Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ZRwY1wu2x4Z4MFeVizCONO2ivROtJo7OoSx2kIzsyro=
Subject key identifier:   73:EB:44:9B:65:99:CB:EE:14:F8:0A:41:91:09:5A:95:11:72:D3:62
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       288670D7DA3969D2BB2D5D566B256E86FAF9CD50
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:48 +0000
ROA not before:           Sat 15 Feb 2025 21:06:48 +0000
ROA not after:            Sat 14 Feb 2026 21:11:48 +0000
asID:                     16909
IP address blocks:        2a14:7584:6001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:86:70:d7:da:39:69:d2:bb:2d:5d:56:6b:25:6e:86:fa:f9:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:48 2025 GMT
            Not After : Feb 14 21:11:48 2026 GMT
        Subject: CN=73EB449B6599CBEE14F80A4191095A951172D362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:41:62:28:76:1e:ce:98:e7:23:0e:bd:ed:
                    94:45:16:e4:9d:15:f3:8d:c3:ec:2d:e2:47:18:f6:
                    0f:63:1b:8b:f6:ab:69:cb:b2:50:1e:47:92:da:c5:
                    20:42:60:3f:b8:ee:1b:e1:8c:fd:48:2a:b3:6b:c0:
                    46:c2:48:36:f9:be:ee:97:93:1d:38:8a:4c:59:a5:
                    1d:3a:f6:71:c2:ad:44:5a:2f:bf:fe:6e:5e:fa:88:
                    cc:92:7a:83:37:b4:29:05:01:16:62:61:76:ec:4d:
                    1f:e0:2b:1f:8b:e2:47:a2:8c:87:db:91:6e:6c:ae:
                    25:c5:f9:65:b3:65:2f:8d:50:a4:1f:c7:0f:22:3c:
                    45:2c:eb:8b:98:a5:a5:21:4b:1e:83:c5:da:c8:7f:
                    f3:50:26:a3:23:3b:63:00:e5:8b:96:79:fe:19:f2:
                    b8:9a:24:8d:03:da:9e:cc:6d:5d:f7:52:ff:c9:6e:
                    26:1b:37:91:98:4f:ab:2e:65:ae:35:4b:bf:dc:c3:
                    30:65:f9:37:c7:70:b3:7a:22:b1:e5:6e:3e:fa:0a:
                    1b:0c:23:c6:5f:c0:11:b9:79:84:db:c2:97:6d:ab:
                    fe:d7:e4:f0:dd:b8:f8:1a:39:06:35:7e:9a:51:7d:
                    9d:dc:96:eb:8d:7f:d7:3c:99:0c:dc:ec:9d:d8:9a:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EB:44:9B:65:99:CB:EE:14:F8:0A:41:91:09:5A:95:11:72:D3:62
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:26:29:2b:64:ea:a0:32:d8:39:13:77:f0:53:76:d1:72:1f:
         35:50:b2:dc:98:ed:87:f7:6b:a9:5b:25:51:4e:e8:25:00:93:
         2a:de:e4:b2:4f:a8:9a:2b:0d:91:ac:b4:bc:68:d7:a3:4a:05:
         e7:ff:ab:7f:95:61:58:5a:24:0c:3e:62:21:d1:e9:7f:d2:a3:
         f2:88:c5:75:8f:7e:8f:af:07:20:ef:e0:43:ea:fa:82:bd:34:
         fb:11:c4:4f:ff:53:eb:c5:bc:d9:42:21:31:7f:ee:82:87:4c:
         d0:6c:bd:fd:50:38:7f:68:6b:57:e8:1d:bd:3d:ef:33:58:fd:
         d0:22:a2:d1:8b:df:01:d4:32:f1:fa:30:2e:b2:52:06:a0:ae:
         a9:d4:33:8a:b0:b2:38:ed:63:7c:da:00:6e:04:8b:3c:8e:59:
         04:16:ef:56:e3:5d:6f:f0:69:4b:88:b8:49:b9:86:ee:dc:df:
         d9:bf:cb:67:c5:90:b6:a3:2d:9e:16:8f:f5:a5:54:ea:ee:ac:
         bc:d2:e0:5a:1f:dd:c2:5f:92:00:4e:0b:db:1c:f7:45:48:2e:
         39:44:c0:a3:67:60:b6:33:98:b9:e3:30:17:00:10:66:8f:64:
         88:7f:8a:cf:84:a3:66:23:07:e4:c0:b1:b6:62:30:cf:07:de:
         04:b1:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----