Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Cky27nE38R/njAlngkeuDLtPbD+lX0tY+g/plqyuqro=
Subject key identifier:   6D:12:AC:72:04:BA:D1:52:99:86:0B:CF:31:38:38:5B:09:67:22:7C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6DE127BC8A33EEA6D69C800C1D01D78EB34993D7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:53 +0000
ROA not before:           Sat 15 Feb 2025 21:06:53 +0000
ROA not after:            Sat 14 Feb 2026 21:11:53 +0000
asID:                     16909
IP address blocks:        2a14:7584:6007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:27:bc:8a:33:ee:a6:d6:9c:80:0c:1d:01:d7:8e:b3:49:93:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:53 2025 GMT
            Not After : Feb 14 21:11:53 2026 GMT
        Subject: CN=6D12AC7204BAD15299860BCF3138385B0967227C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:cd:7c:cb:db:d1:68:a0:24:f9:ff:cd:c1:
                    36:0c:6a:7a:9d:2d:d3:15:4d:02:80:23:34:48:8e:
                    68:68:fc:2b:da:d0:b4:08:a6:b9:11:59:a7:ff:73:
                    81:9b:45:31:38:0c:62:62:b8:41:c9:ef:7d:81:97:
                    77:9e:8f:77:8b:00:81:22:d5:0e:c3:ec:ec:fa:73:
                    a5:b3:cf:0c:20:3d:29:cc:63:c0:7e:ff:53:4e:a5:
                    85:cc:35:c8:1d:f3:e2:3b:a7:97:6f:3f:64:9c:03:
                    c6:1a:b7:57:e0:4c:4f:7b:26:5d:49:b7:57:4b:d4:
                    a8:20:0e:a6:1d:07:c2:b4:4c:d6:e7:e1:06:e6:88:
                    59:65:3d:26:ef:61:f7:f1:5e:4d:9a:e9:c5:df:24:
                    71:1b:54:a6:e7:ef:86:55:62:fa:4f:93:4e:94:e5:
                    7b:02:27:de:e7:19:5a:01:8b:6c:67:cc:83:fc:bc:
                    73:6f:bb:d8:b4:fc:8e:2c:d5:52:4c:41:65:9b:05:
                    7b:4e:3f:df:53:06:42:c3:7a:0d:06:eb:32:d7:b5:
                    8e:73:77:79:f5:34:0b:16:3e:5a:c5:3c:25:ae:90:
                    4e:49:0b:f5:ba:18:4a:69:37:c6:e4:b9:54:a0:55:
                    cd:5e:ee:1a:98:80:b1:54:62:29:e7:1e:3e:2c:ed:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:AC:72:04:BA:D1:52:99:86:0B:CF:31:38:38:5B:09:67:22:7C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:03:65:d5:fd:49:ec:dd:16:12:9c:14:43:75:06:3d:16:c2:
         03:28:ca:5f:33:1f:b5:6f:9d:01:57:89:08:09:24:52:d7:a1:
         63:da:26:c8:97:8e:cf:5d:72:18:10:59:75:c5:0d:a4:8a:93:
         dd:46:b6:b1:c7:f2:15:bc:a1:4f:88:89:e3:df:59:7a:49:90:
         4c:89:ba:a6:f0:26:e4:1d:a9:36:fe:02:14:9d:c4:9e:dc:f4:
         c0:7c:1d:fb:1c:fa:f1:bc:f8:11:66:63:4f:30:41:38:c8:f5:
         83:0b:40:93:4a:50:07:8f:3d:ce:a6:b6:28:e6:e4:40:7d:46:
         86:c0:42:82:4b:84:0c:e7:b2:ef:0a:04:76:88:bd:8f:66:f8:
         c1:ed:51:b9:fc:08:1c:29:9b:02:5f:09:ad:ed:65:04:39:29:
         4c:d0:93:ea:56:5c:65:2a:e8:a5:f8:fc:6f:9a:e0:d5:bc:7f:
         d7:e8:df:39:52:64:c4:ae:c7:3c:d2:49:ff:07:18:f1:2a:40:
         a4:4e:d7:41:56:0b:24:2b:22:72:0d:9a:6b:9c:60:09:39:7d:
         d3:39:e3:f5:2d:3d:72:e3:70:7e:ab:3c:33:6c:1e:66:f6:51:
         08:98:28:1e:ff:d4:fc:b8:c1:3a:d8:b1:d4:9c:f0:9c:1e:19:
         89:26:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----