Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          0vkvTV/Zhs7BK/iK6mw/TW2SM5lF43o4fFPJszW/TCI=
Subject key identifier:   2C:66:02:EA:C1:7A:DD:DD:4C:0A:64:34:10:53:E3:B3:85:55:60:0D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       05DCC2147A701AD6E186F31E93DD6F0AD7807E44
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:22 +0000
ROA not before:           Sun 16 Mar 2025 15:43:22 +0000
ROA not after:            Sun 15 Mar 2026 15:48:22 +0000
asID:                     16909
IP address blocks:        2a14:7584:6095::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:dc:c2:14:7a:70:1a:d6:e1:86:f3:1e:93:dd:6f:0a:d7:80:7e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:22 2025 GMT
            Not After : Mar 15 15:48:22 2026 GMT
        Subject: CN=2C6602EAC17ADDDD4C0A64341053E3B38555600D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:ad:07:27:bc:b3:36:4e:32:8d:5c:ab:d2:
                    d3:4e:c7:de:f6:f6:01:1d:ba:14:e5:91:be:e4:d7:
                    b3:87:25:29:44:1e:af:11:73:a4:f3:c8:11:9c:7a:
                    ee:26:f8:5c:21:a6:b1:46:77:00:ca:02:2c:b9:9b:
                    56:76:99:4b:60:b2:ae:73:fc:41:a8:dc:b3:e4:db:
                    e6:a8:bc:e3:63:5d:d1:c3:f3:94:38:b7:2c:68:c9:
                    77:37:26:cf:c1:a2:70:2d:40:9e:5e:b7:5f:1f:99:
                    41:db:33:7f:3c:76:ed:e8:07:ac:cd:1a:b1:e7:a6:
                    ce:c3:54:ce:11:2d:77:17:7a:80:b7:30:ba:f1:5d:
                    a5:df:98:77:36:20:35:93:b9:c3:2a:e5:41:e8:6c:
                    b8:04:ac:e3:93:55:d2:57:cf:4d:b7:28:29:91:36:
                    a1:b0:ea:76:ea:49:4c:21:84:e7:02:3a:bc:3c:0f:
                    e3:95:15:a3:0e:d7:8a:9a:38:1b:e9:80:12:de:fe:
                    e8:a4:c4:bf:7f:f5:19:ec:36:14:d7:84:52:63:ae:
                    a4:b0:71:ab:9e:64:02:57:a1:95:b7:28:c4:13:52:
                    79:70:42:e2:e4:fd:50:db:ce:1c:de:87:29:11:63:
                    74:f7:b0:21:02:79:61:7c:93:6e:53:9c:e6:dc:d1:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:02:EA:C1:7A:DD:DD:4C:0A:64:34:10:53:E3:B3:85:55:60:0D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6095::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:3e:39:e4:21:94:c3:98:81:9c:77:d4:1d:67:50:f3:ef:
         98:36:b8:33:38:95:52:b0:49:51:53:81:d3:59:70:04:5a:ea:
         6c:b2:c8:67:a3:33:8f:1b:19:88:e2:12:2f:20:00:33:c0:70:
         03:d6:9d:37:ed:ec:65:ff:62:1a:1f:38:24:fb:29:c1:36:8d:
         7b:fe:72:f1:d8:e9:a0:b7:76:41:d6:f5:18:bb:36:df:3c:d3:
         df:4e:a4:f9:06:5a:00:22:7d:79:87:77:5a:eb:49:e3:d9:fa:
         99:cb:49:74:53:34:96:77:62:f2:56:88:76:02:65:45:85:83:
         ee:4d:8e:08:52:c1:92:f0:96:6b:00:30:b1:ce:4e:3f:d4:77:
         6b:e3:b3:1d:74:80:05:16:22:f0:c2:35:95:60:09:b5:e8:d5:
         31:a6:59:31:f9:c6:22:f7:e3:91:e2:d6:b4:c0:63:85:54:9d:
         62:55:b6:55:1b:f0:88:62:b4:7f:44:84:8d:ce:63:8f:fc:81:
         04:79:da:8b:9c:69:af:7e:44:f8:a3:45:0f:ba:1c:91:6d:41:
         b3:85:77:cf:10:c5:b1:2d:7f:94:1e:b9:cb:09:e1:ea:d6:51:
         03:a1:e0:ec:a5:64:5b:b4:15:9b:64:42:0f:7d:d6:d1:3d:42:
         de:1f:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----