Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131393a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Snc6UsbM+EZb5OcZoCfYUvKyklBFngh6ui0oq6H6paw=
Subject key identifier:   E8:AC:1F:98:70:05:75:B9:E9:94:32:17:6F:92:A8:72:65:4B:02:ED
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3A34A6B60F8EAE1D52A5275D248DFD5158F0E286
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131393a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:12 +0000
ROA not before:           Fri 11 Apr 2025 18:27:12 +0000
ROA not after:            Fri 10 Apr 2026 18:32:12 +0000
asID:                     401507
IP address blocks:        2a14:7584:6119::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:34:a6:b6:0f:8e:ae:1d:52:a5:27:5d:24:8d:fd:51:58:f0:e2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:12 2025 GMT
            Not After : Apr 10 18:32:12 2026 GMT
        Subject: CN=E8AC1F98700575B9E99432176F92A872654B02ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:43:20:61:75:11:b1:a5:2e:d6:14:d6:8e:
                    da:40:0d:86:db:dd:b9:ae:4c:48:b3:d7:34:a1:d3:
                    69:37:08:83:85:3b:b8:76:b6:f1:ac:6e:61:ce:f7:
                    63:80:9c:49:c5:ef:c6:cb:3f:f8:80:76:1f:91:53:
                    5d:12:5e:95:ff:95:88:57:71:cf:af:c4:71:7b:e1:
                    86:28:28:fe:27:fc:81:3c:93:ef:c0:dd:2e:b2:21:
                    73:5b:71:6b:a8:18:99:31:1a:30:6a:93:04:c4:28:
                    ca:c4:02:55:24:33:1e:c9:6e:0c:fa:26:11:34:84:
                    53:08:38:44:c0:08:ce:78:e0:54:6a:0d:20:32:7a:
                    09:39:1f:03:85:de:fe:52:5a:d7:69:f6:8e:ab:de:
                    f5:4b:1f:1c:65:b1:ff:bc:ab:67:63:28:28:23:7e:
                    2a:64:a2:ba:08:6d:9a:ed:69:a6:f8:dd:cb:37:96:
                    bc:93:fd:9f:c4:b3:dc:03:92:92:71:31:0a:6a:54:
                    24:1f:9b:e0:c6:d6:60:fd:f2:e6:05:94:a6:67:6b:
                    9d:07:10:18:3b:7c:f0:90:7e:9a:6a:41:4a:71:37:
                    bc:53:31:45:80:db:55:71:3b:49:65:20:95:28:6e:
                    32:60:c8:90:93:6b:ed:5d:d0:bf:54:8e:a1:6c:66:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:1F:98:70:05:75:B9:E9:94:32:17:6F:92:A8:72:65:4B:02:ED
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131393a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6119::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:a6:3c:30:60:6f:b2:f4:43:43:a4:d0:b0:fa:ee:9d:8f:
         90:ef:b3:4d:9d:01:5e:d4:24:ba:20:5e:fa:13:42:4f:8b:42:
         5c:33:1f:66:03:fb:f6:e3:58:09:87:e8:4f:16:2d:59:4e:5a:
         11:41:00:36:c6:b8:fe:d4:aa:3c:77:7f:2c:af:d5:4a:88:18:
         0e:d5:b0:4e:a8:06:85:fc:d9:97:9b:db:ec:4a:01:ee:97:15:
         29:19:3b:b4:63:96:f7:87:98:5d:33:ba:d9:5e:25:76:0a:ce:
         79:e7:aa:db:27:df:91:43:82:ec:95:d6:11:19:f7:16:c0:2e:
         66:e4:74:12:90:89:1a:dc:13:8f:02:07:54:8e:20:ff:84:20:
         29:9c:60:db:f1:79:57:12:ac:48:51:2c:e5:b6:1d:0e:fe:08:
         62:7b:77:29:e4:55:a1:01:0a:b4:db:4f:71:d4:35:c9:f9:70:
         6e:24:88:36:76:76:74:5e:d6:c3:f4:75:4f:13:20:01:7d:5e:
         a1:2a:e0:77:24:4b:30:7c:b1:bf:20:90:bb:b9:51:cd:d3:cd:
         38:a6:08:e4:da:29:ce:09:4a:c0:a0:07:f3:7d:da:e9:4e:e8:
         db:c1:32:a3:31:35:1e:48:24:db:36:2f:3f:d3:f3:60:5c:6b:
         a4:c7:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----