Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          GmqcpCh2mqjl3zyV9k93nii+qmwe1vtHhYU8FMbqua0=
Subject key identifier:   78:7A:50:DA:8B:84:6F:28:7F:7B:B2:55:C9:3E:67:37:CD:7D:12:58
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       481179E534F373C74C77147AA78ACC45D97AC4EE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:44 +0000
ROA not before:           Wed 26 Mar 2025 14:16:44 +0000
ROA not after:            Wed 25 Mar 2026 14:21:44 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:79:e5:34:f3:73:c7:4c:77:14:7a:a7:8a:cc:45:d9:7a:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:44 2025 GMT
            Not After : Mar 25 14:21:44 2026 GMT
        Subject: CN=787A50DA8B846F287F7BB255C93E6737CD7D1258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:82:46:35:10:ee:7c:6f:58:35:96:24:6c:
                    97:11:9f:9a:15:39:93:84:dd:de:b6:c1:35:78:07:
                    f2:34:28:18:a9:e4:57:d3:94:51:06:5d:e4:e2:fa:
                    c8:8b:0e:d0:99:12:04:c4:df:f3:f3:91:ba:dc:95:
                    23:52:c5:15:d3:be:d1:45:ed:c3:9a:ef:c7:49:b2:
                    49:3b:5a:7f:79:3b:4a:81:7f:e2:e1:e8:e8:ad:c3:
                    58:b2:92:f2:ba:0b:a9:6b:ac:8a:71:5d:3c:e0:78:
                    a1:df:c4:95:a1:4e:f3:be:d5:5b:4b:93:03:7c:bd:
                    db:0e:36:a5:3d:9a:bf:db:c1:80:94:9f:42:e2:71:
                    73:2a:47:71:4a:d6:b5:4d:58:5c:02:dd:18:2a:1e:
                    73:f0:99:97:66:21:1c:07:d8:7d:3a:f6:e1:b3:b0:
                    1f:97:ae:ce:ce:20:4c:c4:4f:0e:6e:3b:0a:7b:22:
                    5d:20:81:81:7c:99:57:3b:71:d9:81:74:51:20:a5:
                    b6:30:98:ed:b4:2e:35:99:46:d7:e8:02:fe:57:3d:
                    d2:b2:e2:d3:db:56:7e:ad:41:5a:81:cc:ea:0e:0e:
                    df:ef:95:f0:ea:e4:4e:7c:33:e8:ae:2a:cb:4e:d9:
                    5d:23:8b:08:d6:92:c5:1b:24:08:b5:30:34:b1:cd:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7A:50:DA:8B:84:6F:28:7F:7B:B2:55:C9:3E:67:37:CD:7D:12:58
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:23:6a:0f:c0:cc:86:32:5e:25:1d:19:06:f5:00:1e:44:
         00:a4:0f:19:8b:80:5d:a5:8a:5a:f1:f8:b4:0d:db:33:e8:86:
         2a:c7:d6:f0:05:78:c4:6c:6e:9f:85:8b:0e:93:a0:b8:07:a7:
         6c:62:57:0c:d4:23:c0:78:60:2e:68:a2:b0:e1:5e:48:da:a8:
         e8:5c:f1:9e:47:5b:48:ab:a0:0d:75:ca:3f:23:4d:04:58:02:
         af:c6:29:71:40:a3:a6:0f:4e:17:77:5f:4e:45:3f:38:74:14:
         f6:04:48:b5:9d:9b:d4:3d:ff:dc:35:2e:d9:ec:be:2e:03:9f:
         91:92:4f:a0:bc:87:2f:b9:3e:93:5b:9f:a2:89:e9:05:2e:13:
         e4:3d:91:ec:0a:50:a6:7c:5d:29:79:93:00:23:ea:38:d8:82:
         7d:27:ea:3b:57:07:c9:ce:30:4c:cb:4d:8e:12:82:1e:76:9a:
         7a:f2:b9:8c:48:6a:73:d7:b0:0f:b9:55:73:ff:8d:57:1b:8e:
         50:d4:e7:61:7d:0e:c9:a7:1c:0b:88:82:40:c8:08:cf:b6:47:
         23:0c:e0:38:9c:bf:4e:48:df:74:a1:cf:cd:b2:3e:f1:67:c0:
         9a:ab:51:2f:aa:61:b5:5f:0d:29:ed:1f:92:8b:3a:ad:37:94:
         b5:77:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----