Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          zBuLhRV9xr3hLH29g0MMDseoUWd1WOPAeumAjXaelsA=
Subject key identifier:   B3:47:F9:63:6C:69:51:5E:3C:EE:89:34:5B:47:6C:57:7C:C6:32:FC
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       270615F428F9DE7B2126765C3620AC7B01F8463C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:18 +0000
ROA not before:           Sun 23 Feb 2025 07:54:18 +0000
ROA not after:            Sun 22 Feb 2026 07:59:18 +0000
asID:                     16909
IP address blocks:        2a14:7584:6036::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:06:15:f4:28:f9:de:7b:21:26:76:5c:36:20:ac:7b:01:f8:46:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:18 2025 GMT
            Not After : Feb 22 07:59:18 2026 GMT
        Subject: CN=B347F9636C69515E3CEE89345B476C577CC632FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:95:8a:ed:a4:b3:03:79:44:8a:b0:69:7d:
                    bf:b1:30:7c:72:f5:00:fc:da:a8:02:c0:21:8a:f5:
                    21:ec:3e:38:ac:4d:54:6f:f4:0c:79:73:4e:80:82:
                    7b:71:75:59:90:a0:e4:ae:fb:57:15:30:76:e3:f9:
                    b2:03:6a:4e:63:b0:63:48:c0:c0:2b:3e:ff:c4:47:
                    0d:3d:b7:f7:86:c2:0c:a9:41:83:98:94:27:8a:5b:
                    d2:5a:7c:bd:d5:0e:f6:16:7a:40:79:4c:70:3d:ae:
                    1a:00:13:9f:da:d1:7a:c7:d3:e1:ea:20:9c:b4:a0:
                    db:9d:74:69:9a:1d:89:86:c7:7a:96:f7:42:54:b7:
                    90:a3:3e:0a:46:90:04:09:04:27:98:c1:b7:30:eb:
                    33:e3:1f:03:2a:de:19:bc:a8:3a:d8:e7:c9:b4:0e:
                    62:1a:f8:21:7f:c6:18:06:d7:ca:ed:4c:fc:2b:bb:
                    15:d7:e7:20:f7:3a:b5:cb:84:a0:d1:33:fa:96:85:
                    f3:7f:61:ee:13:f8:5f:aa:55:a8:5e:6c:81:e2:88:
                    08:f0:ef:ae:22:12:3e:29:e9:83:96:dd:59:67:89:
                    e7:8f:b8:21:bc:ab:05:2b:1d:6f:5b:c3:a9:61:c0:
                    6b:a2:51:28:97:ea:c4:56:3e:36:39:fa:da:ba:4b:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:F9:63:6C:69:51:5E:3C:EE:89:34:5B:47:6C:57:7C:C6:32:FC
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6036::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:99:3b:1b:37:45:db:ff:85:4e:98:42:09:93:07:43:63:
         94:1a:83:ba:78:b4:6e:0d:69:03:f3:ca:4e:c9:d2:ad:bf:25:
         81:8c:36:e8:e4:82:c9:dd:a6:7e:83:75:98:b7:a9:70:c5:8b:
         fb:e3:0a:3f:87:fb:2d:9d:84:5f:c5:ef:45:ec:f4:24:f2:59:
         45:96:01:68:14:0c:7f:d0:72:22:3b:bf:46:86:48:1a:f5:84:
         60:5b:bb:a1:8f:26:b0:53:04:5c:6d:3a:fd:60:6e:f0:52:73:
         68:0a:0d:ac:c4:e2:3d:af:df:f6:55:14:59:bd:12:2c:cf:99:
         cd:10:54:3a:16:f0:57:a1:5e:25:4c:8b:71:e6:86:0a:32:20:
         f4:94:45:7b:b0:42:74:41:f8:8d:08:63:3e:ed:8f:a7:05:79:
         60:6a:2e:e6:b4:3f:fb:f3:44:03:38:a3:6b:39:5c:31:a7:df:
         28:89:16:ac:83:30:b4:bf:1d:4c:33:89:a0:58:20:28:1c:f9:
         96:90:0e:2c:f4:93:24:55:5c:0f:26:cb:35:bb:33:d8:fd:8f:
         27:48:31:ff:6c:c4:fb:be:cf:a5:18:5f:3a:13:12:e8:9e:c7:
         68:f6:0d:a7:f4:45:5f:d9:9f:13:c4:c1:7e:82:14:3b:d8:e1:
         73:80:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----