Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363063643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vZjyqDlQpZniHRZPzG4n4kLrksbi/JOhGU873EfwiWQ=
Subject key identifier:   5C:2A:A8:54:0E:55:91:B1:52:D3:2E:20:FC:69:4A:EF:48:C4:A2:9F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3C8139802A779B76B693C31472EDF2B3C6517E34
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:49 +0000
ROA not before:           Sat 22 Mar 2025 15:17:49 +0000
ROA not after:            Sat 21 Mar 2026 15:22:49 +0000
asID:                     16909
IP address blocks:        2a14:7584:60cd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:81:39:80:2a:77:9b:76:b6:93:c3:14:72:ed:f2:b3:c6:51:7e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:49 2025 GMT
            Not After : Mar 21 15:22:49 2026 GMT
        Subject: CN=5C2AA8540E5591B152D32E20FC694AEF48C4A29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:3d:f1:9f:14:d1:b3:6b:81:94:4f:8e:ed:
                    3a:77:3a:ba:ea:f4:06:33:63:df:9c:10:82:5e:df:
                    d3:45:31:9a:a0:79:e3:d3:44:8b:27:fc:c4:5c:a7:
                    96:40:58:f9:5b:8a:1e:f2:4a:0f:c8:f7:92:73:2c:
                    fa:c7:7e:24:e1:32:9d:e6:20:c9:3f:b8:2b:9b:ed:
                    54:4c:fd:f6:1b:3f:91:38:3a:59:98:07:f5:3a:ea:
                    90:a8:48:40:47:6f:78:e8:fe:cf:dd:96:a5:3c:41:
                    44:a3:ed:3a:22:fd:c0:29:44:21:ed:2f:fa:b9:c7:
                    a3:03:57:9e:eb:b8:1d:99:62:a7:13:cc:34:d2:10:
                    1e:b8:06:a1:9c:cd:8e:37:93:d2:99:e9:62:4f:69:
                    49:29:fc:1e:31:a1:37:be:21:66:8c:7c:4e:7b:71:
                    0f:89:42:03:02:a0:df:e7:e9:a6:19:f8:d7:10:9a:
                    e0:73:05:37:17:75:1e:6a:6c:4c:39:19:bb:77:ba:
                    fc:aa:9d:e6:19:81:be:23:83:4a:14:82:b8:55:86:
                    ea:43:e8:4f:b7:48:5a:25:3a:bb:c3:b7:b0:53:ad:
                    98:b1:39:6a:17:c5:30:53:48:79:44:91:a0:aa:d2:
                    00:92:1a:f7:00:93:98:37:ed:7b:52:eb:e8:82:c3:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:A8:54:0E:55:91:B1:52:D3:2E:20:FC:69:4A:EF:48:C4:A2:9F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60cd::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:37:fa:f1:f6:29:92:d1:d3:48:88:8b:f9:03:95:da:7d:
         8d:cb:73:10:75:ed:2c:3c:6e:05:7d:c7:41:73:7f:37:89:bc:
         a0:8c:30:99:d9:7c:92:43:96:70:5e:ff:4e:6b:76:86:0e:90:
         1f:bd:8c:3b:3e:42:70:84:80:61:36:18:0b:31:7b:49:c0:39:
         64:16:8b:47:50:a8:70:4a:02:9e:bc:4e:e2:4f:7c:79:c8:1f:
         42:49:7e:96:44:90:e3:4b:eb:e1:4d:b2:21:ef:09:d6:82:36:
         47:67:85:d8:0e:5f:22:52:6f:40:52:0a:39:4c:ab:5a:ff:42:
         9c:70:58:bb:6e:a1:52:10:64:1f:5c:ff:15:67:0d:96:4e:e4:
         1d:f2:b6:b3:72:2f:4c:da:b9:ef:02:81:ba:7d:cb:11:d5:18:
         b5:68:b3:9a:d8:06:52:7f:0d:ef:a7:fb:56:3b:8b:b8:73:95:
         d8:ed:44:bd:18:a8:66:f7:ec:48:99:46:29:48:b7:a5:b3:e0:
         3e:c0:4c:e6:4b:03:48:b8:f7:c2:60:9d:a9:ba:0d:b2:f2:31:
         d9:38:66:9e:d1:4e:55:e4:cc:70:d2:1a:07:fb:e1:21:b2:fe:
         26:a4:c0:78:67:6a:4e:54:01:92:ba:f7:bd:65:a4:9d:43:49:
         c4:7f:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----