Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          +6ZroY9Zr/AkInWCP0crdFpHPi2PVCgmRRKN0JiSkJA=
Subject key identifier:   3B:E7:A9:71:68:0F:60:F1:EA:44:F1:B8:94:0B:F4:90:3A:E6:67:A4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       41376110C596E74FB979F12ECE660176714015A9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:31 +0000
ROA not before:           Mon 24 Feb 2025 13:25:31 +0000
ROA not after:            Mon 23 Feb 2026 13:30:31 +0000
asID:                     16909
IP address blocks:        2a14:7584:603d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:37:61:10:c5:96:e7:4f:b9:79:f1:2e:ce:66:01:76:71:40:15:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:31 2025 GMT
            Not After : Feb 23 13:30:31 2026 GMT
        Subject: CN=3BE7A971680F60F1EA44F1B8940BF4903AE667A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:0b:ec:99:27:0f:50:a9:e4:ff:16:0b:4e:
                    14:49:a7:8c:d2:87:00:71:a9:c7:0e:de:e9:72:5a:
                    18:47:b6:f6:ec:8e:17:06:52:a3:cf:bd:52:2d:e6:
                    b5:e4:bf:a8:16:45:e2:82:c9:04:ea:6c:b2:3e:2e:
                    7c:d8:eb:d0:10:fd:8f:3f:86:df:09:df:e3:38:6e:
                    34:61:00:7d:00:4c:ed:e9:2b:76:09:d6:69:70:b0:
                    7c:c3:cc:3c:e1:59:8c:50:15:ff:c0:c2:31:d9:db:
                    15:c6:01:04:f8:13:4e:8c:05:92:82:0d:ca:44:1c:
                    77:00:a6:1a:2d:08:95:20:55:8d:fe:ec:e5:a9:06:
                    48:7f:d6:54:5d:ea:80:5b:de:52:77:c9:ac:31:e1:
                    f3:c8:ae:29:74:3c:45:7b:a8:3b:9d:a7:5b:be:1a:
                    43:06:57:49:6d:ad:36:df:38:d4:69:fa:9f:e6:37:
                    de:c1:e1:4f:1b:5f:14:aa:3f:e2:34:6a:b8:22:f6:
                    58:3d:b2:0f:fe:17:3a:09:29:22:28:16:48:c0:46:
                    d5:3e:e4:52:85:6e:40:26:da:5d:55:86:73:8d:84:
                    44:38:5d:18:b9:f9:08:b3:bc:34:b8:5e:38:d9:18:
                    94:87:56:a5:0c:37:37:3a:d5:68:38:74:af:ef:80:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:A9:71:68:0F:60:F1:EA:44:F1:B8:94:0B:F4:90:3A:E6:67:A4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:603d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:23:e1:18:bb:ca:b5:74:9a:ba:0b:29:c7:a9:e8:81:12:
         73:9b:df:7d:58:80:c9:5d:32:49:35:d8:37:e8:87:85:e8:01:
         f2:f6:4c:27:d0:6e:f8:57:fe:ba:34:57:6a:02:c0:75:b2:1c:
         d9:9f:8b:6d:5f:22:b0:5b:d4:bb:01:12:9c:ed:45:10:08:8e:
         92:5d:1f:cf:21:1a:11:38:0b:95:b6:62:22:8a:62:04:60:39:
         1f:b2:de:20:5a:9c:7b:10:fd:f9:31:fa:dd:44:a0:cd:fb:1b:
         48:a5:c1:e2:ef:94:a0:1c:b7:50:ac:45:3b:3a:ce:e5:ef:fb:
         e2:f4:b4:ba:0d:ae:92:81:9e:38:f4:3c:de:de:f7:77:c4:72:
         f6:b8:e8:58:b8:11:25:ac:85:e5:1e:2f:61:f0:93:b2:34:ad:
         0c:3c:5d:8b:b3:5f:3c:96:8a:8f:2a:31:0a:f2:af:ad:2a:75:
         1d:8f:0a:6d:f6:f4:47:ed:6b:44:b1:b6:a7:ca:ad:55:03:3b:
         55:a9:b1:e8:07:c6:cc:53:24:7c:1f:89:37:3d:3b:6c:2f:53:
         99:10:16:ee:f6:be:82:09:91:32:92:27:5e:e9:8b:f6:b6:29:
         4b:3b:96:e5:f0:b1:9b:9b:b9:0a:55:a9:c3:c5:64:46:ea:38:
         57:55:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----