Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363031313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5JMZzBW8aqot/IaKf0dNBusbR2oV8aK/7ThMO7h8s/c=
Subject key identifier:   05:1D:A3:DA:39:7F:24:8F:B4:EF:7E:5E:BA:E0:99:1D:11:A0:4C:EF
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4AFA2B055E5706652C294902370667DF83620049
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:25 +0000
ROA not before:           Sat 15 Feb 2025 21:07:25 +0000
ROA not after:            Sat 14 Feb 2026 21:12:25 +0000
asID:                     16909
IP address blocks:        2a14:7584:6011::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:2b:05:5e:57:06:65:2c:29:49:02:37:06:67:df:83:62:00:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:25 2025 GMT
            Not After : Feb 14 21:12:25 2026 GMT
        Subject: CN=051DA3DA397F248FB4EF7E5EBAE0991D11A04CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:ef:5a:b8:07:ff:58:07:26:98:58:45:93:
                    4f:b6:38:48:03:bc:5f:b7:c4:fd:44:79:8f:f4:2f:
                    ef:30:94:a7:39:6f:7d:11:8a:e5:ff:f0:bf:6e:b6:
                    fa:7e:c8:16:d2:bd:f1:44:0a:fb:6e:56:18:e1:72:
                    8d:a3:c5:cc:11:70:01:fb:d8:cb:d1:44:b3:15:0c:
                    53:bd:fc:62:c4:93:06:43:8a:7e:92:f9:3a:b1:96:
                    86:c2:db:1f:c6:5d:b6:50:b0:90:fe:d6:54:dd:3e:
                    b6:ae:e6:d6:22:53:14:66:8a:c7:22:3d:2d:41:66:
                    7e:a9:a0:5e:97:0d:79:83:b5:a4:b0:7b:bf:e9:56:
                    57:40:a0:bc:de:d3:bf:cb:6e:87:2f:4f:fa:92:ba:
                    ce:27:8e:f0:0d:02:8e:6b:99:b1:21:11:e2:e6:5f:
                    0e:bf:50:0a:3d:e0:dd:e9:cd:ee:de:e1:5f:e2:e3:
                    a0:9b:c8:da:c5:e2:6a:8e:c1:13:2c:ed:34:c6:c2:
                    8d:fd:94:66:26:db:38:0d:40:ca:24:ef:76:c6:56:
                    51:8e:9a:ff:78:b2:db:c5:71:be:88:bf:7c:f5:a8:
                    c8:ec:09:30:ef:76:eb:00:d8:e3:02:85:71:b6:36:
                    aa:a1:31:2c:d2:f6:f2:de:7c:0a:ac:79:ec:b6:c4:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:A3:DA:39:7F:24:8F:B4:EF:7E:5E:BA:E0:99:1D:11:A0:4C:EF
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6011::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:a7:4d:b8:8b:36:82:c8:cd:df:49:2c:af:46:17:4d:1a:
         14:21:4b:5d:13:e5:47:0e:c8:b8:06:69:a7:ed:98:7c:5f:0c:
         9a:7b:b9:d7:e8:34:e4:a0:ee:e0:bb:2d:ca:99:ee:bd:32:f2:
         56:36:48:86:45:81:6b:6c:dc:ab:ed:77:8d:63:f5:4f:04:6a:
         48:2b:ec:df:9c:a5:15:b1:13:43:5c:6f:ff:b5:74:56:b5:40:
         6c:0e:1a:9c:8e:3b:e9:2b:f5:ed:59:a6:cd:2b:04:ab:2d:07:
         de:c8:2c:f4:7f:8e:45:0e:0e:f9:22:c7:16:b1:e9:36:32:0b:
         d1:51:4d:04:90:06:cc:e5:cb:92:a4:cf:41:fb:92:1e:ec:ab:
         cb:6b:ca:d8:b3:90:82:13:65:d9:9b:87:0c:ec:3f:8b:f4:b9:
         78:ca:f6:44:36:a8:c9:6f:4d:60:4b:21:54:d0:a9:2a:0e:6c:
         ea:0a:be:27:ed:e2:fe:4e:a7:0a:03:17:21:35:e4:b5:5f:e5:
         c8:d2:b8:2b:ef:97:82:8d:97:3b:a8:75:18:d5:4b:b9:0a:6a:
         3a:f4:95:da:88:37:cb:4a:26:c9:20:8f:c7:57:3b:8e:70:d2:
         7c:94:7b:be:cc:ca:bc:54:e7:bf:f4:6f:a9:59:3c:ad:fe:9b:
         81:43:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----