Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          Uc79gcztvVNrVXuoLJZOmiSLe+RHrdTATKJGRg0ZxU4=
Subject key identifier:   38:64:9B:30:3D:1B:84:59:C6:3C:04:F4:4B:6A:96:3A:56:AF:54:48
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       49C2693EDE1B4F1A4154FCE4877693B68A26BF8B
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
Signing time:             Mon 27 Jan 2025 12:14:13 +0000
ROA not before:           Mon 27 Jan 2025 12:09:13 +0000
ROA not after:            Mon 26 Jan 2026 12:14:13 +0000
asID:                     57870
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c2:69:3e:de:1b:4f:1a:41:54:fc:e4:87:76:93:b6:8a:26:bf:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:13 2025 GMT
            Not After : Jan 26 12:14:13 2026 GMT
        Subject: CN=38649B303D1B8459C63C04F44B6A963A56AF5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:47:7f:96:c2:54:02:ed:27:ef:d1:e6:1e:
                    aa:ab:4c:a8:3a:17:a7:57:d0:f6:77:37:cb:fb:d6:
                    69:40:c1:b3:b4:5a:ce:7f:e5:c5:53:c9:5f:33:c6:
                    03:32:56:d8:79:d0:0a:af:7a:3a:d8:9c:84:fe:93:
                    96:80:9a:e4:93:5c:5c:f5:07:36:3f:92:1a:79:c4:
                    ea:99:dd:0b:eb:e5:8b:90:ab:32:9d:7d:0c:91:d9:
                    23:5a:91:b3:f4:49:3a:da:cf:45:6d:0b:9e:fc:84:
                    9a:cb:f8:d3:a6:25:af:1c:e4:f1:cd:87:d3:f3:b5:
                    81:b4:95:bb:af:58:ac:f8:8c:25:61:a2:ee:72:12:
                    59:01:61:31:ab:2c:97:7f:2b:d0:5e:b9:62:fc:22:
                    9b:ca:d9:61:c8:83:5a:c2:14:f9:78:4f:ee:3f:71:
                    ff:ad:50:41:1d:dd:eb:a0:60:ce:ce:f7:25:e9:df:
                    59:06:69:87:c0:04:89:83:d5:c5:8a:8a:da:c3:e8:
                    8f:51:77:3a:e2:42:df:09:96:bf:49:4a:ad:81:ee:
                    5a:03:20:a4:06:ed:50:1e:04:2a:95:52:86:12:89:
                    0a:68:75:2a:c1:5c:cf:15:ad:e9:84:28:63:33:e1:
                    64:d2:5a:36:de:a5:5b:38:b6:63:88:b7:0f:8b:6a:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:9B:30:3D:1B:84:59:C6:3C:04:F4:4B:6A:96:3A:56:AF:54:48
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:a1:cb:77:58:af:4e:21:3f:87:a2:d2:f9:59:41:43:24:
         2d:f6:e7:4f:aa:8a:d8:0f:3c:e4:22:13:75:7c:42:18:d4:22:
         e5:ac:62:1e:f9:97:05:10:9b:4c:46:31:f6:71:97:31:42:11:
         b7:a5:75:de:d4:87:6f:9e:45:1b:f6:1c:db:8d:c5:52:e8:51:
         e0:d3:3b:0b:b3:76:33:e2:a3:8f:69:88:85:5e:c5:0d:9e:88:
         51:48:09:b6:b1:a8:82:ec:ed:aa:2f:43:b1:a2:87:81:c5:c4:
         b3:30:39:3f:d5:fd:16:fb:47:52:cd:69:ef:42:11:b2:62:81:
         97:50:80:2b:27:50:f9:b5:e6:d3:9b:c4:ba:f4:da:fb:c5:8a:
         89:5a:b7:89:32:a9:11:f1:d7:f8:38:53:80:04:00:75:a8:03:
         fb:c3:0b:57:42:ee:3f:66:63:7b:2d:33:53:91:ee:d2:1f:1a:
         f0:6d:ee:4e:67:03:52:3e:88:ca:b2:d4:a0:7b:a2:5f:dc:a3:
         0f:06:5f:1e:43:76:d9:9f:6a:1d:6e:5f:73:19:27:63:b5:a9:
         b1:95:73:f1:9a:c4:bb:73:9c:e8:d8:99:87:e1:38:2a:08:1e:
         b6:3d:8b:05:61:4e:9b:1c:83:72:b2:68:da:81:c0:7a:3c:b8:
         8b:5f:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----