Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036663a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363036663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          n7VvHMRV1nOkraIsIf+L/mDG91wn1aBVD+iqNotszZ8=
Subject key identifier:   15:CC:57:A2:01:88:C9:0C:D3:C5:A3:5F:A1:67:2B:76:9B:02:8F:8E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       52FB0AF4F970692EC1D1F9BDFCF5A2C18F147125
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036663a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 10 Mar 2025 11:53:35 +0000
ROA not before:           Mon 10 Mar 2025 11:48:35 +0000
ROA not after:            Mon 09 Mar 2026 11:53:35 +0000
asID:                     401507
IP address blocks:        2a14:7584:606f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fb:0a:f4:f9:70:69:2e:c1:d1:f9:bd:fc:f5:a2:c1:8f:14:71:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 10 11:48:35 2025 GMT
            Not After : Mar  9 11:53:35 2026 GMT
        Subject: CN=15CC57A20188C90CD3C5A35FA1672B769B028F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:70:f9:50:0a:bf:75:82:02:5b:fd:5b:83:
                    a0:41:3e:b2:0e:07:22:13:d3:e0:1c:85:12:93:64:
                    cd:d5:a9:3a:bb:d6:b2:32:5a:64:d6:57:ee:f2:5c:
                    a4:41:ab:1c:f1:b8:57:e4:e1:78:39:d8:2f:6d:2f:
                    c8:78:66:df:f6:0c:7e:9d:4a:0d:97:38:98:54:fb:
                    6e:68:a2:29:bb:d0:cf:be:ea:78:97:94:2a:8d:62:
                    a5:7d:21:f1:ed:cf:08:d6:02:1a:34:44:9e:30:4d:
                    53:5f:e8:76:1b:36:cc:c4:a6:0b:b6:ae:b0:bb:b6:
                    95:f6:91:9e:37:0e:d8:97:0f:64:fd:d0:5b:dd:ae:
                    eb:46:8b:7b:a9:03:b0:27:e7:c3:06:aa:fc:51:3e:
                    2e:cc:1d:23:91:23:97:ba:f0:91:a8:4f:d8:8e:76:
                    5e:40:83:18:93:52:e6:de:f9:b7:96:71:ed:a0:46:
                    b5:83:9d:d6:c5:30:80:31:a0:e7:bf:36:c6:a3:26:
                    03:d0:90:a7:81:b3:d6:e2:8b:3c:5f:df:bb:44:f4:
                    26:e7:0a:91:4f:7e:31:16:1c:56:c8:48:87:8e:56:
                    44:95:34:b8:13:01:70:d4:51:74:0c:ae:c6:0f:80:
                    36:a6:d9:19:bd:11:29:50:b7:b0:c9:ec:07:32:a6:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:57:A2:01:88:C9:0C:D3:C5:A3:5F:A1:67:2B:76:9B:02:8F:8E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036663a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:606f::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:18:ea:68:6c:ea:50:8f:ed:85:7d:33:0c:42:17:92:40:0a:
         ce:82:25:bf:cd:e7:d0:7f:37:8b:eb:e4:d9:64:3f:c2:b2:0b:
         e4:18:f7:51:c8:84:eb:33:74:5e:d5:be:15:69:36:27:b9:75:
         d4:dc:40:6c:cb:a6:7a:0a:bd:13:29:bf:11:81:5e:f3:dc:60:
         78:8c:36:7f:c0:1f:d3:d7:0b:67:37:1d:79:02:d7:de:43:95:
         05:2f:b9:a4:b4:82:83:90:36:f3:ca:69:61:dd:55:87:df:be:
         9f:36:4a:69:2e:af:09:0f:7c:1e:b3:10:7a:e3:46:06:59:d0:
         0c:b2:fd:cb:9b:cc:ac:5b:b3:aa:36:58:b3:cf:cd:9f:4f:c5:
         73:3b:b0:50:ab:c2:b8:de:92:22:1e:95:02:91:1d:0e:83:63:
         1f:19:ef:97:83:1f:76:25:73:6c:fe:71:39:79:4e:8e:20:f8:
         bc:22:f9:b6:7a:b3:96:7c:4f:43:f4:c3:0f:46:96:91:9d:ec:
         31:8c:53:12:84:73:ef:4f:c7:48:69:05:be:54:7f:a1:fb:9c:
         2c:88:df:1e:af:0e:9c:7c:80:00:1c:2e:fd:5b:63:37:79:dd:
         96:5e:ca:d1:1b:6b:37:01:2e:fd:a5:6d:26:69:15:e6:fd:16:
         cb:71:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----