Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ern7W+YOtB2XBaKCakdTHFZ7sfK0284HA+S+0mKFnFA=
Subject key identifier:   E5:AF:7A:B1:D9:54:39:9E:BD:4B:05:9F:F2:EE:1C:5B:AB:72:58:49
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       11652B89DDAF6B26C2C3AA17D6076931ABEF3B4A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:37 +0000
ROA not before:           Sun 23 Feb 2025 07:53:37 +0000
ROA not after:            Sun 22 Feb 2026 07:58:37 +0000
asID:                     16909
IP address blocks:        2a14:7584:602a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:65:2b:89:dd:af:6b:26:c2:c3:aa:17:d6:07:69:31:ab:ef:3b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:37 2025 GMT
            Not After : Feb 22 07:58:37 2026 GMT
        Subject: CN=E5AF7AB1D954399EBD4B059FF2EE1C5BAB725849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:cc:16:c0:60:e8:30:43:1b:b0:d4:71:9e:
                    32:00:8b:7a:27:43:2e:b2:d1:c4:f9:5d:76:fb:84:
                    d0:87:26:2c:4c:a7:01:3a:01:17:e8:df:88:aa:17:
                    d8:5e:ea:ba:24:d9:5c:28:6b:91:54:9f:90:7b:67:
                    35:40:a8:1c:56:09:43:e6:3d:4d:10:6a:d4:ef:48:
                    40:c8:11:ee:09:a0:88:25:78:60:5c:04:4e:a2:59:
                    37:64:ef:ee:4b:aa:d6:52:bf:f3:d1:e2:28:db:f4:
                    f5:1d:44:dc:05:66:02:61:ba:f6:50:41:aa:01:49:
                    0a:83:06:db:b0:ca:44:6b:7a:b7:c2:71:4f:37:5d:
                    70:dc:61:dd:c4:3f:b1:ad:3b:c2:d9:f6:3d:ce:c5:
                    3d:02:bc:46:06:05:97:63:4c:52:87:31:fe:1c:73:
                    da:64:6b:c2:d8:3d:d4:47:e3:f2:1e:d9:90:ad:ba:
                    22:24:d6:71:70:1f:36:5d:3c:05:66:53:80:ee:39:
                    08:fa:be:48:dc:03:c6:1b:e0:22:14:44:49:f6:ec:
                    15:7c:46:a5:f7:48:43:90:f8:21:d5:55:37:4f:0f:
                    3f:88:c7:a1:0f:2b:0c:0e:3e:e9:ed:34:00:ae:c8:
                    1f:fd:a9:db:93:57:cb:19:8c:7c:92:7b:eb:d6:22:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AF:7A:B1:D9:54:39:9E:BD:4B:05:9F:F2:EE:1C:5B:AB:72:58:49
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:602a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:9e:9f:55:5a:9d:e1:10:1b:36:9c:e0:61:3c:58:87:db:
         d6:83:45:e5:13:83:93:5d:37:3c:18:ed:d0:ae:34:5b:46:f7:
         fd:44:50:e5:0a:b9:e7:2c:69:10:3e:d3:44:3f:84:24:80:89:
         36:d6:7b:39:fd:9f:c1:ab:dc:63:f2:b5:b8:1d:ab:68:01:f9:
         6d:3a:f7:b6:54:e5:4d:0b:bc:7b:6e:4e:30:09:92:0a:2c:7f:
         31:28:aa:82:80:3d:73:f8:7d:92:0b:08:ae:84:8c:30:57:d7:
         d4:4b:7e:46:53:c7:a2:01:cd:82:4d:2b:ce:e1:50:e8:22:da:
         4a:7c:6b:c2:18:3c:ee:57:86:50:7e:17:d0:d5:05:e4:33:e2:
         5d:1f:cb:e6:ed:0d:be:da:2a:b7:f0:b3:88:77:f9:bc:d0:02:
         30:42:8f:d4:6d:0e:e6:83:0c:3a:21:13:58:41:a2:8c:50:e2:
         48:8e:aa:bd:65:c4:0d:d4:04:2d:5d:ae:f4:ec:33:7f:55:79:
         31:5d:2a:24:b0:a6:c8:f7:f2:c7:e1:62:0c:9b:16:80:74:0b:
         7d:0e:d9:3c:de:f3:de:3b:76:82:24:14:fa:9a:c4:c6:0f:d4:
         67:85:a8:f4:b9:ce:06:e2:09:20:9b:c2:86:8c:5c:5d:5b:2c:
         cd:7a:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----