Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
File:                     326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (raw, json)
Hash identifier:          /v5pjCb/RP75bmbsqR1Q9Vp2eR3HGIFoN/eeGc4DLz0=
Subject key identifier:   99:81:CD:01:20:5D:C3:96:A6:F7:B9:5C:D4:0F:74:35:CC:14:2B:1F
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       192DDBCB42FC7057012263BDC105BC636E44E6F9
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
Signing time:             Mon 27 Jan 2025 12:14:15 +0000
ROA not before:           Mon 27 Jan 2025 12:09:15 +0000
ROA not after:            Mon 26 Jan 2026 12:14:15 +0000
asID:                     199545
IP address blocks:        2a0a:6040:4b4b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2d:db:cb:42:fc:70:57:01:22:63:bd:c1:05:bc:63:6e:44:e6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Jan 27 12:09:15 2025 GMT
            Not After : Jan 26 12:14:15 2026 GMT
        Subject: CN=9981CD01205DC396A6F7B95CD40F7435CC142B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:d8:e6:b6:a9:38:de:99:62:4a:7f:fc:a5:
                    d3:8f:83:db:2c:37:30:8c:b8:b2:15:c2:74:0e:72:
                    3c:65:db:94:93:81:3e:bf:bf:ad:8c:61:09:4e:de:
                    2a:4b:a7:53:18:a6:c1:95:f2:96:80:e5:57:1d:b7:
                    a7:c0:54:0e:2f:f8:3d:93:3c:aa:2b:73:97:a7:a0:
                    46:0e:c6:de:d5:fb:31:2e:ee:32:92:1b:dc:b1:30:
                    b2:39:f3:d8:b1:79:64:1d:aa:41:2c:21:55:cb:57:
                    b0:c3:13:3b:6a:87:e4:f5:52:a9:83:d2:fd:1b:72:
                    3a:07:29:3c:64:d2:bc:91:42:46:7f:80:3d:f5:be:
                    ca:0f:39:11:e3:4d:04:6d:15:f7:dc:a2:93:64:08:
                    a3:b7:b2:0e:0d:f7:01:dc:85:e7:46:80:0d:81:83:
                    c4:03:c1:ec:05:62:bf:49:dc:0d:7b:f9:f5:09:1a:
                    9a:d9:66:e0:0c:a8:b6:58:bf:ef:b7:a3:78:59:6a:
                    bb:ac:10:9b:13:c9:c1:25:d9:83:25:68:03:44:39:
                    d6:fe:40:75:48:ee:b4:e2:b2:40:c8:02:a3:dc:51:
                    30:c6:1d:27:5d:60:31:22:72:48:c1:54:51:76:48:
                    98:1c:b1:4e:0c:37:6a:a7:8b:52:d0:29:38:b5:7b:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:CD:01:20:5D:C3:96:A6:F7:B9:5C:D4:0F:74:35:CC:14:2B:1F
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4b4b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:37:62:15:05:86:f3:15:67:9f:6d:9d:11:6f:ab:4b:00:f0:
         a4:e0:03:e8:e5:4c:3b:79:8a:ca:4e:46:e9:90:52:54:e0:af:
         51:f9:2e:f6:f0:f7:b8:8c:a9:d2:f6:8e:4d:a7:5c:e1:d5:92:
         9c:34:4f:ce:e2:9d:fa:14:94:86:57:23:2e:11:41:ee:e7:11:
         5c:e4:26:ec:3d:63:29:81:e2:05:ee:0c:ce:88:e3:a1:1b:a9:
         b5:40:d5:53:2f:00:e5:2e:ad:c8:75:14:3f:3c:15:ab:40:bd:
         4d:3b:f0:12:4e:be:75:9e:35:94:e7:17:98:9b:c0:30:a4:ec:
         02:73:c5:ed:7d:d4:be:ba:9e:93:1b:f5:3b:27:85:29:85:9e:
         e8:a0:92:79:60:47:7b:44:92:e0:69:51:4e:eb:78:c5:e8:05:
         22:e0:40:0c:4f:3f:55:bd:f1:9a:e5:94:c3:2d:10:ce:b7:39:
         00:ea:78:47:8b:02:bb:f4:58:7b:b9:11:ff:60:b4:9e:0c:a0:
         d6:f0:21:7f:f8:00:a9:1b:14:3f:17:fc:e5:db:cf:1b:bc:6f:
         ee:a4:90:c4:15:18:0c:15:83:ca:c0:f6:3d:d5:20:d1:42:5b:
         c1:59:08:7d:f7:f7:99:d3:79:ca:81:e0:88:e2:34:95:93:eb:
         c9:45:7d:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----