Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          MV0QXu7/kLpoZU82JM5kBqrcnGz554863VDys29QUVo=
Subject key identifier:   49:E8:5F:89:98:F0:72:09:12:75:41:31:4F:DB:89:81:01:EE:E6:46
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       429DF7982BAA9BBCFBBB3B36D5C4E3F9147B63F9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:41 +0000
ROA not before:           Wed 26 Mar 2025 14:16:41 +0000
ROA not after:            Wed 25 Mar 2026 14:21:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9d:f7:98:2b:aa:9b:bc:fb:bb:3b:36:d5:c4:e3:f9:14:7b:63:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:41 2025 GMT
            Not After : Mar 25 14:21:41 2026 GMT
        Subject: CN=49E85F8998F07209127541314FDB898101EEE646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:a3:41:7f:19:17:f5:b3:82:3d:21:31:12:
                    e6:2e:60:58:ef:29:27:98:55:00:83:e9:78:4d:ad:
                    6d:66:e1:ae:fa:53:66:09:92:f8:83:2b:6d:db:8d:
                    c2:ce:19:60:7d:96:eb:9d:a4:7a:1a:0d:dc:da:03:
                    26:4e:8a:09:c4:74:ff:48:aa:63:08:d5:40:d2:c4:
                    f9:56:92:c7:7c:0a:7a:16:60:d8:ec:5e:aa:4e:17:
                    b4:38:43:7d:54:23:9c:d1:45:1f:d4:6c:1b:ea:6b:
                    ba:a4:47:bb:b4:66:a8:78:17:0b:b5:31:b1:36:6a:
                    73:36:14:e1:c1:08:e3:1e:70:d2:57:a4:49:d0:29:
                    69:80:1b:bf:77:3c:3a:fa:ea:65:72:aa:3f:d1:b9:
                    c2:97:f7:7a:60:8d:cf:05:ae:66:05:bd:62:4c:89:
                    b5:5b:6a:23:1e:6d:7a:d8:ba:0a:8d:be:6e:3b:ca:
                    d3:ef:49:3b:95:93:65:7b:23:18:7a:f0:07:4f:2f:
                    26:8f:3c:da:f8:ca:d5:b2:d4:ff:0b:f6:d2:a3:3a:
                    c6:0b:fe:d0:37:ab:7c:2a:d6:86:5e:c3:34:ee:8b:
                    85:1d:52:dc:f3:e9:f6:25:8d:02:14:af:6b:f0:e7:
                    f8:84:6f:5c:1f:08:2c:8b:54:59:71:3e:c4:83:8c:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:5F:89:98:F0:72:09:12:75:41:31:4F:DB:89:81:01:EE:E6:46
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:32:02:4b:bc:97:8f:10:83:9c:fc:7b:61:c3:b4:61:97:f0:
         e7:a1:12:f6:4b:d9:b1:6a:7c:e0:48:13:ff:cb:5e:85:f1:c4:
         5a:ba:90:85:90:b2:47:98:d4:c5:c1:d5:9a:0a:38:c3:6e:e3:
         f9:5f:f7:ab:a9:b1:ca:48:01:bc:d3:57:a5:38:66:2b:b7:1c:
         e2:2e:d5:a3:14:5f:91:89:1f:3e:04:03:95:a0:07:39:9b:91:
         2f:4a:d8:b0:dc:09:b3:6b:0f:4f:85:17:43:df:d6:ad:50:93:
         c3:45:d2:69:bb:63:14:a9:cf:40:e7:cb:89:11:49:61:0c:e7:
         8f:e9:cf:18:12:f1:57:b4:75:67:25:8d:ee:b5:47:b4:6c:ae:
         1d:1b:1f:ec:13:6a:f2:41:f4:cc:2e:a5:04:74:5d:66:75:6d:
         84:ef:8c:46:14:29:a2:58:d4:72:ee:dc:16:9c:dc:0e:82:ff:
         ec:cc:b1:51:68:95:47:54:da:40:56:74:6a:ce:ab:2f:8f:01:
         7c:96:ac:fd:85:5d:81:65:7d:48:f3:99:33:c5:02:60:f3:aa:
         0b:6f:40:07:1c:87:b7:98:79:1d:77:3a:73:02:5c:21:f2:71:
         ec:85:b8:13:d0:7a:95:7b:00:62:80:5d:22:fa:c4:eb:09:7e:
         41:14:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----