Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          47+Gu67I5nnBwhWgbQRpY8pdKXIGpbwR7BSBXCpA3dA=
Subject key identifier:   27:DD:DD:AA:19:9A:41:0C:74:78:18:BD:77:71:C0:6E:69:01:FF:B6
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1C87469D37795D1472CE367E03B03CF966ECC50D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:22:09 +0000
ROA not before:           Wed 26 Mar 2025 14:17:09 +0000
ROA not after:            Wed 25 Mar 2026 14:22:09 +0000
asID:                     16909
IP address blocks:        2a14:7584:60eb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:46:9d:37:79:5d:14:72:ce:36:7e:03:b0:3c:f9:66:ec:c5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:17:09 2025 GMT
            Not After : Mar 25 14:22:09 2026 GMT
        Subject: CN=27DDDDAA199A410C747818BD7771C06E6901FFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:95:15:db:5a:59:71:a2:f4:54:08:1f:e5:
                    43:89:9d:66:22:04:b6:77:ab:a0:4d:f2:90:02:78:
                    de:cd:52:f4:a7:15:df:35:e2:c2:f7:fe:5e:60:18:
                    ef:b8:dc:62:36:00:f5:80:7b:f5:0a:42:2c:57:b4:
                    e0:89:11:98:4c:1b:d2:63:2a:8a:ff:c5:4e:d4:5e:
                    ab:06:b1:40:d9:2c:c6:15:7f:33:7b:e4:ce:22:1e:
                    3b:e3:3c:99:2d:6f:53:35:3e:85:1f:71:cf:a1:f7:
                    a6:b5:3f:cb:71:9a:34:8f:f1:d5:2e:7c:82:4b:34:
                    05:48:a5:b3:10:f1:55:53:9d:12:fc:41:a0:d7:eb:
                    64:c9:a6:91:62:3c:da:1f:d3:d2:d9:4c:49:8b:66:
                    07:03:b2:fd:5a:ae:2e:54:88:61:56:ed:19:91:59:
                    ad:0e:6a:a0:bf:30:fb:47:6a:e0:52:bf:7e:bd:5b:
                    da:bf:00:a1:02:2d:32:50:9d:bc:c4:d9:7d:d1:cc:
                    50:d4:1c:3e:11:a7:77:6b:99:87:67:0f:f1:22:98:
                    72:53:02:5e:f3:0d:9f:82:03:d4:a5:8b:43:24:c1:
                    df:40:b9:3f:2d:ba:80:3c:4c:9d:19:7b:2f:b3:72:
                    0a:1c:60:74:26:fc:67:fa:26:e7:4c:71:5a:82:55:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:DD:AA:19:9A:41:0C:74:78:18:BD:77:71:C0:6E:69:01:FF:B6
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60eb::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:26:ba:ed:b4:84:3a:3e:e8:97:47:e7:54:a3:d5:13:ef:
         08:29:0b:01:18:76:56:31:37:87:e4:f5:e4:ff:3c:37:27:6c:
         fe:41:78:99:c4:9a:01:f5:04:22:ce:99:ef:42:5c:94:d7:dc:
         20:ff:5b:ca:53:88:0a:b2:ce:b1:88:84:0b:50:e7:35:2b:79:
         e5:cd:83:14:32:53:e4:93:84:c2:7e:44:5e:52:49:37:5a:f3:
         7f:3d:4c:8c:d9:7e:ef:26:1b:aa:58:ae:0d:41:96:f2:3a:f1:
         31:8c:21:c4:05:82:84:61:f7:d9:43:35:3c:13:c2:20:fd:a5:
         a7:af:34:55:a8:04:e6:8f:ce:1b:29:0f:45:d1:63:da:9a:11:
         c6:c2:b0:12:19:45:6e:e0:46:82:f6:0e:88:4e:bb:7a:df:76:
         19:61:f2:d4:7d:e7:0f:ab:54:28:a1:7e:cc:bf:cd:55:0a:3b:
         fe:22:66:d1:43:72:29:2c:79:73:79:15:f3:90:d8:fd:c3:32:
         b2:cb:f1:cf:0c:78:a2:40:70:49:aa:f4:cc:5f:67:f0:90:ab:
         42:cf:9c:2e:e6:95:70:7f:58:3b:11:f6:58:7e:f2:eb:ee:d0:
         9a:b0:21:4a:bc:1b:46:df:f3:42:0f:62:87:1e:d8:1c:8d:ff:
         53:ed:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----