Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363034313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Yqzu7Apmd17nCKIixaLDEIgPkkau8vDfVdrsOhMtUNM=
Subject key identifier:   08:A0:21:BE:30:BA:08:27:DD:64:93:86:B8:E5:9A:E6:D2:E9:59:B1
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       57630CBB785385E4C44575416F008C618C2CF3D0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:34 +0000
ROA not before:           Mon 24 Feb 2025 13:25:34 +0000
ROA not after:            Mon 23 Feb 2026 13:30:34 +0000
asID:                     16909
IP address blocks:        2a14:7584:6041::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:63:0c:bb:78:53:85:e4:c4:45:75:41:6f:00:8c:61:8c:2c:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:34 2025 GMT
            Not After : Feb 23 13:30:34 2026 GMT
        Subject: CN=08A021BE30BA0827DD649386B8E59AE6D2E959B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:3b:4f:ae:71:29:29:cc:a6:44:ee:66:7c:
                    91:52:61:34:76:98:44:25:2d:c4:f8:4c:93:9a:63:
                    aa:2f:40:b7:20:18:fc:46:ea:18:8e:26:af:52:13:
                    97:6f:c7:93:00:96:80:bf:31:4a:b6:0e:64:6c:0a:
                    b8:b3:ee:13:1d:50:22:2e:67:a7:7a:7f:f3:ae:b8:
                    86:58:51:6a:02:08:73:9c:0c:1c:35:8e:f6:36:16:
                    8e:66:39:5c:6c:24:07:10:d3:1e:51:c0:21:ef:be:
                    1e:15:87:0b:cc:18:f4:fd:f0:e8:d7:58:1e:e7:3e:
                    a9:32:32:29:38:d5:dd:79:d8:f1:4c:ef:27:06:8d:
                    c1:16:73:f2:47:4a:95:93:d7:a1:0f:c5:99:9b:17:
                    15:0a:a2:ac:98:c0:9e:ba:a9:50:4a:5b:b4:88:1d:
                    c5:cf:a2:81:1c:35:59:7d:5e:04:4e:ce:4c:13:fb:
                    ce:11:12:ee:3f:7d:45:58:fc:86:61:0e:3d:af:92:
                    25:6e:ca:f5:66:c7:ed:29:81:6c:ea:e1:ac:4f:14:
                    fe:22:6d:c2:55:9b:7f:34:d5:66:4a:1b:a8:61:0b:
                    98:a2:e8:c6:a3:6a:e0:2d:78:fb:b2:8f:e4:4a:25:
                    2b:88:58:ea:4c:9e:1f:70:3f:e4:a3:38:d9:f1:ff:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:21:BE:30:BA:08:27:DD:64:93:86:B8:E5:9A:E6:D2:E9:59:B1
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6041::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:74:99:a7:88:b2:84:4f:67:33:0c:c7:6f:82:d2:f8:69:4a:
         d3:b9:7c:7d:d3:95:f1:f4:a3:65:0b:fb:70:e5:56:89:f7:7c:
         b4:8c:91:f4:8e:0e:90:8a:d0:3a:01:10:22:4c:7f:aa:ee:05:
         8e:65:4c:89:dc:b4:79:29:70:c2:5e:44:3f:7d:56:5b:15:13:
         b4:5e:1e:d4:ad:7a:f7:06:3e:1b:75:90:09:6e:3b:ec:46:6c:
         64:63:07:32:61:72:fb:3d:6b:37:3e:c3:d8:b4:e7:f1:ba:c0:
         cd:4c:7b:99:ac:ed:02:43:47:dc:e5:a1:7f:11:2a:56:c5:45:
         bb:0b:fd:69:66:35:f8:da:3a:88:e0:2e:f2:34:dd:ba:2a:ab:
         46:9d:bc:0b:99:df:37:f7:26:b3:83:6a:3e:63:2d:ab:6b:cf:
         ab:a3:1a:20:82:9c:04:64:f9:ec:a5:44:d4:da:1e:00:15:d4:
         be:55:07:4a:5d:2d:30:05:2f:89:40:0f:49:78:3a:a9:a7:7e:
         e0:39:a1:4a:f1:bd:71:cd:6d:b3:cc:de:81:8e:b3:53:64:58:
         63:d8:2e:90:c9:35:0d:18:72:74:3a:46:6d:67:5f:77:71:23:
         5e:84:6e:a4:b3:12:40:8b:73:6c:96:a6:f2:22:e5:8f:1a:31:
         30:5b:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----