Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          EQjn1yVGYqfUq/PyLCBSI7KTU2AXhB4Ss3qOPZJhNT0=
Subject key identifier:   83:4A:F1:6D:F2:D4:BA:3E:86:80:DE:DF:E8:A1:1B:64:45:31:32:9D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6CE31623027A30C6DFD969492D215970C61E7A78
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 20:17:10 +0000
ROA not before:           Thu 19 Dec 2024 20:12:10 +0000
ROA not after:            Thu 18 Dec 2025 20:17:10 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:16:23:02:7a:30:c6:df:d9:69:49:2d:21:59:70:c6:1e:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:12:10 2024 GMT
            Not After : Dec 18 20:17:10 2025 GMT
        Subject: CN=834AF16DF2D4BA3E8680DEDFE8A11B644531329D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:9d:dc:a8:51:fa:60:ba:30:2c:95:18:24:
                    61:3c:a2:4e:59:f9:3f:66:26:45:7f:41:43:89:3b:
                    2f:12:03:3d:7d:81:30:6d:75:6c:51:bf:f4:7d:71:
                    e9:61:8b:e5:80:ee:ce:6f:64:6a:74:20:57:88:81:
                    08:3d:18:9e:c9:50:75:9f:65:02:31:8c:91:8d:a0:
                    e6:bc:99:27:b9:92:b0:26:36:db:a0:24:d7:18:a1:
                    ef:4f:f8:fd:b5:e2:d6:4d:37:e5:20:de:ee:49:3e:
                    2c:84:db:95:2d:38:b5:11:a4:03:f8:77:e5:ed:65:
                    ed:b1:01:7d:6c:a1:5c:64:3a:de:21:66:b2:b6:a3:
                    3d:e9:94:2b:92:c1:77:6e:7b:e2:03:5c:45:6a:bc:
                    7b:76:43:6a:86:8d:69:bd:d6:89:09:fb:55:eb:69:
                    9c:07:8d:60:18:4d:1f:68:8a:4f:25:ad:f0:01:ff:
                    90:51:c8:0b:3a:a5:28:6d:7b:41:67:7f:27:44:8f:
                    41:30:b8:c5:9f:bb:88:21:84:01:d8:42:cc:f2:5b:
                    f6:d4:b8:13:3a:99:18:0a:18:f0:85:fb:19:14:31:
                    3a:a1:14:b0:e3:7d:57:72:e4:72:cd:55:e2:f2:71:
                    3b:45:ac:2e:27:ff:64:6b:6b:c1:1c:d3:a3:7f:3e:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:F1:6D:F2:D4:BA:3E:86:80:DE:DF:E8:A1:1B:64:45:31:32:9D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:21:e3:d0:87:3b:02:c1:77:35:a6:ed:72:ed:9d:54:5d:4a:
         f6:6b:88:5d:5d:05:0b:53:b4:ae:45:7a:29:59:39:e8:db:16:
         24:46:43:e7:3d:a1:bf:56:30:5c:f9:7d:ba:cb:6c:f5:c3:4c:
         83:78:f4:85:64:a4:3e:f3:a8:07:56:e1:b4:10:5e:4a:2f:ce:
         de:94:0a:ee:b2:40:ee:04:f6:43:17:0c:b7:71:21:a9:65:6a:
         74:54:2e:18:6c:42:bf:b3:a7:7c:99:25:5f:d6:1c:65:94:fe:
         d9:b7:a4:a4:8f:28:f0:42:6a:eb:a7:58:62:c2:51:2a:77:76:
         b5:e5:81:52:df:eb:66:ad:58:0d:45:94:83:f1:77:d9:0e:bf:
         1b:61:8d:c1:00:92:14:47:21:e3:77:74:72:93:1e:0e:28:55:
         05:bf:74:63:0a:88:8e:32:c2:ed:64:47:5d:cf:b7:b7:67:b9:
         a1:16:4a:82:9d:3e:3f:13:59:11:77:d1:8e:74:42:b4:c6:dd:
         7a:45:69:d0:db:4a:24:d8:04:6f:6d:61:36:9e:9a:d6:26:c7:
         6e:c4:85:a9:bf:31:81:58:ca:d2:77:fc:ee:29:1e:a2:de:14:
         a6:e5:bf:33:61:7b:46:b1:61:38:c5:5e:a2:ce:08:76:f6:c6:
         0f:34:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----