Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ws5/5Jb3uK1nNgItkUA9tsAVyMcjiZVZuUkGq2sVw9w=
Subject key identifier:   5C:3C:14:F9:CB:9F:01:AB:5B:73:C5:AD:15:C9:24:71:D2:73:BB:07
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0123489DCBC9429351FC1BD3DA6B8A5B21AD5607
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:58 +0000
ROA not before:           Sun 16 Mar 2025 15:45:58 +0000
ROA not after:            Sun 15 Mar 2026 15:50:58 +0000
asID:                     16909
IP address blocks:        2a14:7584:60bb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:48:9d:cb:c9:42:93:51:fc:1b:d3:da:6b:8a:5b:21:ad:56:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:58 2025 GMT
            Not After : Mar 15 15:50:58 2026 GMT
        Subject: CN=5C3C14F9CB9F01AB5B73C5AD15C92471D273BB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:e4:a2:2a:6a:c4:be:f9:13:88:13:2d:7d:
                    a9:5e:22:40:4e:27:98:c4:3d:fb:f9:33:65:59:82:
                    cb:5b:23:b0:da:42:77:15:c7:a5:36:b7:4d:70:4a:
                    92:a2:07:15:74:da:52:8c:f2:4d:7f:7a:d0:2f:30:
                    bf:99:b4:bc:12:69:db:40:c0:bb:39:e8:fe:13:47:
                    72:1b:5b:53:22:ba:aa:75:87:4a:42:13:3a:a1:29:
                    b8:78:25:2e:5d:d0:c8:e9:28:52:d8:6b:b2:90:84:
                    34:04:5a:66:00:ba:99:1e:7c:91:6e:4e:c5:e5:4e:
                    a0:51:b7:5e:ab:6b:21:65:60:b2:74:b1:39:9d:6c:
                    64:be:5a:01:35:5b:27:13:b1:60:5c:ae:74:93:77:
                    54:ae:a4:35:68:50:e8:5e:d1:df:8b:9e:32:e4:cb:
                    85:35:0b:8d:36:b5:1f:b9:11:b3:3d:5f:5b:4c:ff:
                    27:ce:cb:8e:9c:0c:f2:0e:ca:78:77:b9:50:2e:b3:
                    c1:f8:83:ef:38:51:8a:f7:fd:8d:e0:59:ed:e7:12:
                    7d:57:38:67:ad:d4:15:9a:31:77:2e:87:7a:b0:ef:
                    22:41:53:36:ea:83:fb:98:36:6a:de:5d:85:a8:ec:
                    9c:2b:7b:58:fb:55:94:aa:3a:3b:16:8e:03:78:36:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3C:14:F9:CB:9F:01:AB:5B:73:C5:AD:15:C9:24:71:D2:73:BB:07
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:78:9e:ad:92:bc:5e:da:29:3b:aa:60:70:3e:de:9a:8c:59:
         90:d3:49:e7:d4:37:c3:97:68:49:cb:7f:40:c2:2e:5d:a9:6d:
         0c:a1:85:f4:54:c4:9c:e2:66:58:0c:e2:0b:b9:62:84:33:50:
         c8:ac:f2:64:bd:9a:fe:9f:39:20:52:c9:00:eb:e9:ae:d9:87:
         ca:0a:84:a4:bc:17:42:82:ed:ef:93:60:d4:43:d6:9d:11:3d:
         c3:4e:35:ef:8a:0c:cb:83:7c:d6:4f:06:9f:aa:5e:77:a3:c6:
         c0:96:26:d3:d2:3f:57:0b:fa:23:34:29:e7:0d:56:12:d9:47:
         72:a2:f8:62:f5:f8:b7:ad:1d:3a:18:e5:a0:e3:1c:df:5d:d9:
         fb:49:01:2b:87:fd:2d:b3:47:2f:44:47:d2:3d:d3:67:1d:98:
         d2:64:8d:51:76:78:27:40:fe:ce:c8:69:b2:74:ca:27:35:4b:
         18:4f:23:3b:d5:28:cd:19:5b:89:e2:bd:7f:4a:1b:69:1a:9c:
         e2:40:78:3d:81:e4:78:b9:2c:f7:38:79:b7:9c:65:bd:7a:81:
         e7:15:c0:0e:61:ea:2c:b8:8b:1a:9c:d1:5e:f8:d6:91:0d:ca:
         7f:44:db:b7:13:c1:59:8e:e1:d4:ae:c5:4f:43:3c:5e:59:d8:
         b3:1e:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----