Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          aRIybDEpfdpzKI+59GwYQpO1x367tcuq3NG/TaSVLsY=
Subject key identifier:   24:B9:C7:1C:09:61:7F:FA:E8:51:96:C8:A3:86:E8:69:86:7A:5E:9A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       241036766135D3E9B9671A56EFB31C38623E80FC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:06 +0000
ROA not before:           Sun 16 Mar 2025 15:45:06 +0000
ROA not after:            Sun 15 Mar 2026 15:50:06 +0000
asID:                     16909
IP address blocks:        2a14:7584:60ae::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:10:36:76:61:35:d3:e9:b9:67:1a:56:ef:b3:1c:38:62:3e:80:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:06 2025 GMT
            Not After : Mar 15 15:50:06 2026 GMT
        Subject: CN=24B9C71C09617FFAE85196C8A386E869867A5E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:87:2b:4d:64:5f:87:67:e3:ed:e2:5c:6c:
                    ae:36:d1:7a:f4:5b:1f:89:f6:65:3f:40:13:12:80:
                    bd:fc:cc:6b:92:1f:0c:c5:89:92:e4:f4:76:56:de:
                    fb:f6:d1:4c:29:4a:8d:cc:18:c5:d9:5c:1f:19:d7:
                    22:ef:4d:ae:ed:06:3f:f1:08:85:68:37:fc:0e:03:
                    8f:d3:68:dd:b0:46:3c:6d:cd:c9:8d:75:be:c4:26:
                    2a:fd:02:ff:de:a7:18:0d:8b:e1:12:6c:08:37:77:
                    4d:7c:6a:a7:28:94:3a:e2:ee:38:fa:43:6a:aa:88:
                    66:57:41:56:d4:dc:05:c1:1f:6c:b3:53:f1:1e:54:
                    a6:2d:2c:05:cc:b7:fa:61:04:97:68:09:cf:0c:ec:
                    38:dc:06:fe:5b:ad:0e:e7:2d:9a:f9:7c:fe:f3:90:
                    97:68:52:cf:31:35:8f:ab:cd:2a:e1:1d:5e:14:00:
                    62:69:40:e1:96:5c:f5:4b:b3:8e:ff:74:65:96:15:
                    c9:12:99:a2:7d:e7:0a:f2:ad:ba:b6:b5:10:42:4b:
                    20:a5:7b:f8:2b:21:a4:63:4b:1f:d0:49:ec:7f:fa:
                    8a:62:69:12:9e:3f:1f:4d:62:0e:7f:aa:68:da:44:
                    58:7a:1f:32:8b:f4:d5:53:bd:a6:c9:f3:14:bf:6f:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:C7:1C:09:61:7F:FA:E8:51:96:C8:A3:86:E8:69:86:7A:5E:9A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:b8:67:f4:1c:d3:51:92:3d:32:93:31:20:1c:c1:45:05:
         62:cc:d5:c4:08:ca:06:8a:cd:7d:69:d8:8f:8b:a4:59:c5:d2:
         c3:66:1b:73:33:38:57:c4:45:f7:60:9a:33:11:72:86:12:c6:
         8b:9c:65:b2:24:b2:38:ea:93:5a:80:a9:6b:fd:b2:85:93:3e:
         75:76:35:f4:dd:65:7d:69:cb:c5:28:de:e6:09:a0:d9:86:94:
         3e:e8:20:41:6c:ef:29:ea:79:d9:e9:e2:dd:df:eb:72:12:d1:
         f9:7f:d5:85:c1:96:5a:ae:2a:06:5b:15:d6:8e:00:ba:48:d0:
         af:be:f8:b1:3e:bb:34:8d:e9:ba:a6:5c:27:3a:91:62:63:b2:
         09:16:f5:bb:c8:e4:43:3f:08:3a:5b:8e:dd:de:a0:4a:f7:10:
         bd:31:3e:e1:fe:a0:fe:44:8e:b4:f6:ab:eb:48:74:ef:5f:fa:
         89:58:54:b3:d7:20:22:a5:0d:55:73:59:d3:a0:4c:1b:5c:39:
         6f:97:a9:06:d2:fe:09:7d:0a:d1:78:0f:ac:11:3f:7d:e9:51:
         af:4b:3f:5e:82:3b:b8:f6:d4:ae:af:8c:97:ba:f0:26:72:7c:
         61:25:49:40:c5:7c:fe:c9:8a:37:12:c3:22:bb:63:5d:ba:51:
         b5:da:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----