Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          kFuPreyS6icgbsLxQcB0cwdjraSi8f00NT1WyrJbG1M=
Subject key identifier:   72:8F:79:38:90:2B:F5:93:D1:EA:94:2D:F7:5D:CE:F9:2B:31:48:F2
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       61FDD6F43C2151D9C9679AEE96CAC5124344D0B2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:16 +0000
ROA not before:           Wed 26 Mar 2025 14:16:16 +0000
ROA not after:            Wed 25 Mar 2026 14:21:16 +0000
asID:                     16909
IP address blocks:        2a14:7584:60da::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fd:d6:f4:3c:21:51:d9:c9:67:9a:ee:96:ca:c5:12:43:44:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:16 2025 GMT
            Not After : Mar 25 14:21:16 2026 GMT
        Subject: CN=728F7938902BF593D1EA942DF75DCEF92B3148F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:9f:68:70:bc:0e:51:4b:6a:a5:1f:96:47:
                    db:d5:1e:6f:6e:a8:70:34:38:7e:e4:fc:d6:fe:e8:
                    3a:52:48:8c:e6:2c:c4:09:79:3d:73:5a:6b:d7:fa:
                    d0:80:08:42:1c:30:1d:b3:6a:44:59:52:3c:b2:af:
                    b1:9f:dd:59:e0:4f:e2:5d:70:23:e9:fe:00:f3:04:
                    15:8b:5c:ae:38:3d:85:69:e2:9c:5b:85:4e:1d:16:
                    29:1c:27:54:c6:a9:50:da:5e:dc:1d:59:f3:61:ef:
                    f1:32:fa:02:fa:b8:c6:33:9d:b2:bd:bb:43:e2:82:
                    31:b1:0b:4f:ab:08:0d:2a:56:37:af:36:65:94:0b:
                    09:78:c5:13:21:dc:16:6b:8c:02:45:90:19:25:d6:
                    fa:63:c9:41:9b:dd:19:24:f2:fa:c7:31:5f:3c:7d:
                    bf:16:a5:ad:83:cd:24:01:96:d3:24:a9:d8:04:af:
                    f8:73:b6:7c:a9:cd:db:28:85:0f:5a:ee:87:4a:be:
                    cc:a0:02:09:b2:11:9a:ca:ee:be:18:57:a5:ef:67:
                    e5:cb:ff:05:6e:be:fe:de:70:30:e7:db:28:38:a9:
                    a8:71:17:24:3c:cd:30:81:d0:e0:8d:38:f4:58:fd:
                    2b:6a:15:6b:5a:00:fb:d3:eb:69:75:d7:b6:16:43:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:79:38:90:2B:F5:93:D1:EA:94:2D:F7:5D:CE:F9:2B:31:48:F2
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60da::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:91:b1:96:85:d4:0d:1e:7e:08:84:6a:be:6a:36:b8:9b:
         53:e8:5c:aa:f0:ac:6e:c7:f4:51:86:d1:56:c1:07:41:14:2c:
         9e:fd:d1:66:d3:c8:8e:73:eb:82:2c:68:56:a9:e6:7c:27:e6:
         4b:70:6f:9a:27:23:54:40:88:ea:95:cd:aa:e1:eb:19:82:ff:
         e0:bd:09:09:90:e8:01:86:ef:45:3d:e3:0c:11:a8:0d:63:df:
         26:43:6d:b0:de:31:80:44:c2:bf:20:ac:3a:68:d9:b8:e2:24:
         63:2b:0f:69:e7:93:0d:db:ba:31:69:3d:74:5c:ee:50:50:17:
         1f:ae:7b:a0:03:50:8b:d6:89:48:5c:b0:48:87:26:24:a3:16:
         0b:af:e9:0c:d8:f1:bd:f7:a6:1f:15:b8:cb:50:35:88:f5:dc:
         61:a8:fa:d2:a7:c9:c9:8e:fa:df:c5:d7:dc:07:68:0e:e1:15:
         61:6c:de:d9:34:bf:c0:0a:3a:30:c0:4a:fe:73:36:3d:66:a9:
         8d:84:fb:1f:42:ea:27:b2:d5:b2:e9:b9:f9:29:7a:20:97:43:
         a9:72:f3:2d:d9:c7:10:28:00:9f:c7:44:54:4f:84:72:4d:f9:
         e2:46:2e:ef:18:43:7a:b2:86:96:ff:db:5d:5c:ec:be:b5:5f:
         3e:bb:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----