Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          w0pekQOgawsB7c73EzKkTdK43N0wJd0s/IvmSEPxfoE=
Subject key identifier:   CF:96:B1:7F:53:C3:08:F3:9E:D1:EE:1E:BD:C7:30:26:4D:C9:9C:FA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       19DF88064BC25236FED1664E7EB671523A6CA018
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:51 +0000
ROA not before:           Sat 15 Feb 2025 21:06:51 +0000
ROA not after:            Sat 14 Feb 2026 21:11:51 +0000
asID:                     16909
IP address blocks:        2a14:7584:6005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:88:06:4b:c2:52:36:fe:d1:66:4e:7e:b6:71:52:3a:6c:a0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:51 2025 GMT
            Not After : Feb 14 21:11:51 2026 GMT
        Subject: CN=CF96B17F53C308F39ED1EE1EBDC730264DC99CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:a0:eb:b8:ca:12:8b:62:24:5b:54:2e:53:
                    31:4e:97:c5:f9:d3:5f:68:7d:9e:8f:03:89:8e:27:
                    1c:b4:97:00:f6:b8:c0:14:3f:a0:cd:2e:8a:9a:12:
                    c4:b9:68:a1:c1:b6:ae:21:a9:68:58:39:94:c6:ea:
                    27:02:0e:a1:da:e3:47:1d:54:65:01:d5:ce:eb:c4:
                    b3:48:7c:11:ca:96:35:1e:d2:97:93:ce:3b:93:02:
                    20:33:d2:72:83:aa:4a:4d:55:53:1f:15:35:aa:10:
                    c1:65:cd:09:1f:d9:eb:8f:ef:1b:d2:fb:e0:37:90:
                    ea:dd:a6:19:ba:2b:a6:42:9a:50:60:36:ec:bb:00:
                    44:81:94:6e:35:74:42:37:9b:bd:7d:d5:69:b6:aa:
                    47:9b:0e:26:a5:62:74:bc:08:4d:17:a6:20:f1:f5:
                    3e:83:9e:ae:65:96:9d:f4:bc:80:e7:f4:3d:e7:8b:
                    48:3f:84:54:d2:f0:a7:27:9f:d1:22:76:29:b0:fc:
                    9e:d7:cc:4e:3f:ac:c5:c2:fd:a5:39:e6:39:06:7a:
                    58:2d:66:b4:f7:c0:de:92:51:d3:41:29:60:b8:32:
                    41:38:ff:ac:30:54:e2:43:3f:84:b3:ec:5e:db:5c:
                    d0:5d:f6:a4:7c:67:51:25:dd:97:c0:d8:c7:68:07:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:B1:7F:53:C3:08:F3:9E:D1:EE:1E:BD:C7:30:26:4D:C9:9C:FA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:73:25:56:e5:21:6f:b1:11:4b:01:47:a8:b2:f4:c6:7c:
         01:32:d3:7f:c3:68:04:c0:bb:44:e7:bc:b6:a8:a3:68:0d:ff:
         a7:e0:da:63:95:bb:39:5d:35:86:4b:12:5e:89:aa:45:d3:28:
         fd:58:32:ca:0a:42:34:c9:e2:21:e0:2e:08:02:84:c9:87:43:
         cf:74:ca:55:19:82:d3:36:07:53:fd:42:f6:42:a3:56:a5:61:
         ee:ba:9a:57:30:ff:cb:92:fc:c8:ac:27:2e:f6:32:0b:43:74:
         fd:90:9a:b7:83:2f:84:0a:b2:05:af:00:32:7e:1f:73:81:0d:
         49:ec:61:ec:da:75:0e:05:bd:33:21:28:f7:61:7f:02:62:80:
         e3:43:10:a8:5e:73:41:88:3e:23:38:e1:3e:d5:65:56:cd:2a:
         20:2f:c6:e4:53:57:14:16:09:8a:74:7c:2e:95:31:83:bb:d1:
         02:e0:f5:5d:6a:47:75:dd:8b:cb:f9:a9:d7:4b:7a:2e:4e:f5:
         a4:27:9f:5f:4a:5f:08:d3:14:47:dc:c1:83:1e:a5:2b:47:05:
         a1:68:9d:c8:f6:44:cc:74:1e:b9:da:68:53:a9:6b:6b:df:dd:
         2d:6e:88:26:10:39:c8:a1:30:86:bf:47:7c:b1:ca:d4:09:f2:
         f6:66:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----