Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          uNkuQ9xpTXyXUzMKj39XAnA8NKvwdERo9Bu2/0ZtseU=
Subject key identifier:   F3:03:75:9D:50:99:E8:A0:EF:D4:79:B5:4F:BA:69:F4:E8:D1:CC:A8
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       08BCAC608E3E9339A899CADB928D5649269D7ED7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:43 +0000
ROA not before:           Wed 26 Mar 2025 14:16:43 +0000
ROA not after:            Wed 25 Mar 2026 14:21:43 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bc:ac:60:8e:3e:93:39:a8:99:ca:db:92:8d:56:49:26:9d:7e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:43 2025 GMT
            Not After : Mar 25 14:21:43 2026 GMT
        Subject: CN=F303759D5099E8A0EFD479B54FBA69F4E8D1CCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:d3:03:59:34:5d:03:0e:96:2d:24:4c:d1:
                    60:24:c8:94:22:01:35:81:40:cb:13:86:2e:a2:2e:
                    cc:f3:37:8c:7f:4d:be:89:73:b3:3e:78:50:a5:d2:
                    13:d7:94:cf:a0:28:21:cc:e7:4c:4e:fc:44:17:b1:
                    b4:00:3c:41:b7:55:26:47:83:cd:6f:68:76:87:07:
                    5b:54:e9:46:39:6f:e9:f7:a2:55:44:4a:3e:8c:09:
                    32:bb:18:13:0e:1b:56:a6:7a:e6:ee:ea:8a:b6:18:
                    e3:bc:06:ff:bf:61:3a:b6:15:3a:89:69:02:cb:90:
                    7e:c6:73:e7:2a:86:9a:be:de:81:54:b0:2e:9a:71:
                    98:13:58:83:1a:47:5b:26:d0:5f:85:3f:b9:e9:22:
                    6e:49:af:9e:53:4e:e5:7d:b7:72:4e:51:fd:b1:0d:
                    31:8d:07:4b:57:cd:bb:83:10:0c:fc:69:c7:7f:3b:
                    dd:60:b8:0c:e6:d0:b9:68:2d:d7:4c:20:41:7d:cc:
                    2d:58:59:97:95:3f:1b:c0:34:e8:ee:f8:0e:76:4e:
                    73:e5:4b:65:8b:9f:0d:76:78:a8:9f:28:eb:89:14:
                    7b:f6:47:33:77:c6:8c:7b:ea:4c:a8:59:d8:78:49:
                    c7:05:e4:d5:26:cb:22:47:3b:fd:86:45:42:71:3c:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:75:9D:50:99:E8:A0:EF:D4:79:B5:4F:BA:69:F4:E8:D1:CC:A8
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:97:4d:19:15:94:10:7f:38:fd:b7:77:0c:b6:35:3a:91:26:
         9d:34:79:ac:10:70:29:d8:c2:d3:ef:29:fa:ac:08:85:d2:60:
         4d:a9:a5:0e:47:3a:17:71:a5:3f:37:2a:86:10:c0:81:e3:54:
         f7:1b:ab:eb:20:98:80:8f:64:6a:87:6f:64:d7:a1:98:27:c1:
         11:c0:6d:7b:cd:df:80:7e:aa:9e:7f:63:36:db:3e:9c:84:ac:
         6a:4f:9e:e9:d3:9d:c6:96:68:18:a6:a5:bf:3e:92:e2:b2:01:
         9b:50:3c:17:5d:90:06:1d:bb:ab:31:28:a9:1a:85:47:e0:9c:
         93:14:f9:e5:5b:72:2f:df:d7:a6:86:f8:3f:6f:e4:97:7f:2e:
         2a:b6:cd:86:48:c9:b3:1c:73:93:69:7c:29:2f:ac:20:71:ba:
         c7:d0:32:fc:d8:31:74:f9:39:0a:62:b9:36:49:4f:0c:4c:bc:
         e1:25:be:34:b6:b4:50:aa:d7:ea:94:9c:a0:3d:d2:f5:08:f0:
         07:b4:dc:e5:96:84:04:f8:07:a2:16:26:f2:b6:bb:58:86:5d:
         25:b6:e8:48:2f:06:49:fd:41:e2:51:28:37:57:be:b4:e7:01:
         e3:93:43:7b:04:f9:e1:15:30:56:ad:be:10:63:6e:81:1d:f2:
         f0:59:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----