Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          y0WvrgWA8ndHyM0yADUpJxtSohoUy5vAV3JfauncLVk=
Subject key identifier:   64:A3:E2:FE:29:09:E3:38:EB:2C:B3:77:3B:30:C6:71:38:C2:BE:80
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       51925E0598DF5CE0B89B9F78F7324412A9DEC0B4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:15 +0000
ROA not before:           Wed 26 Mar 2025 14:16:15 +0000
ROA not after:            Wed 25 Mar 2026 14:21:15 +0000
asID:                     16909
IP address blocks:        2a14:7584:60d9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:92:5e:05:98:df:5c:e0:b8:9b:9f:78:f7:32:44:12:a9:de:c0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:15 2025 GMT
            Not After : Mar 25 14:21:15 2026 GMT
        Subject: CN=64A3E2FE2909E338EB2CB3773B30C67138C2BE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:dc:63:6f:4b:3a:f8:db:72:09:d4:20:32:
                    4c:b2:ae:a6:76:b3:5c:28:40:59:e6:7a:75:02:5a:
                    f9:fb:a1:d6:45:8a:88:5d:b1:fa:e3:0a:ac:a4:59:
                    3a:17:7e:b9:f0:83:1a:78:20:37:a5:24:95:b0:67:
                    7c:7d:09:35:45:a4:5e:0b:bd:4f:ee:dc:40:93:1a:
                    d9:f5:ff:90:54:63:49:be:47:b1:c9:4e:a2:a3:93:
                    03:3c:26:3a:77:65:59:7a:3b:14:a9:e1:4b:a9:2e:
                    8c:72:a0:da:db:2a:40:61:83:de:71:7d:56:5f:8c:
                    37:95:ce:0c:9f:81:3f:4d:e0:a3:90:c2:6c:5b:55:
                    cc:10:13:0c:60:03:5f:9c:c6:f8:98:10:62:29:e7:
                    97:69:9e:dd:ee:f2:3e:bb:78:d4:76:04:00:f6:d4:
                    a6:2b:5b:53:4d:7d:e0:3a:5c:73:13:f3:fc:f7:3f:
                    7b:7c:5c:32:9e:2e:64:16:6b:11:20:b8:f0:a7:f8:
                    f5:a6:47:ae:60:64:8b:a4:1a:28:4a:5b:67:45:0d:
                    12:1a:fa:e4:db:27:77:7e:1f:67:10:4d:b3:f3:b1:
                    1e:29:83:17:c0:e4:16:07:65:3f:0f:69:09:ef:ee:
                    b0:d0:bf:96:83:ac:be:5e:cd:45:cd:05:75:da:c9:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:E2:FE:29:09:E3:38:EB:2C:B3:77:3B:30:C6:71:38:C2:BE:80
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60d9::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:09:4c:ec:ed:08:b0:c5:b6:0e:49:a3:1a:62:e1:33:a2:
         1e:97:fc:1c:82:19:c0:35:c9:16:0e:17:0b:bb:4e:97:79:72:
         6f:70:67:9a:ab:d9:16:a7:09:ef:65:5a:6b:03:26:41:79:e8:
         9c:76:ab:90:e6:0f:41:e3:e1:92:1b:fc:f1:6b:8a:3c:ea:31:
         c0:c2:3d:33:4c:9a:f2:2f:01:e0:9a:fb:c2:4f:18:d5:07:1c:
         72:e6:9d:dd:17:5c:1e:07:28:7e:06:e8:2d:df:a3:02:32:0b:
         5e:2b:47:d2:d3:4c:f0:00:31:bb:25:5e:b6:59:bb:43:d0:ec:
         65:3e:02:76:a4:1c:71:c5:23:59:1a:d4:68:35:7f:34:6d:a8:
         90:ae:6b:99:b5:7c:f2:1a:0e:d0:50:f6:f5:7b:7f:c3:d9:1a:
         f0:ec:c8:fa:6c:5b:64:8d:27:34:f1:9b:03:b8:89:cf:8e:ad:
         ec:02:3c:82:55:69:e4:f5:4d:be:01:b2:05:f4:40:56:a3:da:
         7d:af:ca:cc:05:24:b7:e5:f7:4d:d2:7d:0d:a6:4e:25:c9:44:
         f2:97:d2:18:dd:33:07:ac:44:cf:4c:e6:a7:f9:6b:da:30:fe:
         d0:aa:6d:7a:69:90:1a:9c:cd:99:41:1b:4e:3f:58:a6:a3:03:
         e1:9f:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----