Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          wrtx+hRnct44DTMXISGKtr6DF5Qc2t+S5xRSKZlmugE=
Subject key identifier:   E7:11:33:7B:1A:58:C3:1C:C2:9D:B0:66:F5:E7:C5:A2:BA:37:2F:CC
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       603025FD71C791A43DB4F886F5A29685165B926C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:36 +0000
ROA not before:           Sun 23 Feb 2025 07:53:36 +0000
ROA not after:            Sun 22 Feb 2026 07:58:36 +0000
asID:                     16909
IP address blocks:        2a14:7584:6029::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:30:25:fd:71:c7:91:a4:3d:b4:f8:86:f5:a2:96:85:16:5b:92:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:36 2025 GMT
            Not After : Feb 22 07:58:36 2026 GMT
        Subject: CN=E711337B1A58C31CC29DB066F5E7C5A2BA372FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:7d:6f:51:6a:93:e7:91:25:97:56:44:1f:
                    ef:b3:6a:ce:c3:21:ca:33:51:58:3a:2a:0b:f5:44:
                    45:2b:c6:54:3a:cc:08:0e:d5:74:03:bf:c2:81:5f:
                    b5:c0:1f:f7:6d:64:e1:74:44:1e:8f:ef:93:0c:5d:
                    93:63:77:2f:5a:fc:d1:f6:a0:9c:9d:53:fe:87:d2:
                    67:57:32:e9:48:c5:13:be:af:36:fa:f5:01:70:49:
                    f1:e0:76:de:30:7e:f5:fd:84:b7:ec:d5:3d:4f:ee:
                    93:49:9b:c3:06:da:13:f8:e7:e2:ca:af:1d:f4:07:
                    e6:2e:0b:03:34:ca:33:b5:a1:87:df:11:87:15:5d:
                    1d:e2:0d:6e:22:4d:ba:fb:ef:ee:5c:29:7d:61:5f:
                    b1:93:9e:d4:73:87:88:78:96:01:df:11:f6:6c:db:
                    a4:4e:83:e6:c8:47:22:a7:b4:56:0f:fd:d8:f8:38:
                    1b:71:1d:9a:31:35:58:c6:1b:99:e3:0c:47:60:95:
                    ad:5f:5f:e2:59:89:ea:09:81:0b:c9:54:c9:f2:e6:
                    bf:c7:dc:07:b7:ac:e8:54:43:59:78:d3:39:ab:c6:
                    0b:e7:9d:93:be:55:e0:e7:a8:36:6d:ba:6e:52:cf:
                    3a:62:59:04:bd:ac:ab:a9:cb:ec:3a:59:f3:59:08:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:33:7B:1A:58:C3:1C:C2:9D:B0:66:F5:E7:C5:A2:BA:37:2F:CC
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:a7:17:56:63:16:8c:0a:f9:3d:dc:47:41:e3:61:d2:9a:
         57:1b:e4:5b:b0:33:bf:c2:f1:c8:08:81:34:35:8d:ce:2f:1f:
         7b:2e:43:d2:7c:09:b7:9f:7e:51:67:7a:bd:f9:8e:b2:31:f3:
         31:a2:0f:b4:e3:c8:1e:f1:f2:08:25:b8:13:91:aa:8f:ac:d6:
         73:2b:1f:59:27:7a:d3:74:7c:50:ff:70:5b:42:2e:e3:30:d9:
         45:d4:e1:9d:a7:cc:0b:2b:5a:47:9f:d1:79:3c:a2:7e:78:64:
         fb:72:70:b8:d1:ff:e5:34:ea:9f:f5:e2:1e:a5:84:15:45:6f:
         cd:c2:54:c2:87:f4:16:75:4b:aa:2c:89:36:2e:5c:d1:bc:b0:
         a0:99:d0:fd:0c:03:35:5c:4b:70:e5:0b:eb:d4:e8:6c:78:29:
         e8:95:1b:22:f1:89:87:ff:af:f9:7e:96:1f:67:ba:dc:31:f1:
         ad:94:0a:60:02:3c:a7:28:83:55:70:0d:a1:76:c9:9e:2a:9d:
         61:3b:bb:d0:c0:d4:61:4f:f7:91:be:14:ff:4a:00:fc:cd:a5:
         a9:de:51:a3:64:6b:fd:fa:cb:95:0c:78:67:41:50:c4:4a:b8:
         22:61:1e:87:29:74:c6:01:da:52:f9:6c:34:e3:d1:fd:3d:c6:
         83:b0:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----