Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          GIQzlKQYFmLWmCo7+98StjcIeMNdS6LdDMMpXmNNxmU=
Subject key identifier:   B6:B9:A2:81:E7:78:34:43:A5:9A:08:3A:E9:27:2E:EA:0B:E0:AB:04
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0A9B37C896ED0FBCB1B1E967476DA73FD0BE2B9B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:21 +0000
ROA not before:           Sat 15 Feb 2025 21:07:21 +0000
ROA not after:            Sat 14 Feb 2026 21:12:21 +0000
asID:                     16909
IP address blocks:        2a14:7584:600c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9b:37:c8:96:ed:0f:bc:b1:b1:e9:67:47:6d:a7:3f:d0:be:2b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:21 2025 GMT
            Not After : Feb 14 21:12:21 2026 GMT
        Subject: CN=B6B9A281E7783443A59A083AE9272EEA0BE0AB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:e5:72:24:27:76:8e:db:5c:c5:45:55:fb:
                    72:59:89:19:c8:ae:42:f6:4d:fd:0b:bf:09:1c:08:
                    58:e9:2b:fa:ce:99:c5:96:88:17:6a:c7:ca:30:d9:
                    26:b1:44:d0:b6:bb:37:2b:73:e9:17:c8:3c:f8:f7:
                    f1:80:86:96:4b:b6:17:6b:2a:ba:f1:94:74:18:83:
                    1b:a9:e8:de:69:16:ee:cd:b5:3e:c1:82:e5:d4:71:
                    0d:a6:e6:dd:30:40:63:38:07:3b:f1:78:fe:49:09:
                    87:97:d5:f9:46:64:ff:75:71:bc:bf:aa:ce:06:8e:
                    c0:f8:5d:fc:3e:a3:07:b7:f3:5d:8f:19:88:12:70:
                    0e:ff:b0:10:33:d3:8d:b6:21:e0:9b:1b:6f:41:2d:
                    32:87:3e:9f:ff:f2:99:b0:8d:05:09:00:d0:d0:c9:
                    34:da:8a:df:8a:8a:c0:db:10:82:b1:0a:f7:9b:2a:
                    8e:c9:81:14:9f:4c:7d:d6:e5:b4:7a:41:02:19:e1:
                    f7:b0:80:5f:71:d3:7f:a0:f2:76:2e:b4:8f:ad:4e:
                    d7:f7:3a:2b:99:2f:01:78:38:59:50:5c:9c:99:fe:
                    72:a2:fb:6c:e2:00:98:e9:5a:ac:b3:82:2f:34:b7:
                    ad:44:68:31:2f:4b:5b:fa:64:bf:fb:3c:c3:06:c8:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:A2:81:E7:78:34:43:A5:9A:08:3A:E9:27:2E:EA:0B:E0:AB:04
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:65:14:61:e2:02:06:9d:a6:5b:d9:d2:1e:1f:a3:e1:b8:62:
         81:36:08:c7:5d:30:f0:2e:48:4b:c0:aa:00:98:5d:84:4b:9e:
         0e:32:f6:a1:c8:48:b6:65:20:4f:99:1b:70:03:17:66:47:95:
         4d:89:cd:ac:3d:6e:a8:ca:13:d5:01:df:f5:9e:70:6e:02:6f:
         9f:6a:0a:b1:cb:9b:78:04:d0:7b:d9:0c:49:8c:fb:47:f0:e8:
         25:5a:c3:d0:07:06:fa:f2:51:43:95:fa:90:7c:e5:fb:79:c7:
         d9:d5:de:ad:12:2a:f3:b3:94:4b:4f:89:cd:7f:f7:27:2a:35:
         b7:07:ce:74:72:29:a1:2c:e0:65:73:b1:e9:20:42:ad:2e:db:
         49:95:31:9d:19:e0:5e:9b:35:58:40:b3:09:3d:43:eb:b6:a3:
         23:da:03:02:de:ac:5b:1b:7a:d1:5a:75:7a:ac:23:29:f2:06:
         58:f5:47:4d:8b:89:a5:e7:b1:d7:bd:86:27:e4:13:dc:0b:1c:
         c6:a6:e5:44:ee:8f:76:ea:d0:3a:2b:f3:4a:80:44:78:d0:1e:
         e1:a4:6c:a3:f4:01:91:e6:43:4f:18:16:f0:fb:d8:b6:f9:f9:
         a3:9c:d9:46:91:46:9d:9a:f6:53:25:09:ad:13:f9:a7:3b:1a:
         12:10:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----