Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          jrqFpppIgtk6ZsqMu7D6ZVfNLHmiOOtfUMUOUEtlJzI=
Subject key identifier:   9F:74:C0:0F:FC:E2:D8:18:9C:48:29:50:73:BD:F7:45:4A:58:51:44
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2000AF441A652223C0FA4C139ABB5C1952032574
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:04 +0000
ROA not before:           Sun 16 Mar 2025 15:45:04 +0000
ROA not after:            Sun 15 Mar 2026 15:50:04 +0000
asID:                     16909
IP address blocks:        2a14:7584:60ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:00:af:44:1a:65:22:23:c0:fa:4c:13:9a:bb:5c:19:52:03:25:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:04 2025 GMT
            Not After : Mar 15 15:50:04 2026 GMT
        Subject: CN=9F74C00FFCE2D8189C48295073BDF7454A585144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:3d:1a:a7:f1:62:ef:5f:ae:d7:10:93:66:
                    94:24:8d:f5:a7:bb:f9:55:93:42:03:09:c1:81:e2:
                    98:02:f5:ab:f8:fe:42:53:c1:cb:31:48:c1:74:82:
                    11:98:29:4f:4f:5f:9e:e6:5b:6e:61:8c:e7:24:2c:
                    32:08:16:21:44:64:ec:d5:9f:38:f6:e1:1e:f4:ca:
                    1a:77:ec:b1:80:db:ba:91:8f:2d:aa:a0:89:d0:5c:
                    c1:b7:98:b4:c3:db:9c:10:74:6d:fa:a5:e9:95:b6:
                    20:87:63:f5:ce:34:a7:97:cc:b3:99:79:6f:7d:fd:
                    7d:83:b8:f3:1a:72:2f:50:86:13:8a:e4:c4:68:f1:
                    fd:2f:9e:53:53:52:38:55:ac:3e:28:31:f1:8a:93:
                    47:b2:a9:7e:7b:17:28:d1:d1:ad:82:f9:ae:6d:5d:
                    19:18:6b:e1:9a:97:66:4e:8b:de:9a:a9:e4:17:65:
                    cc:53:c5:82:f5:2c:b9:21:11:fb:8c:fe:7e:13:53:
                    93:61:ed:fa:5e:b0:bc:26:47:aa:37:e4:b9:46:ea:
                    bf:60:a9:b6:06:90:b4:a3:c8:2b:a6:e6:97:53:99:
                    58:fd:8d:07:67:56:81:63:4e:4e:da:25:d5:f6:71:
                    6b:ad:87:54:9c:9f:26:85:a0:6a:3a:ea:4e:ab:77:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:C0:0F:FC:E2:D8:18:9C:48:29:50:73:BD:F7:45:4A:58:51:44
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:04:49:4d:82:8f:46:bc:82:f4:38:29:45:e8:2a:c1:ba:
         b7:b5:c8:0f:0a:84:29:8a:4b:a8:bd:7d:d4:84:b9:dd:fc:f3:
         0c:45:5d:72:1e:ca:2e:89:ae:44:61:15:4d:bd:92:4e:a7:4a:
         b8:3b:dc:cd:1b:d6:b7:9d:8f:2b:fe:4f:cc:cd:17:2c:88:bb:
         27:58:e6:37:40:83:b9:92:6b:a6:36:eb:63:ea:ca:ad:27:69:
         b5:46:b6:3d:36:7e:40:70:a9:64:63:68:a3:23:94:9a:9e:1c:
         26:91:9e:f4:ac:79:da:f7:f3:29:ea:e2:8b:2e:7f:20:44:4e:
         c8:6a:11:e8:b7:97:f9:8d:8d:79:0b:e6:fd:58:78:6a:72:01:
         41:a0:f4:48:e1:fc:7b:ce:50:51:75:c3:27:65:04:42:ff:b2:
         2d:fd:1d:d1:dc:1e:89:f0:8b:2f:9a:0a:74:1d:c1:ae:ea:13:
         ca:5d:da:a0:7f:bf:44:2a:c8:ad:66:bc:1f:0a:9d:d9:89:76:
         7f:93:46:22:ac:1f:70:7a:af:e9:19:00:eb:08:26:a7:3c:2a:
         95:16:18:80:79:8d:5a:c1:49:44:fc:a0:5a:08:2e:07:59:b1:
         f5:a4:56:84:5b:24:c3:9a:f9:ce:34:81:22:ce:84:57:29:61:
         f0:82:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----