Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa
File:                     326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (raw, json)
Hash identifier:          PAUZsioMtEm7PxJwzY2q0rE7BZSWPV/A+DJkY9MRxFw=
Subject key identifier:   B8:E4:65:3D:98:77:75:2F:E8:66:87:5F:B1:94:C3:68:D3:AE:CE:3C
Certificate issuer:       /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial:       537F9E3463D87153899ACEACF864F4BC55AAA820
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa
Signing time:             Thu 13 Feb 2025 02:42:22 +0000
ROA not before:           Thu 13 Feb 2025 02:37:22 +0000
ROA not after:            Thu 12 Feb 2026 02:42:22 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a800::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:9e:34:63:d8:71:53:89:9a:ce:ac:f8:64:f4:bc:55:aa:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
        Validity
            Not Before: Feb 13 02:37:22 2025 GMT
            Not After : Feb 12 02:42:22 2026 GMT
        Subject: CN=B8E4653D9877752FE866875FB194C368D3AECE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:cb:06:e0:4a:f7:37:ab:8d:fc:b1:6f:a8:
                    99:e2:0a:36:df:bf:bf:c9:68:be:65:1b:d7:97:0e:
                    6f:1f:6a:89:67:e2:bd:b7:15:1b:3f:21:12:f6:9f:
                    76:ff:58:98:70:57:2c:cd:82:34:49:4b:d2:1b:6f:
                    5f:2d:b4:17:d9:1b:ce:37:9c:eb:2b:3b:3a:43:35:
                    f9:10:1c:50:b9:fb:ec:6c:e7:21:db:dc:b2:0e:8c:
                    8b:6f:29:26:4d:bb:eb:e7:ee:c8:ee:51:20:be:7e:
                    a3:33:8a:57:32:7e:39:2a:83:00:bd:0d:a8:2c:93:
                    64:14:df:ab:e4:b5:33:ec:d8:75:18:17:51:60:be:
                    6e:cf:63:05:b7:b3:bc:5f:f2:4d:d1:99:43:55:82:
                    65:82:0d:11:36:2f:32:35:d4:69:ed:e4:0c:a3:be:
                    b3:76:a5:42:78:00:a8:8e:07:a8:e2:d8:6f:e5:3d:
                    27:fc:1e:21:0a:8f:cc:b0:a6:cd:8a:7b:2c:3a:68:
                    3d:f4:9f:77:52:dc:9f:30:cd:a7:5d:46:57:a3:88:
                    77:1f:7e:3d:f5:44:fd:9d:89:4e:c5:3a:ac:ec:a9:
                    f4:01:53:1d:d9:e4:bb:5e:0b:bf:d3:f7:50:a9:44:
                    b6:93:a4:a4:de:0d:d5:b7:4c:e5:7d:22:87:9b:ed:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E4:65:3D:98:77:75:2F:E8:66:87:5F:B1:94:C3:68:D3:AE:CE:3C
            X509v3 Authority Key Identifier:
                keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a800::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:83:dc:b4:9f:db:72:4f:22:37:a0:3d:06:13:6f:e0:8e:f6:
         3d:ec:91:c2:d0:3e:d4:f6:6d:01:3b:9f:84:57:8d:aa:dc:7e:
         f3:95:ba:59:22:96:03:3a:90:bd:61:1d:d8:34:b6:5d:5a:ec:
         a9:d3:e1:1c:c6:09:2c:c2:95:bb:26:0b:c5:09:64:3a:35:7d:
         82:10:dd:17:3b:1c:0b:5b:27:c1:cb:9a:e8:f6:df:0b:e3:dc:
         95:2b:1e:f6:bc:0e:df:5a:82:cd:cd:0b:eb:72:b3:a2:3a:dd:
         be:cb:a2:21:f9:b4:a7:87:3b:79:47:90:f2:2e:3d:3f:5f:65:
         9d:12:11:64:f7:ef:ec:cc:f0:ce:c0:16:de:46:02:23:fd:5b:
         03:81:3a:5c:a1:7e:ba:80:7b:0b:71:00:8b:f1:d5:9b:d3:0c:
         1b:33:40:ae:37:5d:12:27:6c:99:85:e0:bb:ef:ba:f3:b4:29:
         bd:4f:37:a6:72:3f:fa:18:68:08:f4:2f:6d:16:a4:90:27:d1:
         76:7c:a9:fe:53:05:57:a3:46:4c:da:14:d2:29:c4:85:fd:0b:
         f1:7e:25:f6:3b:66:71:fb:61:a0:98:2b:91:30:aa:dc:15:90:
         80:16:ff:02:1e:cd:b3:e7:b0:be:e6:90:94:f2:8a:29:4c:27:
         b8:8b:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----