Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vTuVxzetpYWz322f82EOjgmE2HacUgQ24Km5HE+CY8k=
Subject key identifier:   D1:B6:C0:EA:D7:AA:09:B2:52:A4:97:41:AC:1F:A0:AD:BB:C4:BA:B6
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       490D8F94E6F2757EC88C63E11D2DA55B08117999
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:24 +0000
ROA not before:           Sat 15 Feb 2025 21:07:24 +0000
ROA not after:            Sat 14 Feb 2026 21:12:24 +0000
asID:                     16909
IP address blocks:        2a14:7584:600f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0d:8f:94:e6:f2:75:7e:c8:8c:63:e1:1d:2d:a5:5b:08:11:79:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:24 2025 GMT
            Not After : Feb 14 21:12:24 2026 GMT
        Subject: CN=D1B6C0EAD7AA09B252A49741AC1FA0ADBBC4BAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:89:2b:4d:57:aa:44:38:84:90:b9:58:c8:
                    4c:45:f1:77:21:84:a3:f4:28:bf:dc:8a:34:ff:c7:
                    d7:70:2b:01:45:20:cf:21:7a:e7:d2:08:9d:3a:9f:
                    76:8b:e5:60:45:e7:77:cc:98:7f:b9:e6:ae:72:e5:
                    2d:77:c4:62:c7:2d:98:59:38:da:3f:c8:01:5c:a4:
                    0a:13:0f:78:51:53:c0:3d:61:b8:84:ac:2f:67:af:
                    cb:e1:29:5a:19:31:e2:9e:35:8f:dc:e8:5b:55:23:
                    3d:b2:f8:8d:69:a0:bf:b0:fb:2c:1c:48:f6:04:a9:
                    a4:54:25:49:a1:f9:19:f2:e0:e7:d3:3a:0d:ab:e7:
                    21:6d:5b:b9:43:02:0b:8f:32:24:20:5c:4f:61:4d:
                    9d:c9:71:8c:aa:4f:cb:d2:c9:84:30:3a:34:4f:e2:
                    2a:e5:54:a0:4f:d3:71:75:8e:fd:3f:e4:20:13:d7:
                    c9:06:48:82:24:21:50:f3:19:fa:2c:b9:af:70:08:
                    e4:0e:85:66:08:1d:8c:47:49:f4:d2:a4:16:5f:01:
                    12:4e:c3:16:d4:90:46:87:d5:18:56:4e:6c:75:d5:
                    f0:9c:8c:05:a2:17:ff:2b:66:4b:49:d6:cf:85:ed:
                    b9:ac:fe:e8:7e:98:53:72:aa:b8:e4:05:29:7a:c4:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:C0:EA:D7:AA:09:B2:52:A4:97:41:AC:1F:A0:AD:BB:C4:BA:B6
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:600f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:df:05:40:28:ec:7f:50:42:93:41:ea:b0:a7:71:af:67:5a:
         c3:13:1a:74:cb:c3:66:ad:29:66:72:2f:a0:cc:2e:09:a1:1b:
         e3:0d:5e:0b:1a:4c:02:d5:fa:3b:23:11:81:4e:c7:ab:b5:62:
         2d:7d:3e:5a:c3:62:04:2c:11:1b:6e:9d:76:7c:cc:26:30:4c:
         de:cc:07:f9:87:22:f6:d2:16:0b:40:f5:55:08:6c:c7:da:1d:
         57:01:e9:15:1c:7d:7b:37:5d:42:8f:58:6c:15:5a:02:da:60:
         38:c2:05:74:3a:fc:ff:86:4e:86:37:41:d6:32:e8:26:e7:73:
         60:54:2d:7e:66:5e:bf:6f:81:b4:94:8d:5e:87:3d:fc:18:7e:
         25:dd:4b:55:67:20:47:dc:53:c1:75:9b:99:b7:9a:88:5d:b4:
         c9:be:82:6a:7b:07:cc:5f:03:d7:22:d8:97:89:42:4a:01:48:
         21:02:23:c9:c2:f5:a9:df:84:2b:2b:02:cb:e1:19:2e:1f:8b:
         97:07:94:98:23:80:60:4f:ac:83:2d:2a:25:4f:3b:92:3b:c8:
         ed:ea:6b:19:92:9a:56:e0:fa:96:36:64:f7:b2:0a:64:5b:84:
         83:f3:42:15:70:ec:4f:2f:69:4c:68:25:f4:1e:8c:45:19:19:
         35:d7:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----