Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363034343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Hf45qL8r2SjZBS5vgXUMsVUa81I1Nju1eLOunPh7qzs=
Subject key identifier:   7F:27:2E:95:F8:38:88:14:DE:3D:D1:0F:EF:18:40:DE:CE:DE:4D:25
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       296DA3BD017F96B83362C5EAD828A1A2124AD236
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:36 +0000
ROA not before:           Mon 24 Feb 2025 13:25:36 +0000
ROA not after:            Mon 23 Feb 2026 13:30:36 +0000
asID:                     16909
IP address blocks:        2a14:7584:6044::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6d:a3:bd:01:7f:96:b8:33:62:c5:ea:d8:28:a1:a2:12:4a:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:36 2025 GMT
            Not After : Feb 23 13:30:36 2026 GMT
        Subject: CN=7F272E95F8388814DE3DD10FEF1840DECEDE4D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:25:7d:fa:3d:18:c7:d1:6a:c8:24:de:51:15:
                    b2:1e:fd:90:69:7d:57:87:54:10:a8:82:40:ad:29:
                    33:9d:36:07:4d:05:5e:df:0e:b2:b4:c2:b7:06:08:
                    71:b1:e5:14:56:1a:a1:b4:8b:8d:62:69:ee:b4:f8:
                    37:ba:d3:15:13:cf:f8:06:5b:17:74:43:43:3b:79:
                    da:ab:2d:77:69:9d:32:92:19:40:23:ce:6c:f8:4f:
                    30:3b:d4:81:65:c7:d2:69:10:47:9e:6a:68:85:e0:
                    15:9c:ec:d1:5c:90:d8:e8:15:20:e6:b0:ca:76:23:
                    47:fc:06:9e:ee:14:1d:8b:c8:da:84:d8:6e:2c:c1:
                    68:22:c0:ad:6d:0b:66:b1:d7:20:4e:95:e3:a3:8e:
                    5b:29:a1:9a:84:4c:ad:be:e5:36:d2:55:c7:83:1f:
                    81:cb:56:b6:12:c4:69:c1:0c:b5:9e:d9:82:b0:24:
                    d1:83:a9:b8:5f:42:b2:0d:8e:05:24:78:f0:fc:8e:
                    83:82:6c:cf:cf:77:51:24:05:9d:fc:66:83:08:9d:
                    47:81:44:a3:e4:82:85:23:67:26:81:f4:a3:a7:58:
                    fe:9b:b4:08:95:8f:ed:b1:ff:a0:af:30:4a:db:3b:
                    9d:cc:42:6f:ab:a5:76:80:9e:78:3e:42:ff:9f:17:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:2E:95:F8:38:88:14:DE:3D:D1:0F:EF:18:40:DE:CE:DE:4D:25
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6044::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:6e:e4:ce:88:f3:10:67:52:88:56:69:b4:e4:fc:18:4d:
         83:fa:1b:79:31:c6:58:02:15:5c:f0:db:5f:91:41:89:21:17:
         6a:f7:00:fb:69:c5:e5:80:3c:e9:78:cb:d3:dd:e2:cf:6e:d5:
         29:aa:18:b0:d9:54:d4:39:8f:69:4c:f8:a9:88:c8:b8:06:ce:
         01:84:c2:ff:b2:11:ee:e8:36:f6:cb:9e:04:25:6b:b9:28:e2:
         2a:3d:2d:38:02:13:eb:24:2a:b3:c9:c8:5c:5f:10:01:de:53:
         af:de:33:6a:4a:b3:74:70:8c:04:6e:31:1f:ff:79:06:b4:85:
         09:b4:6f:75:97:ac:fe:31:a1:f0:8d:2f:6f:6b:02:79:76:97:
         30:d5:2a:15:ab:58:b3:22:bd:73:66:19:f6:99:01:ca:aa:98:
         84:72:8e:c4:85:69:59:6e:c8:f3:1d:88:b9:1f:ec:db:53:30:
         01:0d:d8:1a:cd:d0:be:42:8b:91:6c:5a:90:a0:65:2f:ca:d3:
         0a:e8:b5:61:55:e9:97:00:e9:10:46:75:b2:9b:ea:a3:e8:90:
         8f:71:ff:d4:ea:4e:0c:e6:07:41:3f:a6:6c:aa:30:5c:21:ed:
         ba:4f:33:fa:75:21:36:6a:8a:bd:48:ec:6c:e4:06:21:b9:e3:
         23:3e:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----