Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          av867dnq9isR7JfbV5mCwotiMbs8PnfS/QPH/QrhIUo=
Subject key identifier:   5D:41:FB:3D:FB:CE:63:8E:8D:B6:5A:1F:C2:8B:C8:49:9F:34:5A:1B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5F56421AEB158C5D7834357428002B3CD0D14EAD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:17 +0000
ROA not before:           Wed 26 Mar 2025 14:16:17 +0000
ROA not after:            Wed 25 Mar 2026 14:21:17 +0000
asID:                     16909
IP address blocks:        2a14:7584:60db::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:42:1a:eb:15:8c:5d:78:34:35:74:28:00:2b:3c:d0:d1:4e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:17 2025 GMT
            Not After : Mar 25 14:21:17 2026 GMT
        Subject: CN=5D41FB3DFBCE638E8DB65A1FC28BC8499F345A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:07:e7:d0:d1:bf:65:23:f3:36:b1:98:03:
                    e1:f3:f9:a2:67:c7:bd:f1:13:8f:ed:5b:f7:66:fa:
                    4d:fb:af:2a:cd:f4:89:58:78:77:21:d4:43:ca:cb:
                    25:f7:ac:d1:12:31:84:0a:db:db:48:0b:b6:bf:0b:
                    38:d5:b9:47:b2:d4:51:a1:f4:b9:2a:78:23:14:f0:
                    10:fd:81:cb:59:84:a7:1f:3f:c2:8a:75:ab:e9:31:
                    d8:c5:62:aa:76:c0:8a:b1:a5:20:7b:b7:ab:85:39:
                    8e:52:ac:33:30:91:12:10:b4:de:31:c7:32:97:44:
                    bb:ad:c2:b9:f3:47:88:f6:57:a6:2e:cc:31:46:49:
                    7a:99:74:68:33:34:4c:a7:95:f4:9b:23:5c:5e:7d:
                    b5:55:b7:17:46:63:15:82:ac:d1:31:7d:13:c9:6c:
                    c6:a5:3b:64:61:d6:76:5e:4d:a3:ed:c6:d6:85:47:
                    de:e4:eb:30:1b:f8:2e:c9:53:15:9c:e4:fb:d0:9a:
                    6b:78:d2:c0:f4:d8:92:5d:25:f9:ad:8a:ff:8a:af:
                    bc:97:ea:c4:10:e6:ee:97:83:8b:68:f9:dc:69:5f:
                    ef:50:be:bd:2e:3f:ed:be:16:1d:dd:7f:d4:6d:cf:
                    2f:52:48:5a:dc:c7:9f:fc:3c:03:3b:86:88:3f:4e:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:FB:3D:FB:CE:63:8E:8D:B6:5A:1F:C2:8B:C8:49:9F:34:5A:1B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60db::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:6f:98:10:71:c3:7f:77:0a:e8:5f:4e:68:52:78:e2:34:
         d4:27:79:57:f9:ba:a0:eb:97:89:a8:0c:c6:f8:20:14:32:e8:
         b9:2b:11:82:39:9e:5e:88:7b:dd:93:41:56:11:3a:da:4a:77:
         53:03:b1:df:4e:9f:ab:28:f7:57:75:30:2b:c5:3a:9e:66:ee:
         7c:4a:7c:a0:4f:c4:30:af:42:8a:24:60:8a:ef:2e:45:fd:c3:
         e1:26:9d:90:6a:5e:83:20:f4:7b:90:f7:05:64:66:3d:31:c9:
         35:fc:3c:28:dd:05:3f:8d:fe:0e:27:63:a1:6e:e5:c3:7e:0d:
         52:9b:1b:e3:bb:57:ab:8b:64:4a:00:b9:f5:58:40:8d:c8:96:
         dd:7a:5c:c9:52:0b:ad:b0:34:bd:32:60:8e:15:bf:2e:71:b9:
         e7:e5:35:de:78:3f:66:08:6b:22:bd:b2:c7:be:c8:b7:44:fd:
         fc:c2:29:65:55:0c:40:c4:33:9a:8c:21:85:ae:41:87:74:ee:
         df:7c:6d:7a:28:99:c1:ab:54:fb:19:92:a9:6e:05:79:46:52:
         68:bd:a7:31:60:cb:b8:07:2d:7f:bf:c1:bd:2f:f2:d0:14:76:
         c5:45:fb:88:e2:90:64:e7:ff:59:4e:8b:3b:68:00:36:aa:1b:
         ac:45:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----