Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363066353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          6O9aebFRLc3pZv1mgm6mRZcLzASY+eAyo0XKJJvi+6M=
Subject key identifier:   B3:D6:0E:B0:09:D6:5D:0E:0F:A7:36:D9:4B:15:4F:D0:5E:DE:74:C5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       541D751EF6C9422B64EE06D7B739FACB050533BE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 02 Apr 2025 18:45:26 +0000
ROA not before:           Wed 02 Apr 2025 18:40:26 +0000
ROA not after:            Wed 01 Apr 2026 18:45:26 +0000
asID:                     16909
IP address blocks:        2a14:7584:60f5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1d:75:1e:f6:c9:42:2b:64:ee:06:d7:b7:39:fa:cb:05:05:33:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr  2 18:40:26 2025 GMT
            Not After : Apr  1 18:45:26 2026 GMT
        Subject: CN=B3D60EB009D65D0E0FA736D94B154FD05EDE74C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:fa:b7:1f:30:67:15:ad:32:04:86:fd:b5:
                    64:fe:f4:29:b2:89:64:c9:2b:e7:1a:d5:c7:bd:8c:
                    54:2e:10:38:73:98:9f:2d:15:cf:28:d8:7d:67:09:
                    6a:45:20:48:10:9b:7b:a2:d9:90:31:6f:a0:86:e6:
                    51:2b:ca:bd:bd:0b:9b:f5:25:4b:03:c8:0b:bb:a5:
                    fd:69:6d:00:e1:9e:98:22:ac:bf:fa:e8:21:fb:58:
                    a6:47:aa:e2:3f:d3:cf:d2:fb:56:b5:a1:18:7f:86:
                    ea:49:27:24:80:df:3e:9d:ba:3e:8a:b6:ee:e3:24:
                    ae:c3:fc:6a:dc:1a:6d:3b:2b:01:ba:41:7e:34:01:
                    8a:d2:63:86:1a:6c:33:28:81:0d:7b:fc:6f:96:d6:
                    67:4b:89:ca:e5:df:05:a4:81:b3:dd:76:44:96:13:
                    4b:25:a3:e8:b4:2b:5e:32:e0:4b:40:c3:f1:8b:be:
                    ff:30:66:c3:84:e9:a3:c1:da:a1:88:1f:e9:9e:b8:
                    c8:0d:17:5a:9d:a0:17:53:29:4d:8e:56:b0:bd:23:
                    98:a3:51:0a:48:c6:3e:0e:92:4c:ca:a4:39:c3:03:
                    8f:6b:fc:d1:04:89:38:6c:fa:d3:f0:6f:1d:a0:8d:
                    77:44:11:4b:aa:8c:8a:77:d0:0a:b8:c0:d2:93:29:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:0E:B0:09:D6:5D:0E:0F:A7:36:D9:4B:15:4F:D0:5E:DE:74:C5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:f2:1b:cd:49:0d:dc:cf:b7:4d:56:17:e3:68:82:5f:cf:
         37:cb:19:91:d1:5b:7f:eb:be:3d:25:91:29:81:e9:c4:4a:6e:
         d5:c8:69:51:20:00:19:6e:92:49:0c:a1:42:cc:cd:d7:b9:5b:
         d1:1d:7e:a9:48:dc:aa:bd:f0:2d:87:c8:8b:42:d8:f7:b0:05:
         81:c4:6b:e0:75:c2:12:48:09:1f:0d:56:d7:61:a9:88:39:9a:
         a0:03:2e:19:7a:19:aa:56:3f:7b:f7:da:5e:2d:a6:f9:4b:cc:
         51:42:99:6b:c1:b7:58:0c:1f:75:30:ed:60:9a:a0:d5:5d:f2:
         21:31:24:f9:5a:96:7c:11:13:08:cb:f7:c6:10:d6:71:66:48:
         2b:43:a3:2c:1c:e3:c5:ef:66:d7:4f:02:85:f3:91:6b:87:72:
         3b:cf:ef:b4:ee:77:1a:41:91:b4:e6:63:7b:0f:6f:d1:a5:4d:
         14:7f:22:5e:fd:fd:3d:79:88:18:4d:0a:59:ef:ba:3c:bd:b0:
         a3:8a:d4:8c:cd:29:3c:c0:a2:64:b1:f3:83:7d:e0:a0:cb:f2:
         f8:82:ac:02:4d:38:4c:c6:25:0c:69:da:76:c2:b5:93:cc:d3:
         05:e6:ab:34:cd:f6:1c:ea:3d:6f:c4:40:c2:f1:7d:ad:59:06:
         53:ca:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----