Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363066653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          YuNTrecZ3VuUGbdGCbUlsqPHsVdNoaUwmj7Tb27/Ak4=
Subject key identifier:   BD:19:17:52:F3:71:01:22:11:6B:5D:8F:2C:7C:AD:6B:C6:01:5F:A3
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5DBA0A69206247039272B30FB1EB4C6E93EC82F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 02 Apr 2025 18:45:47 +0000
ROA not before:           Wed 02 Apr 2025 18:40:47 +0000
ROA not after:            Wed 01 Apr 2026 18:45:47 +0000
asID:                     16909
IP address blocks:        2a14:7584:60fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:0a:69:20:62:47:03:92:72:b3:0f:b1:eb:4c:6e:93:ec:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr  2 18:40:47 2025 GMT
            Not After : Apr  1 18:45:47 2026 GMT
        Subject: CN=BD191752F3710122116B5D8F2C7CAD6BC6015FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:77:d5:2c:91:e2:4d:d3:cf:17:3e:9c:94:47:
                    3a:d4:d3:95:96:b1:56:c0:f2:14:21:aa:db:b8:04:
                    3b:e9:28:80:c8:2e:2e:0d:50:6d:3a:a3:d8:09:4f:
                    a4:cc:45:ac:ce:52:cf:94:76:5c:c0:51:29:ba:fa:
                    c5:4a:b5:a2:db:9e:99:58:3c:6d:5e:fe:97:29:0f:
                    68:7b:da:b7:45:6e:4d:4c:0b:5b:a0:4d:c2:67:ea:
                    66:75:06:b2:7a:c2:66:2e:90:27:b2:a9:08:e4:64:
                    21:39:25:a0:64:a7:b2:13:74:b3:42:f8:fc:31:2e:
                    b0:57:f4:8d:4c:ea:b9:4b:90:04:af:16:d0:dc:ca:
                    ba:f4:12:85:0d:a9:39:ef:65:2d:18:0b:68:c0:1a:
                    ba:ee:0d:16:1f:b6:66:ba:52:25:d6:f8:63:1e:01:
                    33:84:e2:0e:83:ee:a7:41:3f:7e:0c:dd:ba:2c:c2:
                    0b:48:c6:5d:d0:85:8c:7c:a7:1c:ed:09:76:4a:80:
                    7c:1f:b9:b9:eb:9b:fa:23:a0:00:28:b6:e2:67:06:
                    b8:37:6a:26:79:53:18:7c:ee:21:20:ac:ef:ba:c3:
                    90:4b:66:57:c1:16:e5:4e:9f:67:ea:14:68:82:1a:
                    5e:3d:31:c8:ec:1e:43:61:7c:11:98:0d:58:3d:8a:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:19:17:52:F3:71:01:22:11:6B:5D:8F:2C:7C:AD:6B:C6:01:5F:A3
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:73:3d:16:50:b7:0e:a4:a9:63:1e:86:a2:5d:b4:43:15:c5:
         4d:a4:d3:98:54:1b:83:8e:28:09:c4:2c:f2:cc:d6:a4:e3:08:
         d3:ec:4c:ff:7d:f2:8e:52:fa:6c:25:5f:4d:98:06:fa:10:70:
         d0:c3:81:dd:4c:24:3c:eb:d5:b3:12:f0:66:9e:35:57:7a:a2:
         da:81:3d:95:67:6b:0b:e9:3f:99:e9:ae:7e:0c:8a:a1:41:24:
         88:b2:a3:1b:a0:a5:4d:1c:67:7e:d5:08:1a:7e:5e:6d:c3:97:
         52:1e:15:bb:35:0b:72:89:ca:35:44:fe:e7:e7:42:8e:a0:0a:
         e0:8c:0b:64:0e:a2:b7:42:0b:8a:c9:f7:af:38:7c:d0:2d:38:
         53:86:e8:ca:63:93:4b:79:bb:88:18:d2:17:05:65:c2:3c:16:
         5c:64:fb:10:03:09:45:c6:2b:df:e5:62:cb:c3:d9:c9:90:6b:
         37:65:c7:ea:b5:ce:7f:d6:38:8d:9f:55:99:07:9d:f2:d3:ad:
         dc:61:05:34:6c:b0:7d:f9:fe:2d:f7:2b:4c:96:46:06:5a:f6:
         ed:26:36:e6:cd:08:18:ba:12:2f:fd:31:16:cb:4b:db:ad:c8:
         82:64:b9:60:52:36:84:a3:4e:4d:3b:06:be:a6:22:87:65:1d:
         84:03:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----