Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363066643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          nrUEHDSfZOatbyU7NZ+ZkmjZAdGBvBppFyAJjcTCYgQ=
Subject key identifier:   EC:CA:CF:30:DD:0D:59:C0:01:73:8C:E8:83:00:B7:05:13:26:D2:CA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       16B75F69C652CA33DF6719A04C0582251C0088EC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 02 Apr 2025 18:45:46 +0000
ROA not before:           Wed 02 Apr 2025 18:40:46 +0000
ROA not after:            Wed 01 Apr 2026 18:45:46 +0000
asID:                     16909
IP address blocks:        2a14:7584:60fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:5f:69:c6:52:ca:33:df:67:19:a0:4c:05:82:25:1c:00:88:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr  2 18:40:46 2025 GMT
            Not After : Apr  1 18:45:46 2026 GMT
        Subject: CN=ECCACF30DD0D59C001738CE88300B7051326D2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:97:5e:a3:fd:a3:e3:43:d8:4e:84:4c:7f:
                    92:e1:7a:aa:5e:19:5d:9a:b3:ab:91:36:dd:66:0e:
                    f1:00:23:1b:1a:38:a9:dc:80:04:68:2e:f3:0d:9e:
                    2a:d8:10:ad:3f:8d:d5:d5:29:f2:a1:8e:d8:e1:11:
                    5e:20:4d:4b:8b:47:e4:10:5d:59:47:9e:47:7d:5d:
                    3d:7b:72:d0:81:90:a7:2c:65:80:60:72:b8:5a:fe:
                    f1:d8:c8:1f:7f:f9:33:8c:e8:3e:cd:2f:f5:cf:04:
                    d3:1e:54:37:0f:a1:51:5b:91:17:7c:d9:2f:c0:fb:
                    58:c4:10:84:9d:1d:6c:4f:c5:db:71:3f:38:cc:3b:
                    bd:89:32:c1:41:1f:6e:76:f4:36:65:39:5b:37:5b:
                    36:f7:d3:4d:cf:5c:78:19:75:e6:f0:05:d9:36:e3:
                    08:15:8c:2e:fc:1c:6a:7d:22:65:4d:d3:06:f4:41:
                    b6:37:a5:03:d8:a3:80:18:a8:2c:72:f6:58:af:30:
                    9d:83:f0:54:fd:aa:56:fb:d0:73:af:b1:7e:2e:33:
                    0d:b7:45:c3:eb:6a:8f:2e:8b:81:ca:87:6f:07:ad:
                    de:bc:1b:26:89:53:50:14:e4:7a:6c:26:34:85:02:
                    f1:91:77:d7:7b:c7:ed:40:bf:e0:6a:18:59:34:a9:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:CF:30:DD:0D:59:C0:01:73:8C:E8:83:00:B7:05:13:26:D2:CA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:37:35:a9:27:ba:0e:01:1d:dc:d7:37:4e:c0:da:ff:75:d4:
         6c:e7:9a:ed:56:86:78:45:4b:c2:6b:9a:ec:8d:d1:e7:1d:27:
         0d:69:d8:2d:a6:57:95:23:6b:f7:1f:1e:5f:da:a4:70:56:f2:
         64:6c:6e:05:05:e8:ad:ae:74:90:10:ea:6c:d0:f9:18:77:1e:
         0e:a5:5d:ba:31:d1:81:09:c1:9b:dc:f0:c6:0c:f0:66:f4:be:
         1b:16:02:bf:1d:f9:08:d4:36:e2:f1:fe:ef:39:ac:60:6d:19:
         ab:77:96:2c:5e:a8:6e:0b:96:3b:f0:3d:a7:87:f8:15:d6:20:
         c3:c6:ac:28:7c:e6:b4:1c:54:de:f5:95:c7:56:ec:cb:d7:b0:
         d6:8d:19:79:7a:e4:26:dd:6f:a3:6a:0d:c8:eb:44:38:c1:1f:
         7e:92:f3:bd:11:70:cd:c8:95:e1:99:67:c8:00:8a:c4:b8:4f:
         b8:c6:48:4d:5a:73:ca:43:e9:00:c2:80:71:f1:2c:a6:f8:c8:
         df:34:28:a7:50:8f:04:dd:7c:fb:5c:20:69:d1:8f:78:49:83:
         a5:b1:2a:98:1d:9f:4a:26:9d:21:2a:0e:2a:67:cb:b0:86:62:
         93:be:fc:db:d6:9f:86:6c:81:56:1e:c0:cb:d9:94:4e:3c:63:
         d9:49:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----