Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          U2xLG1zNkLTuCvQ5CvAie3wh9kH3kX+FmXruX0ujzdE=
Subject key identifier:   88:69:F9:60:9E:B2:B6:2C:FD:B7:9E:B8:CB:AD:ED:EC:9C:6E:0B:01
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4AE9F4E6C89C3CC597572262E1E4B078CD9B09CA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:17 +0000
ROA not before:           Sun 23 Feb 2025 07:54:17 +0000
ROA not after:            Sun 22 Feb 2026 07:59:17 +0000
asID:                     16909
IP address blocks:        2a14:7584:6035::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:f4:e6:c8:9c:3c:c5:97:57:22:62:e1:e4:b0:78:cd:9b:09:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:17 2025 GMT
            Not After : Feb 22 07:59:17 2026 GMT
        Subject: CN=8869F9609EB2B62CFDB79EB8CBADEDEC9C6E0B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:f0:e0:25:65:c9:50:14:80:36:a6:0a:64:
                    0a:21:3e:32:d1:f8:4a:30:03:4a:2e:4f:6a:33:75:
                    9f:02:21:1d:28:34:f3:b3:f6:29:0b:96:4c:39:9e:
                    bf:d6:af:a0:94:b2:c7:43:ae:f6:cf:c1:23:53:55:
                    f2:b4:ce:fe:f2:37:65:cb:dd:ce:0b:63:c9:9f:a0:
                    e8:46:79:ee:32:87:c4:57:cc:77:23:b3:9b:ec:35:
                    7b:b5:cd:8d:b1:f1:34:70:04:68:6d:65:d1:e5:97:
                    a1:39:a6:10:66:b3:fe:b7:e5:04:e4:53:f7:72:ed:
                    e5:8e:79:10:8c:77:a2:bb:9c:07:82:48:3e:f0:8f:
                    ed:d7:11:33:ea:d4:de:a3:03:8e:56:42:1b:70:57:
                    24:f5:df:2c:a3:45:58:45:58:7b:8e:7e:8c:68:d2:
                    4f:a9:9f:b8:7b:b5:58:d5:26:2a:0c:06:03:1e:2c:
                    12:ca:04:28:44:0a:51:c4:4d:c2:e6:8f:01:17:d2:
                    01:a1:d1:06:2e:8d:49:c1:a8:31:11:0d:63:c9:c8:
                    57:2b:94:7f:1e:04:0d:21:e1:9c:86:04:e8:e5:8e:
                    f1:5a:ea:46:de:6a:b9:d9:57:84:95:75:2d:c9:86:
                    09:48:1a:22:41:69:f3:b1:eb:e0:bf:85:e7:2e:7e:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:F9:60:9E:B2:B6:2C:FD:B7:9E:B8:CB:AD:ED:EC:9C:6E:0B:01
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6035::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:47:dc:dd:8b:fc:74:36:b1:75:4b:a3:8c:26:dd:ea:ff:
         6f:cd:08:46:60:49:97:f2:36:e3:c6:4c:72:70:0c:e5:95:3f:
         5c:ff:98:a5:47:18:d3:a9:5c:fb:72:4e:83:c1:b0:cd:75:48:
         b0:aa:08:3e:c1:fd:37:b8:8b:2a:06:93:c8:fd:f8:78:56:0c:
         5f:6c:f7:bc:7e:a4:7c:19:1b:c2:d0:f3:00:c8:d3:e4:60:42:
         5f:54:8d:c5:a0:bb:cd:a7:a1:19:6c:02:d7:10:41:4e:ad:17:
         19:8f:df:39:7d:7e:7c:49:7e:95:3d:f5:5c:c8:de:01:53:d2:
         70:c6:16:8f:e2:f2:88:e0:c1:60:f1:1a:7c:ff:4d:30:1e:16:
         34:c9:6b:52:87:40:6f:8f:5e:c6:ea:13:4a:46:75:dd:bd:6e:
         49:80:43:2d:ba:47:72:ac:98:d7:6c:77:9b:34:cf:48:65:93:
         f0:00:84:2a:c4:f3:47:ac:30:0b:ae:40:a3:8a:6a:0e:60:00:
         57:41:4e:80:e0:26:d9:00:ab:80:4a:12:77:fe:e8:b4:99:89:
         6f:20:51:1d:c9:70:d0:12:2f:89:10:a4:31:81:f8:b8:94:df:
         b1:ba:6d:84:a6:5b:1f:b5:4b:d3:53:2d:cb:34:70:0a:24:ec:
         ef:80:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----