Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          2YaHOeQnCBVP2/6ZtGuzZ+6+8ribgw6VOLCLGWjCHlg=
Subject key identifier:   D1:97:60:45:3D:CC:B1:AA:AF:D1:A6:6A:35:87:D8:C7:D0:D9:05:CD
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       24F55DF4F2A054C73ED44B4B0EEC0CDA8A2055E7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:41 +0000
ROA not before:           Wed 26 Mar 2025 14:16:41 +0000
ROA not after:            Wed 25 Mar 2026 14:21:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f5:5d:f4:f2:a0:54:c7:3e:d4:4b:4b:0e:ec:0c:da:8a:20:55:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:41 2025 GMT
            Not After : Mar 25 14:21:41 2026 GMT
        Subject: CN=D19760453DCCB1AAAFD1A66A3587D8C7D0D905CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:57:01:d7:25:13:77:d9:fc:22:39:80:03:
                    12:bb:15:66:17:70:8e:ba:b6:af:a8:0a:6d:bc:f4:
                    54:a6:6d:b0:f6:88:db:21:d5:be:8f:c6:c1:b3:2a:
                    9f:10:50:6b:09:9f:2d:0b:56:3b:95:af:eb:06:e4:
                    60:62:18:22:9f:f5:9a:f4:58:7a:63:af:5d:5b:45:
                    14:53:eb:f5:c0:3d:1c:b1:95:7f:5c:09:55:c6:c5:
                    95:df:b8:3a:fe:1c:85:f0:d8:8c:25:54:9f:01:a7:
                    a7:12:c8:61:ca:55:21:73:01:2f:7c:42:6b:11:44:
                    b9:d8:fc:ea:59:2e:f8:93:40:8a:84:d5:c4:1e:e1:
                    b6:7a:88:b2:b0:37:c9:72:b7:ee:96:cf:a4:54:9e:
                    08:e1:96:61:95:d6:15:45:0b:60:47:39:ff:92:db:
                    ad:99:d9:65:47:1f:84:6d:d8:b3:32:14:7c:d2:20:
                    91:70:13:dc:9e:14:98:2e:7c:53:c1:17:af:59:ea:
                    0b:a4:3b:7d:f9:5c:67:06:46:52:a9:60:ee:80:8b:
                    5c:b7:e7:ad:eb:31:1d:84:44:e9:34:af:07:ef:ed:
                    9d:85:a4:c7:92:f8:a8:48:82:8c:b9:ff:70:92:6a:
                    ae:15:93:05:c4:3d:1a:d6:71:9d:5f:f9:43:cd:26:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:97:60:45:3D:CC:B1:AA:AF:D1:A6:6A:35:87:D8:C7:D0:D9:05:CD
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:df:33:cf:a8:67:da:5d:68:60:a3:af:ec:ec:62:7d:cb:
         ba:03:8e:d1:f3:0d:4e:a0:80:61:be:1e:65:f7:82:a7:51:6b:
         69:ad:47:d9:90:02:f2:81:75:24:6c:ae:ae:50:bd:0e:94:d5:
         0b:93:35:0b:a0:c6:98:36:9c:c5:7d:42:60:67:44:f4:11:ca:
         d6:6b:eb:e3:0e:90:4e:2c:1d:76:28:ef:04:3f:74:2f:37:85:
         c2:fa:4b:e9:b4:66:c0:7f:b6:58:a7:ff:ea:c1:77:1a:b2:b9:
         64:58:70:0d:df:50:de:42:6c:b3:24:93:b7:fc:53:ac:84:77:
         67:7c:e1:f1:52:e9:07:49:a9:59:54:d5:6c:77:70:44:e1:9e:
         3c:31:c4:b3:6a:46:0f:81:d0:ee:31:35:a0:03:ec:fe:14:ff:
         c0:2f:20:aa:9f:92:8b:a0:15:72:bf:43:ff:0f:ee:b9:39:4f:
         e9:e2:6d:ef:66:c4:8f:4b:07:f7:43:a0:6f:3a:88:88:39:ea:
         4e:91:d6:44:66:7f:e1:4b:7c:1a:cc:df:e2:cf:d0:c6:49:f6:
         54:69:94:ff:10:e6:60:db:ce:b4:f2:c7:ae:7b:a4:2c:44:a7:
         e3:51:21:22:98:5a:27:16:c5:41:45:cc:f0:74:42:39:4d:1e:
         5f:97:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----