Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          gmjhpVJ0L/bQPmAcQlD1n5DLs1AMUmGwqaIh2p6akwg=
Subject key identifier:   05:69:05:32:EA:D1:30:21:24:24:30:D9:B0:40:16:35:A1:51:57:2A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       22ABFAD23AE381E1085459461299FDF8C38D0A90
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:08 +0000
ROA not before:           Sun 16 Mar 2025 15:45:08 +0000
ROA not after:            Sun 15 Mar 2026 15:50:08 +0000
asID:                     16909
IP address blocks:        2a14:7584:60b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ab:fa:d2:3a:e3:81:e1:08:54:59:46:12:99:fd:f8:c3:8d:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:08 2025 GMT
            Not After : Mar 15 15:50:08 2026 GMT
        Subject: CN=05690532EAD13021242430D9B0401635A151572A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:85:8d:5b:33:e2:f3:6f:88:64:d9:29:d5:
                    3a:04:a7:d7:8d:c1:b3:36:60:ff:18:6c:23:02:c7:
                    1d:a3:ec:9d:b3:6a:cb:b1:1b:d1:7c:34:04:af:04:
                    79:aa:74:74:84:45:91:82:16:3a:4e:04:77:77:52:
                    2c:5c:0c:16:83:62:97:0a:b7:2c:fd:94:18:03:a1:
                    fb:12:02:e2:71:b2:9c:5c:78:9c:db:9a:6c:6d:09:
                    9b:6e:55:cb:a7:d0:67:96:31:7c:67:71:f4:03:d7:
                    6c:b3:63:0a:97:61:c5:e9:43:8e:34:16:d2:f5:69:
                    94:f3:45:2b:c9:f0:48:ca:7d:0b:b1:b1:66:31:79:
                    3d:4a:6e:7d:c4:d8:c4:89:53:f5:8b:ae:e4:5a:60:
                    f2:0b:25:a7:80:cb:92:e5:74:8e:50:c2:9f:19:41:
                    04:4a:f6:4b:40:e9:64:15:8a:56:4a:a1:6f:96:1e:
                    3b:ad:a1:4b:74:cf:3f:dd:2e:17:8f:b6:a8:dc:a4:
                    d7:2e:bb:d5:17:62:e4:85:f6:8e:ce:f3:bc:fc:8f:
                    32:b1:8f:26:21:7d:c7:de:96:7f:55:ac:ad:44:bf:
                    67:66:e1:cd:c8:2f:45:4b:1a:de:0d:c8:d1:87:da:
                    24:d3:63:2f:d7:24:30:f2:8d:8e:99:d3:9c:38:1d:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:05:32:EA:D1:30:21:24:24:30:D9:B0:40:16:35:A1:51:57:2A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:18:96:3e:45:79:e4:26:0b:42:b7:58:5f:64:cb:96:b2:3d:
         83:9b:e2:4c:bb:79:86:41:04:b0:9e:b4:d0:a4:61:e4:a5:78:
         6e:4e:d1:34:a8:85:b3:b3:a0:ee:6d:32:5b:ed:40:50:37:a7:
         b1:af:b2:aa:e7:28:22:01:51:9e:c7:8d:68:08:4b:58:ca:85:
         e1:c8:af:53:89:b3:fe:a8:66:4d:8b:ac:5d:7d:83:2f:c7:85:
         68:ce:0f:e8:e5:5f:75:83:fe:de:a0:32:e6:96:e5:3d:3b:44:
         4a:18:21:29:0f:42:f5:d7:2e:b1:c2:6a:38:c8:c1:e1:ed:c7:
         8a:2f:01:62:63:5c:62:7b:d3:b1:25:1c:ec:56:66:7e:1a:eb:
         69:13:10:08:61:6f:65:a2:5d:99:dd:8b:b8:0f:cb:f7:64:b3:
         6d:f1:67:8a:e2:db:ba:04:33:fc:aa:32:89:ff:2a:ed:4c:f9:
         a7:cd:2d:61:20:3a:3b:0c:80:06:e4:34:2e:2f:29:83:e1:75:
         d9:2c:38:1d:48:75:b4:14:8a:e8:9e:b5:83:b4:a4:d1:e4:d3:
         2f:3e:40:18:52:87:76:24:d0:42:0f:a0:b0:7c:15:4e:01:09:
         4a:77:02:4c:77:44:f7:bc:2c:50:7e:22:55:ae:05:00:74:38:
         cf:58:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----