Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062383a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          K3kOhc2nw7DeQ+3d4C8qdBPUYjnCUYOXKtwrGZayMyA=
Subject key identifier:   05:19:46:09:35:72:66:10:F9:BD:99:5B:57:A5:1F:CE:77:6C:02:AB
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       77717142609F6BCBFB23B56D40076A1D12BCEBE4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062383a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:56 +0000
ROA not before:           Sun 16 Mar 2025 15:45:56 +0000
ROA not after:            Sun 15 Mar 2026 15:50:56 +0000
asID:                     16909
IP address blocks:        2a14:7584:60b8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:71:71:42:60:9f:6b:cb:fb:23:b5:6d:40:07:6a:1d:12:bc:eb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:56 2025 GMT
            Not After : Mar 15 15:50:56 2026 GMT
        Subject: CN=0519460935726610F9BD995B57A51FCE776C02AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:bc:e6:69:4a:c3:c4:58:72:95:60:ba:0f:
                    b1:f6:34:49:9e:b3:c3:5e:7b:a9:b8:9e:85:9a:6f:
                    7b:00:ba:01:9d:4d:1b:a8:b3:3b:95:b6:95:87:56:
                    0a:b2:51:0c:00:42:aa:ac:87:a2:ec:5d:a5:c2:5b:
                    2f:d2:3d:15:94:bf:d8:33:28:2c:ed:91:c8:3d:f8:
                    74:d6:51:f4:af:ca:da:63:24:57:51:eb:15:0f:e7:
                    b2:e3:0e:46:c2:fd:f0:c0:ac:82:1f:d4:70:c2:9b:
                    0a:95:ae:11:53:ef:05:99:64:5a:26:83:7b:6f:bb:
                    2e:6b:0c:8f:e1:8f:5b:a9:f5:d0:4d:37:c2:e0:76:
                    b2:a0:18:03:5a:5f:85:91:d8:31:96:0f:79:66:d6:
                    cc:67:a1:55:fc:4d:c1:64:44:1e:ce:3a:7b:52:bf:
                    9a:c7:16:83:80:77:fb:75:af:b5:b8:7e:2a:e0:65:
                    9a:80:95:59:73:67:1f:f5:25:01:2f:7f:2c:73:d5:
                    11:5f:87:2e:31:89:c4:be:f4:69:c8:07:4c:7d:ab:
                    75:97:fa:ec:a4:f8:7d:c0:f1:55:0c:a6:a1:64:5e:
                    5c:57:37:ee:f2:4e:26:81:3f:de:65:1a:27:bd:31:
                    da:2b:8d:02:b8:a0:17:d4:a1:d0:7c:45:45:df:cb:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:19:46:09:35:72:66:10:F9:BD:99:5B:57:A5:1F:CE:77:6C:02:AB
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062383a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:69:32:02:5d:04:8c:e6:da:b0:3f:6c:83:2f:04:24:70:
         a3:fd:a1:16:dd:93:7f:38:6d:dd:bf:67:a8:db:4a:25:11:a1:
         fa:20:1c:64:b3:67:13:52:84:fc:56:f3:2d:69:29:83:cb:42:
         b9:b8:83:e8:2f:4a:da:29:9f:d9:8f:ee:84:f2:25:0c:64:27:
         a7:cf:e0:a1:aa:95:0a:98:f1:56:2d:5b:c0:00:2c:59:cd:08:
         12:7d:8e:ce:c7:8e:3f:cc:67:3c:e8:88:94:b1:63:57:aa:b6:
         51:5b:bd:0f:bc:21:b6:81:e3:4f:40:9e:68:87:26:98:b9:28:
         73:ec:ef:23:80:8b:81:33:b9:54:59:10:fa:cd:2a:be:ff:56:
         01:69:1e:39:d6:d5:14:c9:ee:46:9c:21:11:1e:8d:5d:7e:ff:
         dd:7a:57:51:c9:98:f0:a0:9d:3b:1c:6e:d3:a9:d7:ee:20:a4:
         97:cc:3a:cf:6f:bb:69:e1:69:55:a4:3a:9c:cc:e6:8e:b1:a5:
         0c:32:d4:f9:e8:51:df:df:f7:ac:79:aa:1c:61:b2:98:a2:dd:
         f9:c0:5f:8c:3e:4e:a2:46:a3:be:b8:95:07:2f:4b:c1:38:82:
         87:9d:44:a6:40:4a:2a:31:f9:ce:c1:fc:15:62:b0:62:8f:cf:
         5f:0c:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----