Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363130653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5BIKxn6lISuBx40/HyZ3aCKFJcSprDXPwgIW24z7NVg=
Subject key identifier:   FE:77:F1:A9:37:82:4D:FD:A1:78:01:5C:94:B5:3F:7F:0A:C9:FF:14
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       52CAB79BC520C8C465BC340AE2D1304821126D8B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 02 Apr 2025 18:46:41 +0000
ROA not before:           Wed 02 Apr 2025 18:41:41 +0000
ROA not after:            Wed 01 Apr 2026 18:46:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:610e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:b7:9b:c5:20:c8:c4:65:bc:34:0a:e2:d1:30:48:21:12:6d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr  2 18:41:41 2025 GMT
            Not After : Apr  1 18:46:41 2026 GMT
        Subject: CN=FE77F1A937824DFDA178015C94B53F7F0AC9FF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:8f:c1:8b:73:49:0a:c0:b8:7a:19:98:46:
                    e3:02:50:31:cd:14:83:77:0c:2c:57:df:3d:29:75:
                    77:fb:77:79:2a:99:ac:e5:f0:fe:ea:bd:5e:65:b5:
                    e3:3e:81:52:2d:ec:bb:97:4d:e9:16:d9:0d:18:d9:
                    be:95:1b:62:84:2f:ca:f1:59:9e:31:a3:91:37:bc:
                    9f:ac:8c:1c:ea:b4:69:85:03:fa:9e:71:ec:60:b0:
                    1d:56:f3:cf:61:d4:d4:ea:f9:16:99:d6:75:c3:41:
                    f4:b8:92:b3:b6:16:23:29:f9:1b:10:08:31:f3:b5:
                    78:8f:ea:4e:c7:00:0f:b6:72:bf:c1:54:34:db:2e:
                    13:2f:d8:51:6c:61:67:43:8d:65:ba:5f:b5:93:39:
                    bc:0a:8b:fc:ab:38:c0:22:03:50:e9:be:a7:37:24:
                    4d:c4:cc:1e:e8:dc:71:bb:ee:6b:1a:5c:7e:3f:42:
                    dd:3d:f2:57:91:51:11:9e:a9:bf:5d:db:f4:f5:7a:
                    37:eb:45:69:82:29:12:71:bc:80:db:e0:4b:68:0e:
                    ce:29:4d:d5:ba:74:0b:b2:7e:26:33:3c:b1:a1:87:
                    44:bd:7a:d3:65:6b:23:80:76:0a:24:2a:c6:a4:e3:
                    b0:47:d2:5e:49:4a:4f:af:55:8f:af:3d:c6:87:03:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:F1:A9:37:82:4D:FD:A1:78:01:5C:94:B5:3F:7F:0A:C9:FF:14
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:610e::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:73:0a:67:8f:19:f3:4d:87:05:98:9b:7d:3f:03:20:da:
         e0:ea:8b:f7:2d:61:68:48:b5:7a:c8:d2:7c:c2:21:e6:3e:5d:
         ba:17:f9:90:02:be:b8:d8:1f:96:73:22:9d:d9:24:7b:77:fb:
         78:82:5b:93:8a:92:d4:e1:5b:33:88:d5:78:51:ed:fb:bd:ca:
         b8:0a:39:e6:7c:a1:95:53:5e:4c:a4:70:12:c2:d3:fe:3e:c0:
         50:da:6b:92:77:f9:ae:ac:fb:ac:ce:e2:ed:b5:49:4b:cb:b6:
         7d:8c:ad:32:40:72:33:e9:11:0a:69:cb:a3:7d:5a:f4:ab:ef:
         ee:a0:8d:66:2f:21:13:fc:71:1f:0d:b1:50:2a:e5:8a:bd:4d:
         d0:61:a7:28:eb:19:ac:fd:2a:e3:a5:22:10:f8:81:1a:f5:0e:
         9b:41:a4:c9:e6:bf:a3:89:d2:a2:26:fd:a7:08:e9:70:15:f0:
         ab:0c:9a:60:c0:43:28:d5:ed:1e:fb:01:ae:65:43:30:2a:83:
         7a:9c:47:c5:44:b2:ec:aa:5d:b4:cf:8c:a6:bc:6c:be:4d:20:
         29:73:a1:ab:87:6a:14:23:8d:bd:99:70:06:79:c7:30:0a:d0:
         b6:84:0f:14:b2:91:4c:ce:10:c4:24:a9:01:82:76:d4:5e:3d:
         03:ca:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----