Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Slf3Inq7W+39s1luNn748Ish3RzmhBR6mBJKIaWrE7A=
Subject key identifier:   7F:51:B6:91:0A:39:FE:17:80:68:86:AC:AC:32:63:64:69:B4:0D:4B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0AD8AC8E25ECA1238C66038F9FE1508FC2E2CAD7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:05 +0000
ROA not before:           Sun 16 Mar 2025 15:45:05 +0000
ROA not after:            Sun 15 Mar 2026 15:50:05 +0000
asID:                     16909
IP address blocks:        2a14:7584:60ac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d8:ac:8e:25:ec:a1:23:8c:66:03:8f:9f:e1:50:8f:c2:e2:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:05 2025 GMT
            Not After : Mar 15 15:50:05 2026 GMT
        Subject: CN=7F51B6910A39FE17806886ACAC32636469B40D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:53:1f:1e:0e:1f:e4:d6:65:f2:65:5c:c2:
                    e4:f0:29:21:9c:b7:21:d2:2b:24:5a:f0:2a:8f:42:
                    60:7b:d5:c3:3b:9c:72:58:e9:04:1a:f4:0d:3c:95:
                    07:b1:a8:9d:78:2d:83:59:11:b1:eb:8f:9a:44:84:
                    d6:21:bd:05:a9:11:e1:d1:8d:5b:f7:1a:d9:8c:ea:
                    1c:94:3c:00:15:74:c3:10:cc:d2:67:85:7a:67:fc:
                    78:47:29:01:f8:c4:27:29:0a:9b:2f:80:7a:33:b6:
                    9c:7d:06:f3:b5:05:d2:71:2f:56:a4:3f:67:dd:0e:
                    a1:15:b0:44:a8:da:f8:76:3f:6f:fb:1f:3a:8d:a0:
                    a5:d6:c9:37:6b:10:19:5f:6b:fd:e5:97:0d:bb:f7:
                    78:73:c6:f1:54:f1:40:96:52:2b:63:8b:da:f5:4e:
                    94:31:b1:ce:d7:d4:7c:b6:c3:95:0e:af:47:6f:a3:
                    e0:b3:2a:88:bc:19:fc:3b:6e:52:67:98:c7:ec:27:
                    ea:d3:3e:8c:cb:8c:28:7d:93:9b:32:87:ef:42:34:
                    4b:1b:44:76:43:63:01:1f:69:bb:f2:37:da:35:92:
                    36:31:89:3a:c3:af:9c:e5:f2:a7:1c:e8:5a:6c:b1:
                    66:ca:72:c7:56:c7:2a:7a:62:86:2d:d0:ed:5a:99:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:51:B6:91:0A:39:FE:17:80:68:86:AC:AC:32:63:64:69:B4:0D:4B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:3e:31:11:33:d3:ff:21:a6:71:e2:f8:51:5a:ee:05:dc:b7:
         2a:9c:70:2c:98:0d:98:c5:72:76:3c:35:c9:6d:f9:ff:51:9f:
         59:3b:e1:97:5c:71:09:93:90:e5:28:e9:8b:c1:1d:76:51:e9:
         02:c9:d2:33:e1:76:6b:94:ee:46:e6:32:ed:fb:90:05:64:e7:
         46:5a:dc:2a:a7:da:37:ee:41:9a:65:77:ea:54:a9:f7:a3:9a:
         7c:63:49:64:14:36:ac:83:c2:96:5f:2f:56:3b:c4:b9:26:0b:
         29:85:bc:be:eb:67:2e:e7:c0:16:53:08:7f:57:85:82:d0:df:
         33:d0:d5:f3:a4:36:b4:0e:c3:b6:76:d0:e2:38:b8:5c:54:63:
         c3:f2:d9:25:82:ae:a7:51:a5:b2:03:54:50:aa:fa:fc:9b:58:
         d5:77:bf:6a:56:83:d6:b6:d7:fa:31:a3:c5:f7:8f:3b:98:b1:
         04:1b:93:cb:eb:a2:a7:51:d6:00:5f:99:28:ed:9e:d7:7c:6c:
         84:eb:0c:5d:f8:9f:b2:0d:f2:95:60:48:9e:8d:0c:be:26:71:
         69:7e:52:dd:3f:d1:be:13:db:09:b1:64:63:93:20:87:6a:6f:
         36:cc:83:f5:c0:35:25:2b:9f:18:c6:ad:47:79:09:fd:ee:22:
         58:ba:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----