Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131353a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          FzyFSlN3+mEd80wxak2AVmynvF9/va2Myg+fLDdfWhA=
Subject key identifier:   02:4E:EF:15:BE:21:7D:F6:87:3A:87:84:C3:9D:E3:AA:F7:61:BE:8F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7550C53DEFFED79DB61AD8006100F602545BBE7A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131353a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Wed 02 Apr 2025 18:47:23 +0000
ROA not before:           Wed 02 Apr 2025 18:42:23 +0000
ROA not after:            Wed 01 Apr 2026 18:47:23 +0000
asID:                     401507
IP address blocks:        2a14:7584:6115::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:50:c5:3d:ef:fe:d7:9d:b6:1a:d8:00:61:00:f6:02:54:5b:be:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr  2 18:42:23 2025 GMT
            Not After : Apr  1 18:47:23 2026 GMT
        Subject: CN=024EEF15BE217DF6873A8784C39DE3AAF761BE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:d9:26:3e:ae:8d:ef:ab:e8:b9:60:e7:d0:
                    e9:34:aa:92:0e:f3:c8:94:cc:6e:ef:d0:99:50:4d:
                    06:15:18:11:20:3b:c6:f5:7b:23:cb:3a:e3:43:7b:
                    d5:fa:d3:51:90:be:76:a9:65:9f:4f:34:34:52:55:
                    b3:3f:3c:24:6b:93:eb:1a:03:dd:8b:7d:f1:2b:30:
                    2e:e7:a1:b2:18:b1:74:8f:bd:b6:89:2c:2b:a8:30:
                    25:25:22:a6:bf:b4:96:e9:a4:44:eb:17:09:ac:d2:
                    69:46:87:d7:ed:c4:54:03:da:1e:ee:09:93:b8:e5:
                    43:fc:51:1f:2d:67:65:c5:45:72:43:98:a1:c5:3b:
                    bc:63:93:0a:71:e6:c0:f8:2e:df:2e:a7:c5:88:54:
                    04:63:3b:c4:e3:f4:82:0d:9b:e7:e6:37:5c:56:51:
                    d1:f7:05:b3:38:51:a3:e8:c0:38:25:a3:cf:f3:9c:
                    5e:b4:80:65:b3:c1:1c:81:df:c4:e3:83:05:94:f8:
                    cb:7b:58:9e:dc:46:4b:ec:6e:9f:e1:b2:2e:c8:93:
                    37:25:c6:26:8c:fa:90:ee:b3:97:3c:29:37:d4:db:
                    d0:54:5a:41:22:f0:24:e9:dc:c0:46:9b:93:0b:ed:
                    15:28:58:48:8d:ec:e7:b0:bf:66:7d:8c:dc:f7:d8:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:EF:15:BE:21:7D:F6:87:3A:87:84:C3:9D:E3:AA:F7:61:BE:8F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131353a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6115::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:86:a0:cf:17:56:77:d2:cb:d5:09:e2:5f:a8:86:41:9d:a6:
         d0:2c:25:d5:11:ce:e3:9b:2f:5d:e7:e9:b5:4a:f5:25:63:83:
         4d:98:78:f8:df:31:2d:18:94:c7:c6:5c:ab:42:ca:e7:c2:67:
         db:d8:b6:9a:4e:d6:ae:a0:6d:32:ca:8c:bb:d9:a8:aa:a5:14:
         42:77:f9:cf:dd:e6:bf:1a:61:9b:31:b5:01:f2:e9:9d:c8:95:
         66:33:9f:67:30:25:ae:fd:ff:4b:5d:fc:36:a4:1c:90:9e:50:
         1f:5f:0b:26:29:a7:d8:12:0f:2e:15:86:f1:c3:ae:b1:05:b1:
         48:27:f8:c2:cf:fa:1a:fa:d5:1b:e6:b7:cd:94:52:20:4d:5c:
         fa:58:56:ce:7b:fe:01:8a:6a:34:21:80:9f:b7:4f:c6:84:14:
         51:24:6a:79:20:5b:f3:61:d7:00:9a:72:68:7d:fb:d6:36:92:
         13:56:38:07:e1:ba:b8:c1:ad:bc:0d:24:bb:bc:e3:4d:83:94:
         8c:f1:07:18:c1:69:78:5e:0a:ca:fb:92:c8:f6:b3:55:5b:0a:
         21:bc:99:c7:6e:25:b4:e4:9b:a8:61:bd:31:87:25:43:fe:fb:
         f2:5a:c1:1e:99:dd:16:ce:15:0c:85:e7:6d:9e:35:38:11:17:
         a9:4c:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----