Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          tOACXPclJherc5S+AwcieVEXNcyUzZkzGr/ng6uN4Gs=
Subject key identifier:   84:EE:39:67:E9:BC:1B:BC:D1:DB:B1:00:71:77:72:D2:A3:93:3F:DA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4D829280EF2DC99E9081E3A01FA6262696EE84EF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:17 +0000
ROA not before:           Wed 26 Mar 2025 14:16:17 +0000
ROA not after:            Wed 25 Mar 2026 14:21:17 +0000
asID:                     16909
IP address blocks:        2a14:7584:60dc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:82:92:80:ef:2d:c9:9e:90:81:e3:a0:1f:a6:26:26:96:ee:84:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:17 2025 GMT
            Not After : Mar 25 14:21:17 2026 GMT
        Subject: CN=84EE3967E9BC1BBCD1DBB100717772D2A3933FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:ce:b1:28:93:d9:b7:67:9a:99:73:48:f4:
                    c7:d4:b6:17:2b:4b:6e:ab:e0:3b:51:cc:1f:a9:3f:
                    b8:86:dc:0e:60:d1:ac:c8:61:30:75:8f:21:d5:df:
                    e3:61:5d:61:c3:d6:bc:89:4a:ea:20:91:07:f2:94:
                    09:5d:3b:d6:bb:ba:9b:c3:e7:e3:33:01:32:c0:9a:
                    42:40:c2:ff:c0:3e:99:43:31:20:09:eb:78:17:51:
                    7c:69:92:25:59:cd:a5:44:d4:dd:d6:bd:23:0e:16:
                    64:8d:68:6b:b5:43:f1:1c:54:6e:7f:10:c7:b2:03:
                    a0:af:5a:2b:c2:81:d3:4c:91:00:b6:49:9c:ae:30:
                    be:93:9e:90:44:8a:56:7a:a8:a5:e2:61:98:bb:54:
                    98:b0:18:ae:f4:57:aa:aa:a1:a7:37:c5:4d:1d:be:
                    e0:32:02:02:2a:0b:79:9f:72:c8:2e:8d:2c:14:7a:
                    89:36:ce:09:13:ac:c6:20:42:ff:fe:18:73:8d:8d:
                    b7:3c:c0:9f:53:40:c2:6c:87:bd:7b:d6:ce:3b:84:
                    c9:5b:5f:3a:a2:35:43:7b:f4:ff:aa:7f:a5:aa:f1:
                    f7:15:bc:da:d9:27:3f:a4:5e:6e:ec:12:df:ba:20:
                    88:7e:50:d3:bc:7f:34:1a:16:1f:30:89:95:68:81:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:39:67:E9:BC:1B:BC:D1:DB:B1:00:71:77:72:D2:A3:93:3F:DA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:26:e0:52:77:45:99:b0:97:00:f7:d6:c4:0a:00:fc:51:
         e5:49:f5:bb:73:98:fa:73:47:72:4a:1d:b3:53:7b:44:44:e7:
         25:0e:29:c9:da:f7:80:f9:cd:e2:cc:e3:11:c5:62:3f:fe:e1:
         a1:20:7a:f8:ae:33:b2:06:48:10:85:f3:bf:cb:7b:3f:e0:b4:
         57:40:bf:f6:f6:56:a5:0a:01:33:4d:05:00:ce:1a:20:f0:2f:
         16:18:06:8f:a6:1c:4a:fd:46:3e:e8:33:bc:44:35:75:ec:43:
         14:31:c1:f3:4e:f4:6b:f2:07:d6:13:f4:39:4e:47:73:1b:5f:
         34:04:5f:94:22:41:f3:b2:98:97:20:3e:67:14:70:de:61:b6:
         60:dd:f3:66:ed:68:1b:cf:65:a9:ef:16:af:15:67:64:21:ae:
         df:2f:6f:fd:32:c3:7f:34:b8:5f:91:45:8c:d4:d3:a3:1d:ab:
         8a:b8:2f:9f:91:08:25:42:cb:c6:77:0f:8e:1c:5e:4f:57:93:
         52:64:46:be:1e:28:0d:e3:49:38:12:80:74:c4:f5:69:45:59:
         4a:35:dd:0f:6d:ee:b3:67:53:f5:e5:50:10:e8:77:15:ba:43:
         47:f9:a9:e4:65:41:92:ea:fe:67:b7:60:c1:2c:ac:b0:7e:b0:
         d8:ce:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----