f3:dc:cd:fb:5b:44:81:1b:f6:
         8b:73:37:33:9b:74:db:9b:21:07:90:86:31:01:10:5f:6a:a4:
         61:9b:41:5a:01:d1:76:c4:26:83:2d:9d:41:dd:34:71:91:3d:
         b1:5e:f0:f3:fb:f6:a9:e2:05:36:77:d1:fa:52:a5:fc:2d:07:
         71:91:6a:38
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUeW5Zzy0qskKdu1YkVn2ZvSbZSGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTA0MTEyMDIxNDJaFw0yNjA0MTAyMDI2NDJaMDMxMTAvBgNV
BAMTKDRDQzJFNUI1RTdERkM2OTk5ODQ0NTRGMThBMDU5ODQxM0M2QTI0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGXhLSP2h2P7u4nR4nb9Nvp2xU
RRoXYaoP++mcxDIcyVV15UcINWs+1LMOmMxqOsVh863CimKQksANR08JpImq0/gN
H40KwZu00kIkvarogixsLkU6u4BXY+om3vyOMeGVICniv+/pUrm4+Cv6SDsLfWPZ
3k/wileesk95uqKjCsU4DgOAyVfO2/TCrSatPb2xmWQhr/tsdtS7kaRWwwI1IrT2
BroySW0VmUBB7tjGd5YgCuoAmjdNp9ioWKewnUcU8a2n3E68iSxWQ0RFa42aUdkX
Jdh1DQKS8+8m5xOFWfU/yxSKFUt9ohGno8D3USdqV1f8RjOqM7B94GFh31KxAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUTMLlteffxpmYRFTxigWYQTxqJNMwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTY0NjEzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtOBwDaMA0GCSqG
SIb3DQEBCwUAA4IBAQAFai1zIBj8g9BFtrmWmoo13OW6zbTIao3RgVEP8mqoJqu6
PPOfPbhBI7DtguuyGNdp7tSCXP6+pRzNCD3MZk6B047YnbdiI7SrX1ddLwBm2s2S
K06kDGj0OuVuhjIasc6vVc8e9Uer07nW0RxFASgMN7LzIvg885+1T3zDL+rOPaSG
PsnEXaj2bwsM1DTRkqjA2FufEWRT/L7FuyJfvptUhW0GeQudPe2EovVSttxVYcb+
zLTbjmKTlBYhs5Xz3M37W0SBG/aLczczm3TbmyEHkIYxARBfaqRhm0FaAdF2xCaD
LZ1B3TRxkT2xXvDz+/ap4gU2d9H6UqX8LQdxkWo4
-----END CERTIFICATE-----