Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          0nHfvHVX3QTYtIp5LU9XlQww9YnzRCipd8y0PiVnltY=
Subject key identifier:   70:A7:31:39:1D:A4:03:62:F8:9B:EF:E2:BD:94:D2:79:F3:F5:F0:DE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3EBE8890D98E5D55C4D974BB96C0719F2344716A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:36 +0000
ROA not before:           Sun 16 Mar 2025 15:44:36 +0000
ROA not after:            Sun 15 Mar 2026 15:49:36 +0000
asID:                     16909
IP address blocks:        2a14:7584:60a7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:88:90:d9:8e:5d:55:c4:d9:74:bb:96:c0:71:9f:23:44:71:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:36 2025 GMT
            Not After : Mar 15 15:49:36 2026 GMT
        Subject: CN=70A731391DA40362F89BEFE2BD94D279F3F5F0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:7e:26:6f:29:a9:92:a5:59:35:2c:94:98:
                    e3:8c:16:b4:dc:3b:02:f5:e5:5e:ff:e6:fa:c2:87:
                    50:c5:f5:91:ba:c0:6c:20:6a:d4:b5:71:c0:71:03:
                    e5:b6:91:33:93:28:b3:74:48:0e:b0:29:71:2a:06:
                    d4:07:fd:54:e5:f8:6a:f0:63:4d:41:37:c1:57:e6:
                    b7:1c:ff:d8:ff:dd:f6:b6:3d:59:9b:bf:d2:ce:83:
                    64:76:58:f7:1d:02:31:7b:60:3e:bb:b7:15:8b:4f:
                    3d:cb:29:29:8a:43:26:7d:47:b8:b3:4f:19:02:29:
                    d4:c3:48:6d:b3:69:8b:d4:ec:ce:7d:41:16:01:62:
                    14:16:4f:66:06:b6:1e:8b:79:6d:16:fc:f2:94:8e:
                    79:10:72:28:5d:e2:1a:d7:9c:de:e4:8c:14:3a:41:
                    3f:c4:60:f6:88:86:4d:f2:cd:b5:e3:3b:5c:bf:46:
                    96:d6:d6:29:a4:8d:27:4c:f2:02:cc:fe:c9:81:39:
                    ea:47:ec:4e:08:78:eb:e5:0b:72:48:82:05:28:b0:
                    2c:01:31:8a:43:4d:27:0f:1d:8d:cc:71:d8:31:75:
                    6b:52:89:d8:15:33:18:47:35:e0:1f:5e:46:cf:c2:
                    55:2a:b9:57:f4:ff:bd:1d:73:bf:23:59:8d:6d:41:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:31:39:1D:A4:03:62:F8:9B:EF:E2:BD:94:D2:79:F3:F5:F0:DE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60a7::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:b6:bb:53:fd:3c:97:6b:c3:cc:c9:bb:ec:76:6e:a3:06:
         54:d1:fe:bb:15:81:8b:57:65:28:02:fd:07:06:1e:58:e4:b8:
         67:58:ba:c6:be:d7:33:4a:08:ef:7b:86:48:e8:1f:76:dc:c1:
         ca:f5:8f:89:ab:47:1c:72:75:b5:06:5d:7c:d2:f4:0a:56:ca:
         ab:9d:1e:94:50:1b:1e:89:91:ad:c9:6b:58:e7:60:51:8e:13:
         b8:d7:7c:d2:2a:8d:d2:b5:64:fa:24:b8:b5:80:b0:eb:1a:32:
         8b:3e:70:78:3c:03:b7:36:f8:73:72:9f:a9:10:02:a9:4b:a2:
         10:d0:69:1c:95:0a:e0:d0:a5:27:c6:14:91:36:bd:00:9a:4c:
         e9:d9:e2:2f:cf:af:b9:cd:29:6c:be:2b:db:38:28:a7:7d:e2:
         ec:5a:06:a2:58:8a:74:20:42:69:2f:df:2f:a6:ae:10:83:26:
         78:92:8a:ea:5b:0a:4c:50:14:49:24:8f:78:a2:ea:4f:af:e6:
         2d:35:66:58:a5:bc:bb:80:29:cf:7a:71:75:6c:c0:b7:fb:fa:
         85:4f:4d:6d:6f:2e:1a:c5:99:35:1a:f1:47:2c:60:7b:9e:8c:
         ff:a1:ff:9a:d5:06:a0:86:22:c6:72:35:1e:16:22:63:20:57:
         1d:d2:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----