Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363063653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          L6C++plmu72HIxvCyIdzU3BtjVpK+ZuthIPHrcksxBk=
Subject key identifier:   32:48:E6:96:8E:79:91:92:2E:79:69:C9:A2:30:03:25:7D:85:17:A4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7E7B3CAD177805E5C4C4441C3A69720D85102F7B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:50 +0000
ROA not before:           Sat 22 Mar 2025 15:17:50 +0000
ROA not after:            Sat 21 Mar 2026 15:22:50 +0000
asID:                     16909
IP address blocks:        2a14:7584:60ce::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:3c:ad:17:78:05:e5:c4:c4:44:1c:3a:69:72:0d:85:10:2f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:50 2025 GMT
            Not After : Mar 21 15:22:50 2026 GMT
        Subject: CN=3248E6968E7991922E7969C9A23003257D8517A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:24:42:e4:8c:49:a0:49:2a:89:27:b5:a2:fd:
                    3f:7e:40:cb:be:37:33:ff:4f:15:0a:ff:f2:ce:57:
                    5d:71:1e:6a:99:ef:59:3f:bc:c3:63:8e:f8:89:a0:
                    36:98:67:a3:cd:ea:81:d3:72:ee:5d:1f:f5:f8:fb:
                    47:e7:43:81:dc:5b:94:a9:cf:03:23:35:de:ef:30:
                    8d:b2:08:90:d8:79:46:75:07:0c:11:c6:2d:d8:4f:
                    19:ea:81:93:e8:8b:dd:84:2d:ff:5d:59:12:e8:8c:
                    9f:85:62:d4:a9:1e:e0:11:86:98:38:86:9e:49:50:
                    d7:6d:92:78:4e:e2:5d:50:5f:0a:b8:3a:0d:8d:0a:
                    48:f8:f1:df:f9:30:3b:cc:24:95:53:47:22:4f:48:
                    96:fd:0f:26:f5:64:3e:fd:8b:90:0e:b5:69:25:04:
                    6d:53:2b:52:5b:ab:74:aa:6e:40:fb:76:d6:80:2b:
                    1e:44:15:41:6e:26:cb:fa:cf:5b:8e:71:45:c7:8c:
                    88:ea:ac:77:d8:51:98:37:7b:52:96:95:6b:63:2b:
                    da:ca:f2:d7:1f:97:6f:f3:b2:ec:9e:74:97:34:68:
                    2f:22:44:78:e5:8e:ed:9a:58:5e:3a:21:df:50:38:
                    35:d6:7e:8b:d1:a7:c4:4c:9c:5f:e2:42:d3:23:f1:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:E6:96:8E:79:91:92:2E:79:69:C9:A2:30:03:25:7D:85:17:A4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60ce::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:14:26:d4:5b:b6:19:bf:35:4e:cd:0c:a0:8e:bf:b9:1b:d3:
         c4:39:62:d1:58:b4:db:66:3e:33:ae:59:44:a0:b3:7d:d0:7b:
         74:ac:1b:6a:9f:d2:7d:b9:28:ec:f5:75:31:56:4a:96:1e:dd:
         d9:02:cf:4a:c3:2b:71:5b:81:32:10:8a:89:5a:db:34:f7:f2:
         ac:33:99:80:db:3e:74:c3:e5:13:9f:1d:2c:9c:a3:65:cf:b3:
         ec:47:bc:d2:f9:4c:41:33:21:8e:f8:18:af:f7:d9:26:ca:f5:
         2c:78:88:d9:16:5d:38:2d:e8:be:df:77:c7:ca:b4:e9:64:2f:
         1a:e4:41:7c:e6:bf:b4:17:16:6b:50:d2:87:52:ef:e8:fb:cb:
         35:7b:52:f9:28:5d:f6:09:42:43:07:b6:1e:50:1c:c5:72:ed:
         d2:8e:ef:3f:af:cb:09:7a:d1:c3:c0:22:d8:05:e5:df:9f:40:
         42:4d:a9:7b:e5:c3:0f:59:4a:12:e9:df:90:4d:19:c4:79:d0:
         6c:c4:25:b9:e5:e0:83:dd:85:9d:4c:d0:37:76:2e:a2:40:6e:
         af:f0:6d:90:cc:53:dc:b1:96:74:7b:83:59:f8:ff:b6:cb:51:
         a5:42:ac:64:32:c7:3d:13:44:06:33:cd:bb:05:10:d0:00:67:
         0b:2a:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----