Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (raw, json)
Hash identifier:          kWfMBt5ZGVfyJKg5d1ZuDzSFiVwPO4bZv13xNVyJl1c=
Subject key identifier:   4F:D4:DE:96:7F:9D:CE:24:3E:C6:4B:7B:48:AB:01:5E:57:25:90:A5
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       64212EB9FED9AB337CE60CD377A4106D497257FE
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
Signing time:             Mon 27 Jan 2025 12:14:14 +0000
ROA not before:           Mon 27 Jan 2025 12:09:14 +0000
ROA not after:            Mon 26 Jan 2026 12:14:14 +0000
asID:                     200952
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:21:2e:b9:fe:d9:ab:33:7c:e6:0c:d3:77:a4:10:6d:49:72:57:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:14 2025 GMT
            Not After : Jan 26 12:14:14 2026 GMT
        Subject: CN=4FD4DE967F9DCE243EC64B7B48AB015E572590A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:f0:14:32:6a:d0:50:fe:0a:a4:8f:82:7d:
                    2e:1f:e9:29:f6:9c:9d:fc:7c:66:05:e6:d9:60:da:
                    ac:8b:6d:93:c0:c0:a9:08:6f:54:c5:da:c6:b3:95:
                    09:f3:75:76:97:33:e2:eb:d8:87:94:06:9f:e5:c3:
                    9b:73:e3:28:15:1f:d9:2c:cb:e1:21:39:4c:a4:26:
                    0a:f6:25:61:39:22:43:64:de:a4:7c:b8:d3:25:59:
                    b8:96:f9:08:67:30:0e:ab:bf:27:3d:f3:f5:c4:05:
                    48:54:d4:a7:99:66:0b:6c:6c:99:a6:84:0a:aa:4a:
                    39:a4:04:ce:c8:58:d3:a3:4f:f8:2e:06:b3:c9:ec:
                    44:d4:01:05:f3:a0:f0:ab:a5:a0:9b:cf:81:c4:11:
                    92:29:51:f9:fe:c9:d0:08:ff:dd:8f:3f:be:99:d2:
                    7a:4f:c4:76:02:a5:26:e5:d2:83:e5:82:d6:a9:3f:
                    aa:60:a8:26:83:e0:b4:b2:90:cf:95:61:a7:b4:76:
                    a7:4f:ba:2a:87:ea:57:a3:29:b7:63:a8:8a:ea:e0:
                    73:5f:06:93:6c:80:1f:46:8c:f8:ed:7f:f6:2e:e8:
                    72:a7:bc:0e:e1:5d:bf:28:89:eb:a6:ad:b0:61:5a:
                    8e:0f:dd:2c:36:f5:dc:17:37:ab:e0:ac:4b:a6:46:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:DE:96:7F:9D:CE:24:3E:C6:4B:7B:48:AB:01:5E:57:25:90:A5
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:60:8e:f7:f7:2e:52:76:04:46:50:bd:9b:6a:ab:4e:55:42:
         07:56:6b:d2:55:c2:7b:15:44:a3:5f:f9:79:2e:01:07:cc:a5:
         c2:63:19:e3:ff:ac:07:e4:dc:76:54:62:d2:a1:59:20:e0:f1:
         aa:f6:fb:48:87:7f:07:31:dd:78:5a:64:5e:9c:2d:8a:19:f7:
         1d:c0:78:e5:db:50:ae:13:ec:2a:96:05:0d:2e:c7:07:6a:35:
         1c:9f:ea:71:1b:77:33:88:88:8a:c8:31:d0:e2:d7:f9:96:d8:
         1c:40:ca:57:b5:62:90:bc:1b:b1:b1:e6:bb:23:4e:df:d6:30:
         72:b1:67:36:87:26:ac:2c:a5:89:4a:8b:e9:ff:44:d1:59:e6:
         2e:2d:ab:d5:c5:e7:11:b3:6b:87:d7:aa:f4:c2:21:56:ae:00:
         22:88:e9:f1:31:8f:ff:15:2f:97:20:86:a8:e1:47:9f:04:23:
         ce:67:ab:60:c4:46:f7:45:e0:3d:ee:16:08:4a:93:b9:5e:63:
         58:62:6b:a5:0a:76:a0:90:ac:7a:bd:ad:f0:9a:fb:5b:e8:d2:
         13:fb:9f:24:ad:3f:05:d1:15:0d:09:a1:44:f9:3e:ce:b1:8e:
         5b:18:7c:4e:a3:5c:de:50:91:80:bb:c3:5c:a3:32:17:48:90:
         f6:c1:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----