Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          WZXUGtxtVVXn3dc0M5KwbZtCx6sziXow/Q/y+YFVtvc=
Subject key identifier:   F1:47:5E:7C:D4:27:4A:33:41:22:DD:1A:88:35:76:67:86:FD:D5:CE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       53E9C30A7367CDBDC6DFF1C3D1BA42EF4D7B301E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:32 +0000
ROA not before:           Sun 23 Feb 2025 07:53:32 +0000
ROA not after:            Sun 22 Feb 2026 07:58:32 +0000
asID:                     16909
IP address blocks:        2a14:7584:6023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e9:c3:0a:73:67:cd:bd:c6:df:f1:c3:d1:ba:42:ef:4d:7b:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:32 2025 GMT
            Not After : Feb 22 07:58:32 2026 GMT
        Subject: CN=F1475E7CD4274A334122DD1A8835766786FDD5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0e:d5:91:63:a3:7a:f3:ed:8e:1c:7e:5f:56:
                    46:c6:ef:c9:3f:33:2d:49:34:fd:b8:ad:9a:77:66:
                    bd:8e:37:5c:9c:c9:14:ea:53:4a:ef:a6:75:e0:cb:
                    29:aa:3b:3f:03:dc:c8:76:91:02:52:9b:de:40:37:
                    77:9c:9a:4b:4f:11:e8:1c:d5:13:ba:0d:bd:6e:a4:
                    60:a8:b0:0e:c0:56:0f:dd:c2:76:37:9d:16:e5:75:
                    aa:43:da:5b:74:68:61:88:69:dc:3c:23:56:a5:47:
                    23:c4:f5:e0:7c:a9:b8:02:c3:1e:c6:93:d6:6a:0f:
                    69:c7:e7:6b:e1:d7:ce:25:e3:73:b8:10:59:0d:fc:
                    b0:d5:f1:dd:c0:af:18:16:1a:44:e4:24:be:68:b4:
                    1e:43:ce:41:67:84:f2:5b:2c:4c:5f:95:be:bd:ac:
                    36:5e:be:b4:75:09:d5:61:84:32:9a:0f:9a:20:d5:
                    0d:00:0e:47:c9:8a:a0:b8:35:dd:1c:48:52:85:5c:
                    e7:97:a4:d1:df:f9:80:57:53:1b:9e:fd:36:2c:a0:
                    1f:b1:e3:7f:6e:bc:b1:c0:c5:ad:f5:ac:6b:08:11:
                    6b:04:4e:34:91:cb:28:3d:98:2f:10:6d:8a:69:6e:
                    00:77:9c:9d:00:1c:db:e9:d6:10:a0:44:02:c3:b5:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:5E:7C:D4:27:4A:33:41:22:DD:1A:88:35:76:67:86:FD:D5:CE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6023::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:47:a5:0b:97:47:d9:91:a2:6d:5f:d3:43:5a:ab:0d:f5:
         8c:dd:50:e9:cc:7e:83:0c:84:5f:cb:53:ce:0f:59:f8:20:70:
         78:89:3f:68:ca:1d:56:45:c4:a4:9e:fc:8a:29:c3:7f:00:76:
         0d:b7:57:0b:cc:2f:61:d4:50:f4:81:92:69:06:48:2b:b3:8d:
         2e:e3:f9:95:a1:a9:1f:26:54:3d:9f:9d:52:60:75:09:05:3f:
         56:0c:9e:84:0d:e5:49:62:41:ef:19:07:f9:5b:5e:a5:a0:2c:
         d5:3d:ea:73:f5:b0:a7:02:28:66:17:1b:fd:bc:c9:e2:ae:21:
         65:78:73:21:17:dd:f1:d3:48:57:f6:8c:2c:10:ad:6b:ed:6b:
         8a:6a:d0:35:0e:81:61:e3:ea:a1:b2:5e:dd:7a:99:5a:06:1d:
         0c:00:ba:c4:a2:69:10:48:04:1b:d7:74:a9:5d:fd:0e:3b:d1:
         24:29:f2:b5:ce:eb:7b:00:e1:e3:a6:4b:0b:43:74:94:c5:f1:
         48:b5:ac:4f:c5:f0:72:4d:9e:fb:a4:2f:17:63:de:7b:80:49:
         ee:bd:a9:70:bd:2e:0b:c6:13:6a:32:b9:0e:35:03:35:54:fc:
         79:41:7f:bb:09:ff:a9:96:c3:1d:17:e1:26:c6:3f:c5:ba:ef:
         c1:f2:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----