Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          a5JLQ1oD2hUq2P2k1X5PViJApEJhoyWn0eDfUVSdW04=
Subject key identifier:   92:C0:5A:EA:23:95:A9:E1:A0:6F:7E:C2:DA:52:11:1A:95:C3:46:AA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       15A2B50127783D8A11E469EB33B5D457DC5E5053
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:39 +0000
ROA not before:           Wed 26 Mar 2025 14:16:39 +0000
ROA not after:            Wed 25 Mar 2026 14:21:39 +0000
asID:                     16909
IP address blocks:        2a14:7584:60df::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:b5:01:27:78:3d:8a:11:e4:69:eb:33:b5:d4:57:dc:5e:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:39 2025 GMT
            Not After : Mar 25 14:21:39 2026 GMT
        Subject: CN=92C05AEA2395A9E1A06F7EC2DA52111A95C346AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:db:36:e4:7b:cb:5b:49:f2:f5:a5:08:e2:
                    ca:ad:c3:7a:ad:7b:58:f5:85:98:25:60:19:9a:e0:
                    1b:f8:ca:1b:35:ed:e5:11:9c:c7:98:95:8f:3d:50:
                    dd:27:50:29:ca:f9:ac:d7:3b:d4:4b:51:9e:b6:ca:
                    56:12:7c:de:14:1c:f5:f5:a3:ac:07:e6:f9:03:c1:
                    f0:85:48:64:6e:05:04:0e:48:59:d3:41:2e:a1:12:
                    f5:41:e7:02:a6:cf:11:6b:70:13:88:ca:60:9a:5d:
                    7e:f2:0c:e4:63:d4:e7:11:d3:03:f9:cb:f9:b8:87:
                    f7:63:e9:23:e5:7f:4f:a4:e3:09:37:ed:39:75:ab:
                    70:8c:df:31:b2:bd:a9:ef:13:20:78:5f:57:03:c4:
                    9b:93:c5:c4:9e:e6:a1:6c:c2:92:86:1f:43:37:2e:
                    56:e5:9b:aa:6c:69:75:7a:40:04:71:2f:40:31:df:
                    88:2a:47:74:2e:d5:64:f7:8b:03:40:14:59:75:7e:
                    fc:17:a3:e2:6c:ac:fb:f4:09:0d:26:da:c8:77:a0:
                    1d:2e:8a:6b:7a:c9:aa:bc:bf:5e:ab:02:94:47:96:
                    90:35:6f:c4:4a:ad:00:84:9f:55:cd:e8:32:ee:f4:
                    5c:d9:ba:48:4e:23:db:e7:ed:cc:80:87:7f:83:d1:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:5A:EA:23:95:A9:E1:A0:6F:7E:C2:DA:52:11:1A:95:C3:46:AA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60df::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:61:46:00:25:b9:07:cb:57:44:d4:56:98:97:e9:45:33:fa:
         9e:7b:f2:09:8a:80:89:9b:ee:cd:c6:21:30:98:c2:d5:97:f9:
         d6:4b:92:f2:12:81:fa:00:0c:89:57:94:4e:da:5b:6d:c0:15:
         2b:a3:5e:3b:85:3e:0f:44:05:db:52:90:de:7f:90:11:4b:72:
         cb:de:6e:cb:fe:76:7f:3b:50:50:d1:03:10:ef:0c:58:8d:ad:
         8b:7e:14:6b:d5:20:17:6d:ec:76:97:82:9f:cd:9b:6d:5d:11:
         27:cf:82:d4:37:91:f9:45:99:5c:d7:11:29:5f:ce:57:df:8a:
         fd:1d:29:16:34:40:38:e0:cd:5a:b2:17:6c:d5:ac:5e:ce:08:
         21:b2:31:28:62:db:96:5d:72:02:5e:07:70:82:26:37:57:26:
         1c:e6:1e:bc:e6:bc:2d:13:b3:47:03:8e:29:06:b6:be:18:c9:
         66:92:5a:1e:52:64:ac:96:c6:59:e8:d6:ae:76:e8:52:eb:a7:
         51:2f:b5:d3:b5:7f:ba:81:c9:9a:48:f7:69:9f:4a:bb:e0:11:
         6a:cf:6c:b9:d6:aa:f6:f5:44:f1:fe:b0:21:05:e3:6d:30:3f:
         8e:89:a5:52:4a:89:7e:58:60:1a:fd:0b:45:4c:0d:13:ea:64:
         56:79:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----