Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5+isTehaSbhfaarUn7X0LKV4hg8ajYwJtQw+pRelmoc=
Subject key identifier:   69:16:B5:5F:58:5D:D0:82:C0:2F:42:F3:5D:AF:6D:0D:78:4A:1F:07
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       37109FA1F19B9C17D9A810C454D78115D95EBB5D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:29 +0000
ROA not before:           Sun 16 Mar 2025 15:44:29 +0000
ROA not after:            Sun 15 Mar 2026 15:49:29 +0000
asID:                     16909
IP address blocks:        2a14:7584:609e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:10:9f:a1:f1:9b:9c:17:d9:a8:10:c4:54:d7:81:15:d9:5e:bb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:29 2025 GMT
            Not After : Mar 15 15:49:29 2026 GMT
        Subject: CN=6916B55F585DD082C02F42F35DAF6D0D784A1F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:9c:46:c9:0e:95:e0:e9:33:71:45:72:d4:
                    5d:dd:da:10:3c:57:bb:ac:1f:f4:4d:d9:a6:fe:fc:
                    9b:23:92:3a:d9:30:78:97:93:2b:88:9f:33:16:0f:
                    ef:47:de:f2:8b:7b:57:aa:28:9d:31:e7:67:62:01:
                    2c:1f:93:c0:c8:07:f5:f3:73:bb:df:0f:11:2e:6a:
                    f2:ce:49:11:9f:1e:db:6a:06:d8:f7:7d:e1:b9:d0:
                    2b:9e:bb:61:2b:37:b8:bc:20:8e:e9:44:62:8e:6a:
                    98:aa:62:54:07:10:aa:5f:fd:5e:85:2e:b0:f7:a1:
                    3e:f2:7e:b9:58:24:94:e4:9f:95:c8:d3:d2:a2:9a:
                    8a:92:c7:d8:54:49:ba:a5:92:22:57:db:2f:8b:e5:
                    20:48:77:5d:1c:34:c3:24:21:77:15:cc:46:45:d9:
                    61:27:ab:c4:63:fc:55:f2:97:d3:6f:47:87:5b:1c:
                    d7:9a:6b:6c:73:2a:2c:3e:9e:d0:36:ce:73:34:db:
                    ea:61:e8:e7:95:c4:a7:16:cd:f9:b1:c7:0d:c6:bb:
                    f7:dc:d8:d7:4d:ce:b6:c9:a4:6e:c2:2a:59:4e:90:
                    f1:c5:fe:d4:a0:aa:7c:db:e9:65:4a:f5:69:b1:47:
                    6d:66:20:a5:8a:47:2e:cc:11:bb:15:31:c4:17:e0:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:B5:5F:58:5D:D0:82:C0:2F:42:F3:5D:AF:6D:0D:78:4A:1F:07
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:609e::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:bc:0b:c5:10:4b:67:a9:94:a7:05:30:8c:77:1e:2f:b8:
         26:08:1e:36:db:9b:5c:38:33:b4:a0:80:aa:f1:30:17:71:ba:
         7c:9f:64:21:b2:03:92:4b:d4:fd:b6:06:fd:1f:bd:50:ea:bb:
         7f:11:37:04:0c:53:4d:d9:fb:29:9f:ea:fa:c2:c5:a8:2d:7d:
         1e:cf:e7:f1:58:c2:23:f5:54:de:c3:09:ca:f6:0b:1f:3c:82:
         1a:58:b5:4a:45:1b:56:49:b4:41:a9:58:d9:fd:28:4f:1b:eb:
         30:f8:40:82:ef:16:6d:4a:02:0a:c3:68:bc:a3:07:4a:3d:ef:
         2e:c4:74:81:58:b2:07:d2:07:c1:23:36:51:8a:3c:2b:b5:a7:
         0e:4e:66:d4:1d:79:cc:12:6e:15:d6:07:90:d8:c1:a3:8d:87:
         9e:c9:fe:72:e8:f0:6f:89:10:eb:b0:ce:da:9d:fb:c7:b9:04:
         39:be:4b:76:a4:6a:2c:3c:50:ce:e2:7e:6b:23:38:71:fe:ec:
         48:ca:cd:15:be:c0:62:c7:15:c0:f2:5b:b9:dc:1f:fc:bd:a3:
         a9:3c:3d:68:5e:2d:24:b6:d0:96:6a:26:ef:f2:90:06:91:bb:
         00:b3:00:7f:78:b2:10:ea:e5:b3:df:a8:8f:af:86:f8:5f:37:
         b2:32:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----