Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          h6Xz+tsMoWnZXSsQsIW/LH7AHvmHknsi8Ago1bPIVQI=
Subject key identifier:   06:AD:2C:44:AF:ED:D1:0A:10:AD:17:A6:D9:68:81:1F:B9:56:27:6E
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       5CB7E27E5106714F30B6DC691D35C0B46006F744
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
Signing time:             Sat 26 Oct 2024 00:16:40 +0000
ROA not before:           Sat 26 Oct 2024 00:11:40 +0000
ROA not after:            Sat 25 Oct 2025 00:16:40 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b7:e2:7e:51:06:71:4f:30:b6:dc:69:1d:35:c0:b4:60:06:f7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Oct 26 00:11:40 2024 GMT
            Not After : Oct 25 00:16:40 2025 GMT
        Subject: CN=06AD2C44AFEDD10A10AD17A6D968811FB956276E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:d3:be:54:ed:3d:c5:9d:33:48:bf:86:9a:
                    74:cf:57:50:38:09:db:61:ca:75:7c:23:4b:26:50:
                    85:b8:51:35:78:cf:21:67:f5:2c:22:b4:f7:b2:29:
                    91:3f:de:55:c7:01:5b:fe:c9:76:11:6b:2a:85:ae:
                    e7:f2:0d:f9:c5:bb:e4:8b:fc:09:24:6c:24:d5:b4:
                    26:e4:ac:eb:be:1c:c8:60:6c:6c:d6:85:cb:cd:3e:
                    3a:84:94:a6:d7:fe:1a:71:2d:15:c1:f6:03:9b:bd:
                    eb:50:3d:ef:ad:df:ac:ce:53:17:0b:90:48:e9:c7:
                    35:77:30:49:32:77:6e:a9:5e:7e:c6:d0:c0:27:d4:
                    61:e6:ba:8a:80:af:02:55:6a:19:a4:44:10:41:bf:
                    75:5b:e4:6a:3f:5a:9f:09:cb:80:51:6a:27:6a:1e:
                    a3:20:1d:0d:d2:6b:49:51:f6:5a:cc:b4:dd:a6:31:
                    b4:bf:77:21:af:c7:97:ff:f9:74:33:9c:9a:80:58:
                    c7:b8:70:90:a6:8c:8f:19:58:e7:fc:b4:1c:7d:0a:
                    87:20:d7:c1:f4:9a:19:3e:03:be:4e:f6:48:ed:54:
                    45:28:56:cf:d0:18:2a:ee:c6:2e:30:32:0a:a4:92:
                    56:2d:a9:fe:2c:54:90:1a:7c:a8:be:77:8c:d1:b7:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:2C:44:AF:ED:D1:0A:10:AD:17:A6:D9:68:81:1F:B9:56:27:6E
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:3f:59:95:1e:55:dc:01:4d:3f:0b:8d:94:82:e5:99:08:
         55:f6:db:fa:bf:8d:bd:dd:6e:34:25:7c:10:f8:d2:2a:c6:2d:
         67:3a:0f:01:da:4f:92:8b:bd:91:c4:fd:37:dc:72:c9:b4:88:
         d2:03:4e:da:87:a4:56:87:69:73:61:7d:93:51:3c:0b:17:48:
         be:16:a4:80:ac:dd:78:70:63:c9:0b:8b:ac:36:ac:9b:b7:c6:
         c2:7e:0c:b5:dc:21:e4:ac:2a:72:99:0b:2a:b5:74:92:b9:d7:
         2e:0b:21:db:7d:bb:11:37:7b:05:73:38:0d:74:29:a2:5f:88:
         3d:e8:f7:83:5a:1b:55:43:03:ef:bb:99:df:78:75:7d:6b:d3:
         39:9e:3b:0a:5b:e6:29:54:0d:27:ba:b1:9a:af:a6:2d:63:d3:
         05:70:0e:84:ce:57:39:bf:c1:32:56:58:28:3f:cf:7c:e9:7a:
         c7:d8:50:1a:52:3c:65:8e:06:cc:86:4b:05:b7:4a:6d:ab:56:
         9e:00:18:1e:94:7b:bd:df:d6:3b:3b:e6:84:eb:b1:67:a6:11:
         19:96:12:43:37:f3:c0:6a:f5:d1:9a:f9:18:c6:8a:31:bc:c3:
         d4:2f:91:e1:f7:5b:af:16:5e:4d:35:44:b6:2a:7e:1b:03:d1:
         d8:f8:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----