Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          aFbsjoWAneNkI8o6u6f5BeJwyYAO39ZOCKuKkxuGmdk=
Subject key identifier:   5B:DD:E5:FE:0B:D4:6B:97:DF:FF:77:8A:38:41:B3:8C:BC:B9:A1:F0
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       3C8F344652C5A82BD6A4ECE122F2D142FAD535E2
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
Signing time:             Mon 27 Jan 2025 12:14:14 +0000
ROA not before:           Mon 27 Jan 2025 12:09:14 +0000
ROA not after:            Mon 26 Jan 2026 12:14:14 +0000
asID:                     50755
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8f:34:46:52:c5:a8:2b:d6:a4:ec:e1:22:f2:d1:42:fa:d5:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:14 2025 GMT
            Not After : Jan 26 12:14:14 2026 GMT
        Subject: CN=5BDDE5FE0BD46B97DFFF778A3841B38CBCB9A1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:85:d7:f8:11:8e:a9:aa:c3:2c:e8:25:45:
                    5c:de:96:95:71:e4:24:55:02:a3:86:d1:0a:02:56:
                    f1:e7:20:d4:cf:c9:3e:8d:23:83:28:81:a5:ed:4d:
                    7d:52:f3:1c:ef:ab:ff:9c:8d:ce:f3:7c:ab:fc:73:
                    4c:cc:39:3b:e2:56:c3:71:41:75:12:b0:ef:c3:ed:
                    13:8b:9b:5f:9b:60:09:23:88:fa:21:6e:12:37:ff:
                    25:4e:22:c3:48:cc:01:34:ce:16:48:77:ea:24:94:
                    27:82:1c:d8:05:76:f5:7b:e0:9f:c8:36:b5:72:a5:
                    7c:ca:c5:41:25:3f:ae:66:88:16:88:55:e1:b1:6a:
                    5d:4a:63:11:e7:85:04:5c:eb:a9:e1:00:b9:70:2b:
                    16:18:d7:42:8f:06:d0:58:e1:a6:f3:ad:0c:cd:02:
                    9d:7d:1a:13:f3:ed:51:b0:5d:7c:a0:5d:84:10:56:
                    48:b3:27:7c:2a:cf:76:5e:e4:51:0f:49:76:b8:46:
                    74:bc:50:35:f5:c2:ca:4e:85:5c:74:03:63:c5:d1:
                    e2:97:61:68:b6:4b:9f:87:dd:4e:c8:79:d5:16:a2:
                    8b:e6:57:67:66:88:3e:94:ed:d3:a3:b1:a7:12:d3:
                    29:25:dd:67:0a:c6:e5:05:7d:6b:a6:c9:36:48:fc:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:E5:FE:0B:D4:6B:97:DF:FF:77:8A:38:41:B3:8C:BC:B9:A1:F0
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:85:41:91:d2:82:8c:55:4f:21:ef:96:ba:1c:70:ec:52:
         1a:b2:94:73:11:a8:32:fb:f1:23:40:df:f3:61:ac:af:89:89:
         aa:c5:6f:07:d3:e9:e1:0a:ac:3b:cf:ec:de:13:d3:34:ea:50:
         b0:1c:2a:2a:08:f3:5e:0c:ce:e5:cf:90:b9:9d:5b:71:46:43:
         45:a7:d9:eb:b8:1b:d6:ad:af:64:46:ab:cf:13:11:f7:7d:e8:
         e0:40:60:f5:76:7b:ce:0e:8f:3e:ca:1b:29:ce:f4:90:d1:1a:
         28:e7:44:70:4f:bb:17:d3:57:58:01:28:a2:90:99:cf:33:1b:
         8b:4d:25:a8:d0:3e:bc:0e:ca:4a:25:22:94:c2:e8:1e:eb:b9:
         07:01:ca:06:43:13:43:48:74:7c:56:84:0c:05:fb:56:97:78:
         6f:1b:c3:95:dd:a2:3d:e6:39:b9:8a:37:1e:6b:26:e0:5b:51:
         c2:c8:0b:cf:62:c1:a9:a9:1e:13:a9:9f:a3:16:e5:0f:11:a5:
         ab:c1:ac:99:71:3e:70:f8:9e:e6:71:f8:32:ba:56:56:f0:f1:
         2b:d5:f8:bc:76:e5:0c:4e:1f:4b:b3:1e:c7:b9:fc:00:d3:b5:
         3d:21:0b:08:4f:81:29:d4:76:15:b4:00:5a:d0:45:85:2e:6d:
         d6:01:73:da
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPI80RlLFqCvWpOzhIvLRQvrVNeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTRaFw0yNjAxMjYxMjE0MTRaMDMxMTAvBgNV
BAMTKDVCRERFNUZFMEJENDZCOTdERkZGNzc4QTM4NDFCMzhDQkNCOUExRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK84XX+BGOqarDLOglRVzelpVx
5CRVAqOG0QoCVvHnINTPyT6NI4MogaXtTX1S8xzvq/+cjc7zfKv8c0zMOTviVsNx
QXUSsO/D7ROLm1+bYAkjiPohbhI3/yVOIsNIzAE0zhZId+oklCeCHNgFdvV74J/I
NrVypXzKxUElP65miBaIVeGxal1KYxHnhQRc66nhALlwKxYY10KPBtBY4abzrQzN
Ap19GhPz7VGwXXygXYQQVkizJ3wqz3Ze5FEPSXa4RnS8UDX1wspOhVx0A2PF0eKX
YWi2S5+H3U7IedUWoovmV2dmiD6U7dOjsacS0ykl3WcKxuUFfWumyTZI/MIzAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUW93l/gvUa5ff/3eKOEGzjLy5ofAwHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzMDM3MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAnTWFQZHSgoxVTyHvlroccOxSGrKUcxGoMvvxI0Df
82Gsr4mJqsVvB9Pp4QqsO8/s3hPTNOpQsBwqKgjzXgzO5c+QuZ1bcUZDRafZ67gb
1q2vZEarzxMR933o4EBg9XZ7zg6PPsobKc70kNEaKOdEcE+7F9NXWAEoopCZzzMb
i00lqNA+vA7KSiUilMLoHuu5BwHKBkMTQ0h0fFaEDAX7Vpd4bxvDld2iPeY5uYo3
Hmsm4FtRwsgLz2LBqakeE6mfoxblDxGlq8GsmXE+cPie5nH4MrpWVvDxK9X4vHbl
DE4fS7Mex7n8ANO1PSELCE+BKdR2FbQAWtBFhS5t1gFz2g==
-----END CERTIFICATE-----