Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          f/BQSx5wsVj+1U+255J8gZQx5ZyOmHmfBG/HZiXo81E=
Subject key identifier:   46:B5:92:4F:81:1C:D7:4E:B7:8D:01:52:2A:27:31:D8:55:29:7A:C0
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       12D485AC83B805A29B808C87B8BF7B8A9DA593B1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:21 +0000
ROA not before:           Sun 23 Feb 2025 07:54:21 +0000
ROA not after:            Sun 22 Feb 2026 07:59:21 +0000
asID:                     16909
IP address blocks:        2a14:7584:603a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d4:85:ac:83:b8:05:a2:9b:80:8c:87:b8:bf:7b:8a:9d:a5:93:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:21 2025 GMT
            Not After : Feb 22 07:59:21 2026 GMT
        Subject: CN=46B5924F811CD74EB78D01522A2731D855297AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:17:21:6b:f7:9c:18:a3:4d:5b:53:30:2b:
                    aa:6b:7e:a5:05:68:3e:b3:e5:01:5e:ac:ad:db:83:
                    95:ed:98:a3:8b:cc:7f:3b:b4:9b:93:ef:68:45:3a:
                    8a:ea:c5:d3:7a:5b:4a:d4:57:df:10:e4:8e:4d:5e:
                    32:7c:d3:f7:a0:6b:0b:4c:13:37:0c:f6:12:d8:6c:
                    9a:ce:97:c0:b8:b4:5a:f0:1e:a3:e2:f9:d5:95:e0:
                    d6:02:44:b6:f6:af:1f:d6:51:7b:53:89:72:36:6e:
                    25:90:7f:50:f8:42:3a:d4:bf:b4:9e:fa:67:60:25:
                    04:ee:89:1e:29:28:cd:91:a5:12:02:2f:b1:36:b1:
                    e4:a1:23:d1:57:4a:c3:3c:2a:6d:44:15:70:5a:a4:
                    cb:cf:fb:4e:52:e7:96:b9:d0:e8:fd:94:a6:1a:7a:
                    19:73:1b:13:c1:1c:9d:06:65:0b:28:52:92:e5:c7:
                    95:47:a3:5f:7a:ca:88:96:f1:03:6e:24:6d:56:77:
                    f2:6c:67:cf:d2:6f:05:04:7c:0b:29:62:9b:ed:77:
                    b7:18:1d:2a:46:73:64:20:92:dc:d4:75:b5:f1:b9:
                    4c:68:bc:23:54:29:4e:22:ac:c5:9f:67:fd:c6:c4:
                    16:2b:1a:9c:e0:f3:bb:af:48:14:8f:e6:ea:1d:bc:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B5:92:4F:81:1C:D7:4E:B7:8D:01:52:2A:27:31:D8:55:29:7A:C0
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:603a::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:15:f4:1e:a1:96:c5:c9:35:1f:f5:24:07:40:2b:99:d2:c9:
         ca:60:35:d8:77:20:00:b6:a4:62:fa:0c:c0:29:93:20:22:7a:
         d0:27:48:87:4a:45:5f:fb:01:19:b8:10:94:3b:7f:83:d3:d0:
         fe:d9:2b:77:91:cc:01:a0:47:59:89:ab:8a:dd:59:db:61:5f:
         f5:a2:62:ba:cc:85:d1:4b:03:1c:3e:e5:94:61:09:e2:19:cf:
         ab:c7:ac:39:2c:d5:56:fb:bc:65:53:d7:9d:4e:3d:72:0a:68:
         3d:aa:0f:20:4d:19:95:22:a5:43:63:39:e5:d8:a3:3c:7b:c0:
         d9:23:04:27:3c:c6:34:27:a1:7b:15:58:2b:66:63:c2:2e:2b:
         7c:76:d9:12:27:3e:7c:0f:83:91:6a:9a:07:90:d5:ea:46:a6:
         f9:24:2f:89:76:ae:c7:72:03:07:42:e7:96:59:e5:3b:35:fc:
         c4:fc:87:1d:10:80:fb:42:e2:cc:ae:4a:89:b5:dd:05:8c:8a:
         76:84:e2:f5:ec:54:b9:65:fd:ea:19:a8:77:b4:3a:2b:b7:5d:
         fd:41:a4:db:1e:fc:f9:3e:80:dd:82:18:f5:76:b4:0d:b8:3a:
         25:7d:89:bd:2b:6b:ba:70:87:61:ed:e5:99:f6:d8:16:6e:d2:
         9b:bf:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----