Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          6DGdjFJXFD+2KzHOoahwKVQVEB0yasCbEfh5e+Ax5oE=
Subject key identifier:   58:30:8F:90:C8:F8:99:1C:17:5B:91:4E:CE:DF:5D:88:FD:7C:57:29
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6F524E31C1605144217FB31028C9564213F9900B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:35 +0000
ROA not before:           Sun 16 Mar 2025 15:44:35 +0000
ROA not after:            Sun 15 Mar 2026 15:49:35 +0000
asID:                     16909
IP address blocks:        2a14:7584:60a6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:52:4e:31:c1:60:51:44:21:7f:b3:10:28:c9:56:42:13:f9:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:35 2025 GMT
            Not After : Mar 15 15:49:35 2026 GMT
        Subject: CN=58308F90C8F8991C175B914ECEDF5D88FD7C5729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:34:dd:17:66:a1:13:c2:28:ff:1d:21:a6:
                    45:9c:64:4f:bf:4c:b1:5a:7f:5d:2b:6e:fd:e2:62:
                    88:c2:b8:1c:fd:ea:bb:c2:4f:ee:e5:e1:48:8f:2c:
                    ab:24:c6:0f:eb:44:fc:b8:a0:d3:5e:67:0d:52:d1:
                    59:7f:9c:d2:ff:9b:49:17:57:36:aa:fd:21:5e:46:
                    21:a3:4b:b5:5a:8f:b7:5a:45:40:e7:91:a7:78:4a:
                    3b:be:b9:5e:38:ea:f9:d1:88:47:d7:76:31:db:5f:
                    e2:3d:9a:6d:e7:7f:75:ca:76:30:92:b2:f1:49:14:
                    0e:d6:9a:56:8b:3c:83:aa:8c:f2:c3:db:ac:88:b5:
                    3b:2b:9c:c0:9f:c5:80:70:bb:28:fe:bc:41:1e:1c:
                    26:65:89:84:d5:95:81:2c:85:07:9f:f5:e9:4c:02:
                    71:e6:4a:31:fe:4c:48:7f:17:3c:2a:7d:3a:5b:88:
                    33:2f:e1:a0:bd:96:a3:17:fe:60:14:a1:bb:61:ff:
                    82:90:bc:a4:75:77:b5:2e:be:16:02:8c:ca:2e:89:
                    98:9c:33:74:1c:11:5f:61:dc:5e:a4:85:76:69:db:
                    6d:78:ec:9b:a1:94:09:87:3c:fe:e4:31:af:c7:5a:
                    7e:16:a9:08:2c:1b:f2:55:f0:58:0c:46:b2:a3:f2:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:30:8F:90:C8:F8:99:1C:17:5B:91:4E:CE:DF:5D:88:FD:7C:57:29
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:1b:f6:c0:fe:f5:0a:03:ed:88:fd:33:36:e0:d1:77:63:4b:
         a5:6a:79:ea:c0:19:bd:93:34:ce:9c:5a:0d:47:49:7e:db:09:
         45:7d:9a:03:0a:f8:36:13:68:eb:67:3b:36:58:e3:be:ae:49:
         c0:9b:c9:b5:d5:22:11:9c:73:eb:d8:0a:74:74:a0:88:c7:b1:
         5f:92:8f:c1:a4:14:5c:00:c7:fb:da:38:f2:c7:3a:02:c8:de:
         1d:76:e0:fc:b8:26:3e:47:1b:0e:46:0e:8b:be:d9:5a:43:6a:
         b9:79:45:7b:20:0b:81:cb:c5:f3:ad:91:4d:dd:b6:30:a4:ac:
         04:0d:8c:87:1c:f5:8e:e4:2b:3d:d5:30:95:ee:ae:48:40:fa:
         38:92:0f:34:be:a3:a4:d3:11:88:8b:9c:2b:e1:a0:05:cf:46:
         02:11:e3:dc:74:56:e1:2a:4f:80:77:d8:9b:7a:ef:90:d9:07:
         af:d8:41:2e:93:a4:32:46:7e:f8:12:57:58:e1:17:e4:ad:24:
         ad:35:6d:86:ae:63:f4:7f:e9:cc:c8:82:14:da:02:59:06:7a:
         98:7a:05:48:98:45:a0:3c:99:b7:84:e5:42:92:08:15:9a:38:
         9a:be:68:48:25:57:8d:cd:29:99:73:12:af:82:53:78:11:f8:
         01:73:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----