Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          paM4kxqAGuw/3MbjVdfn7ziY2pR5uZeenwQDdGUqSNk=
Subject key identifier:   C1:30:6C:5B:E5:78:6C:4D:57:24:99:BB:83:45:F2:E2:70:8E:32:11
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6BECC677E04F80D6B575F4EF35ED5C904D487FAF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:27 +0000
ROA not before:           Sun 16 Mar 2025 15:43:27 +0000
ROA not after:            Sun 15 Mar 2026 15:48:27 +0000
asID:                     16909
IP address blocks:        2a14:7584:609b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ec:c6:77:e0:4f:80:d6:b5:75:f4:ef:35:ed:5c:90:4d:48:7f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:27 2025 GMT
            Not After : Mar 15 15:48:27 2026 GMT
        Subject: CN=C1306C5BE5786C4D572499BB8345F2E2708E3211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:be:22:a5:8d:16:82:44:6c:f8:86:15:be:
                    e8:0a:c5:20:33:a2:ac:9a:78:ad:68:f3:cf:1a:fb:
                    6b:6e:38:89:8a:c7:6c:90:a5:a4:81:ff:91:7d:f9:
                    a2:4c:cb:79:cc:d7:e4:29:69:f3:b9:a9:0d:79:ee:
                    89:1a:e9:3c:c3:9f:12:39:41:68:0b:07:7d:fe:5d:
                    bb:b1:bc:cf:1d:97:b6:d9:60:ee:83:75:ab:b0:b7:
                    91:8f:f1:27:df:a6:98:51:99:74:ee:c7:7c:91:6f:
                    30:9d:d9:19:34:33:45:05:71:24:f9:ab:03:00:25:
                    31:4a:b5:04:6f:9e:92:de:d5:47:f2:3f:26:68:6b:
                    a6:49:36:7c:02:94:3b:94:84:7b:42:17:5f:80:2a:
                    b0:3b:33:cc:1b:1e:f4:a8:ab:1f:c2:0b:22:69:eb:
                    47:9b:d2:70:6b:e5:21:dd:81:17:1b:7e:43:8e:10:
                    65:a7:01:d4:55:ad:c0:a5:93:f1:02:be:8e:2f:51:
                    c8:ce:3e:52:f6:d2:39:ab:d0:87:77:dd:d5:28:30:
                    a8:bf:00:c0:46:3d:f3:69:65:36:b9:45:cb:38:30:
                    3d:bb:83:94:6e:48:12:5c:a2:bf:ff:a5:96:67:3b:
                    65:c1:d9:4d:4b:d0:2e:00:7d:8d:04:b8:fc:1a:e4:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:6C:5B:E5:78:6C:4D:57:24:99:BB:83:45:F2:E2:70:8E:32:11
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:609b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:f2:21:fb:bf:c3:e0:96:0a:86:31:8d:94:a8:15:77:8e:
         60:a1:9b:ad:ea:ed:59:1e:47:37:66:68:b8:24:83:d3:e9:1d:
         15:e7:29:ee:73:51:7e:a4:94:79:54:fc:04:64:cc:79:ed:71:
         0a:bd:e8:7e:0d:e8:93:5a:d8:eb:5d:a2:41:35:89:a6:5f:33:
         c5:31:31:05:a5:fc:7b:3c:c8:77:bb:d2:3d:61:aa:72:9e:d8:
         46:c3:e1:10:df:48:3f:b1:7d:7d:b9:33:aa:96:87:ac:d8:03:
         80:7f:c4:57:fe:02:77:76:36:6f:b1:1c:0f:31:56:93:44:f8:
         a1:12:35:bd:63:3b:b7:45:b5:16:a7:84:ca:a3:63:f9:7c:49:
         c2:11:25:5a:6c:ed:9a:09:d4:2d:7c:d7:dc:21:bc:b4:d0:01:
         f5:28:7e:55:66:de:7d:fa:43:10:d2:d0:85:53:d7:f0:d7:a0:
         12:77:79:9d:2c:eb:f1:56:44:8f:bd:a6:e2:22:11:cb:12:f2:
         b0:bb:73:5f:22:cb:f7:b6:f1:10:1d:2b:8b:70:60:93:11:d5:
         aa:cc:94:20:27:ae:f9:cc:9d:ad:a9:81:5b:cd:b0:46:35:ce:
         84:31:1f:04:30:b3:fd:a9:1d:58:de:36:7c:58:6e:03:6d:94:
         dc:17:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----