Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363063663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Ldu7hhOOpsDI5nSlf/JCe1T4zl3rsZTogigZxv65stQ=
Subject key identifier:   C4:C6:48:81:88:2A:06:93:B6:8D:46:6C:39:31:36:32:5D:42:0B:A2
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4B3726566CB7313F2723F5BF3F5BB8703FE43030
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:51 +0000
ROA not before:           Sat 22 Mar 2025 15:17:51 +0000
ROA not after:            Sat 21 Mar 2026 15:22:51 +0000
asID:                     16909
IP address blocks:        2a14:7584:60cf::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:26:56:6c:b7:31:3f:27:23:f5:bf:3f:5b:b8:70:3f:e4:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:51 2025 GMT
            Not After : Mar 21 15:22:51 2026 GMT
        Subject: CN=C4C64881882A0693B68D466C393136325D420BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:f2:1b:b1:88:44:af:bc:1c:64:be:5a:76:
                    64:48:ba:c4:55:ac:98:11:7e:f5:6c:b0:65:e6:f9:
                    ff:9e:3b:76:ac:2e:cd:1c:bf:82:a8:7e:13:81:97:
                    f2:f2:a9:9f:2f:f2:d2:b2:e0:31:4c:c3:8c:b0:86:
                    3c:c1:bf:25:b8:da:e9:94:21:77:16:b1:5b:83:e2:
                    cf:52:34:56:4a:5e:a3:ab:82:13:0e:c2:a0:ec:fe:
                    ea:ff:2b:a1:e8:2e:12:07:8d:d8:75:59:54:c2:f8:
                    2a:68:98:c4:d6:1d:5d:05:f0:d2:08:d9:9d:79:de:
                    25:2e:db:98:69:0c:a9:b6:6d:67:33:9f:75:c8:9a:
                    91:ee:67:2d:8f:26:99:e3:c1:6f:72:ca:e8:33:89:
                    66:a9:ef:fe:28:7f:bc:d6:db:41:0b:c3:b3:ae:56:
                    1b:5b:1d:34:fd:80:6e:ab:86:8d:27:70:b0:6f:73:
                    0d:db:5e:39:75:7a:46:ca:0b:43:1a:77:92:d2:69:
                    ab:da:b9:a0:18:30:70:a2:40:3e:0b:e7:b8:eb:55:
                    03:89:2e:8e:6e:5b:62:de:fb:d7:6e:00:4c:16:1d:
                    53:ca:11:bd:2a:be:05:80:d1:37:30:9f:31:03:0a:
                    5a:36:ef:49:7e:09:51:b2:28:14:ac:bf:6e:b1:9c:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C6:48:81:88:2A:06:93:B6:8D:46:6C:39:31:36:32:5D:42:0B:A2
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:99:37:29:1e:34:cf:f7:b4:1b:6c:7e:1f:a0:aa:6f:e6:1c:
         d1:8a:81:b5:e8:dc:69:eb:76:bc:7f:b6:2d:7b:5f:2e:86:90:
         9e:9a:b6:39:fa:ae:d8:81:74:a7:06:7e:c6:8d:15:06:ce:da:
         83:ac:8e:33:b4:6e:89:80:d3:b9:4a:27:0a:2b:d5:17:78:36:
         d2:0f:09:02:f1:f6:6c:9e:1a:52:c9:0b:57:5c:cb:ff:40:6e:
         f7:64:1c:d1:32:5f:ba:ad:0c:71:f0:42:f2:58:ea:a4:5f:f1:
         0b:23:11:4a:e3:79:51:1d:b9:b9:59:9d:4c:9b:f6:14:5b:b7:
         9f:81:29:84:ae:52:c0:5c:45:e2:b3:40:93:02:aa:3d:d1:b4:
         9c:cb:44:b3:bb:91:f8:3a:70:76:bf:3d:3d:4d:00:9a:64:2d:
         0c:39:21:f2:66:00:fb:bf:16:c3:e5:80:ff:72:2c:da:a0:44:
         42:f6:35:4c:81:95:be:c5:7b:35:dd:3d:79:d8:21:e7:ba:52:
         bc:dd:e6:12:a1:d4:4d:dc:43:b9:25:1d:44:df:db:e3:00:cd:
         10:0a:23:14:f3:5a:37:5c:d0:58:86:22:5d:89:50:6a:49:da:
         6f:96:87:c0:95:f3:a5:d0:62:1b:1e:6e:7c:be:b8:48:d1:bb:
         3f:07:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----