Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          VLvexE1ynxO/8b1ttIKInYTLGq5VbFoR4uhnRste72o=
Subject key identifier:   2E:9E:E7:2E:1E:A1:52:D2:DA:88:B4:A2:2E:E5:8B:C6:1D:D0:95:5D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       521F3DB2CDDEB8301B139A900DC221B5D75E06C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:59 +0000
ROA not before:           Sun 23 Feb 2025 07:53:59 +0000
ROA not after:            Sun 22 Feb 2026 07:58:59 +0000
asID:                     16909
IP address blocks:        2a14:7584:6033::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1f:3d:b2:cd:de:b8:30:1b:13:9a:90:0d:c2:21:b5:d7:5e:06:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:59 2025 GMT
            Not After : Feb 22 07:58:59 2026 GMT
        Subject: CN=2E9EE72E1EA152D2DA88B4A22EE58BC61DD0955D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:29:94:fe:75:fa:17:7f:1c:c7:55:1d:1d:
                    92:b0:98:da:65:d4:43:d3:24:a8:5c:cc:df:ed:6b:
                    c3:2f:c0:f1:9e:e8:38:a5:74:e8:be:ff:15:09:6e:
                    1d:14:c7:98:cb:2c:81:3c:34:4f:e4:e6:c2:55:28:
                    cc:6a:f0:70:e8:4f:60:ad:2b:2c:7b:a5:1e:e5:51:
                    b4:10:42:de:0f:12:0b:d2:e0:50:f5:47:9a:ed:59:
                    6d:97:65:89:70:09:78:e1:20:c3:ee:a6:ad:03:fa:
                    5e:86:7f:36:e0:6c:2c:6a:08:79:a5:2b:45:e2:91:
                    88:7a:6a:3f:13:e3:75:84:16:bd:1d:a9:0c:6a:6c:
                    25:95:95:d0:2d:c2:64:fb:ee:97:c3:ec:ef:52:ea:
                    ab:7f:ab:15:ce:26:f9:39:8d:9c:71:6c:c2:06:81:
                    7c:ab:a5:37:ec:3e:e4:41:04:9e:f1:29:9a:e4:41:
                    d3:9d:de:0b:22:5c:1b:f7:97:10:a5:cd:2c:85:4e:
                    b5:7a:a2:d1:a5:fb:4f:4b:24:3d:ef:cf:f9:ea:9b:
                    f4:88:1f:17:e3:4a:54:14:17:2d:ca:25:02:90:dd:
                    4b:37:25:a1:ec:1c:7e:10:0f:51:f6:b4:c1:3d:94:
                    7a:26:1b:b2:46:09:d3:95:a9:de:52:fb:49:ac:84:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:E7:2E:1E:A1:52:D2:DA:88:B4:A2:2E:E5:8B:C6:1D:D0:95:5D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6033::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:17:54:c1:0d:88:71:b6:85:0f:ea:55:b8:f6:a0:92:db:08:
         81:5e:3f:18:50:2b:02:c3:79:50:42:c4:e4:28:f7:37:75:16:
         7a:8f:a3:b3:84:d4:86:99:b0:9d:a8:c9:96:64:72:73:a9:04:
         ab:51:37:70:60:22:42:08:bf:75:8d:c8:01:39:12:93:16:8c:
         2d:0a:6d:17:51:42:9b:45:56:90:dc:9d:fb:4e:35:f4:f2:69:
         51:30:1c:62:44:60:4f:8c:ba:f0:b0:18:17:78:3b:f1:06:96:
         13:f8:5b:63:a8:86:c8:ed:ea:03:e1:3c:7d:b0:44:9e:e9:a3:
         4b:a9:b5:cb:b5:d8:10:b5:94:aa:d9:78:75:c3:30:30:25:ae:
         94:02:78:c8:73:41:7c:d1:4d:4b:f8:07:fe:32:bc:2b:13:72:
         82:bf:6a:1c:ad:00:d0:f1:0c:39:de:85:70:c9:11:5a:df:ec:
         8b:c0:8d:d1:40:93:28:41:ed:ce:44:eb:26:79:9b:c0:b2:57:
         99:a3:07:ce:d4:98:8e:d3:a4:92:09:53:6d:36:fd:c6:a2:e6:
         f2:77:87:cf:4e:7e:b0:ec:41:79:8b:45:3d:ea:b6:f9:f4:ff:
         29:8c:37:01:e2:c9:57:cf:60:76:1c:4b:af:48:fe:56:95:76:
         dd:80:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----