Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          2A1kYUx+FNCWwV2+B1AM+9VlHEvHY6oRd9sujtO5at0=
Subject key identifier:   97:D6:73:96:0C:63:85:7B:DF:AB:AA:F6:B0:10:8B:D6:1E:5A:C2:7C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2E5005CC8534829DB6F0D9E5C004562A57A46054
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:33 +0000
ROA not before:           Mon 24 Feb 2025 13:25:33 +0000
ROA not after:            Mon 23 Feb 2026 13:30:33 +0000
asID:                     16909
IP address blocks:        2a14:7584:603f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:05:cc:85:34:82:9d:b6:f0:d9:e5:c0:04:56:2a:57:a4:60:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:33 2025 GMT
            Not After : Feb 23 13:30:33 2026 GMT
        Subject: CN=97D673960C63857BDFABAAF6B0108BD61E5AC27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:7c:ec:38:de:46:b9:35:34:57:16:bb:e1:
                    ab:ef:5b:2d:29:40:7f:af:25:08:e3:6c:0a:67:32:
                    f3:98:cb:35:de:c1:9f:96:8c:ed:a3:ec:f9:98:f3:
                    1a:e6:e4:d5:30:33:e1:81:da:83:ba:e3:82:ad:3a:
                    15:80:95:24:71:63:ba:bf:4d:f1:7e:d9:94:b4:f2:
                    af:fa:e5:33:88:d8:f8:46:74:82:33:8e:1f:68:24:
                    33:0d:bf:6e:de:ef:ed:bd:b7:18:e5:67:f1:6f:ce:
                    b7:5a:e9:45:64:d7:9d:d8:b1:d8:09:c0:9f:af:6b:
                    6e:20:73:f7:54:0a:f4:55:9e:ca:18:88:ce:5b:af:
                    fd:ba:06:e5:dc:20:d0:c1:b3:ca:b4:e7:e6:8a:f9:
                    9a:54:7f:8f:c1:0a:93:a7:ab:db:b0:92:73:2c:c0:
                    b5:db:6d:48:39:fc:a7:d0:c9:e3:29:d0:f7:b4:a3:
                    6b:1a:3f:59:9d:cc:35:fa:b2:2d:c6:ee:1c:e0:ba:
                    4e:80:9c:d1:ab:c5:c8:a6:b4:f2:12:25:62:8c:31:
                    d6:da:c3:39:9d:32:eb:f0:e7:33:de:ea:ff:15:fa:
                    b3:df:1d:c2:45:ff:63:e0:bb:38:c2:04:a5:26:2c:
                    5c:72:d8:1b:ce:e0:b8:4c:df:97:6d:a1:8f:56:81:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D6:73:96:0C:63:85:7B:DF:AB:AA:F6:B0:10:8B:D6:1E:5A:C2:7C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:603f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:2d:3b:f0:3e:d2:fb:8d:98:90:cd:b1:07:d1:13:1c:27:47:
         72:65:52:b3:bb:ab:31:5c:f9:10:55:25:10:6d:9c:39:33:9b:
         8a:e7:83:9a:a2:7c:42:46:b9:b5:5a:56:ea:82:27:1c:36:ff:
         54:3c:0e:90:b2:f6:30:bc:fb:c5:96:ec:5c:43:d5:8c:71:b4:
         b2:42:e2:77:be:37:9a:14:0b:42:b8:ca:06:db:e3:51:d4:0c:
         e5:8b:15:d1:d9:46:02:5d:fc:5e:7e:84:6c:b0:d0:a8:fd:f7:
         7c:98:42:2f:41:3d:7d:e0:26:2e:91:59:3b:f1:e4:f0:d6:ab:
         b4:9d:e3:9d:af:5e:e6:d3:1c:f6:1c:1e:c0:0e:46:d4:a7:0e:
         10:8a:0e:e6:9c:dc:e3:32:2c:cb:9d:1a:d2:7f:59:78:ce:d4:
         97:fb:99:30:14:e6:5d:50:a4:7a:bb:f8:2f:7f:c0:a3:ef:29:
         5e:f5:07:6e:cb:f8:8f:47:5a:72:ef:49:de:79:a6:6c:5b:1a:
         1a:47:71:8b:33:8a:3c:15:3f:75:fc:b5:e6:e0:9f:35:ff:2c:
         95:8e:24:91:0e:24:12:ea:63:ca:51:2e:9d:e9:b8:73:e0:16:
         9c:75:8d:02:a6:1f:66:bc:0f:06:d2:e9:52:9f:70:d7:70:7a:
         40:c1:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----