Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131623a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          abw4KvuQWzLTEAUbXGy2+u9fw12MY4m7fsW3/JP8el0=
Subject key identifier:   02:E2:D8:2A:03:CC:EB:B1:7E:12:23:24:8E:72:49:47:25:EA:02:97
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2918BA860067C50C88B586A6DC6F0D0C60A0BD34
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131623a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:14 +0000
ROA not before:           Fri 11 Apr 2025 18:27:14 +0000
ROA not after:            Fri 10 Apr 2026 18:32:14 +0000
asID:                     401507
IP address blocks:        2a14:7584:611b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:ba:86:00:67:c5:0c:88:b5:86:a6:dc:6f:0d:0c:60:a0:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:14 2025 GMT
            Not After : Apr 10 18:32:14 2026 GMT
        Subject: CN=02E2D82A03CCEBB17E1223248E72494725EA0297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:50:18:af:66:ea:e2:77:2b:0d:74:98:be:
                    0a:9f:a0:d2:67:07:74:8a:ec:9b:0d:40:0e:43:87:
                    9a:87:3f:f1:39:2f:e2:ff:b3:eb:2d:6c:78:1e:c1:
                    e3:94:70:91:8a:3b:b9:6b:d2:47:43:59:5f:63:4d:
                    d4:fc:d9:6d:24:2c:37:54:f4:37:97:99:1a:b0:7e:
                    d7:e0:f8:ad:15:f6:0c:f6:8c:35:bc:07:67:dd:c4:
                    48:10:e3:58:22:38:78:ed:bc:d6:16:d9:70:92:ec:
                    58:51:ec:88:c6:bc:cd:40:db:fc:5b:ab:f5:33:f3:
                    d2:a5:fd:22:8c:7a:ac:50:4d:1d:02:f8:e5:4a:0c:
                    22:c6:77:d0:21:20:86:25:e3:bc:5a:7b:85:4d:b6:
                    67:14:0d:3b:98:86:bf:19:eb:e2:cc:cb:54:15:9d:
                    0d:04:a6:1f:17:a4:92:47:74:7e:14:81:b8:9d:6c:
                    3a:3e:47:c3:ba:7d:98:08:33:59:1f:3a:8b:04:7a:
                    1f:20:4d:f9:67:36:13:0b:e9:5a:d7:4e:89:bd:bf:
                    f3:86:7b:b9:73:40:ac:f6:65:a2:4c:d8:fe:f2:c3:
                    6e:be:1b:49:65:2d:b8:ac:85:c2:d9:13:62:d1:6e:
                    d0:c0:f6:5a:f2:e7:6d:23:51:6d:de:9a:87:30:ed:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E2:D8:2A:03:CC:EB:B1:7E:12:23:24:8E:72:49:47:25:EA:02:97
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131623a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:611b::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:fa:eb:ad:94:69:5f:0f:ca:09:89:9b:41:ef:6b:76:56:
         c1:ea:9a:af:f3:20:78:f9:dd:76:5b:ab:da:cb:42:d7:fd:e8:
         f8:d5:c6:39:cd:b9:82:20:f8:e3:e4:b8:b3:be:d1:a3:70:fd:
         2b:9a:ac:04:b9:f1:c4:47:24:8d:dd:59:31:1c:59:e0:00:71:
         fb:65:80:f2:ae:e5:a0:29:3a:20:20:89:90:42:61:ea:43:61:
         e2:e7:d1:f1:6c:58:3e:f6:20:0f:bb:cb:f5:da:df:7b:72:59:
         4f:50:a5:0b:52:2d:7c:c9:b0:49:e7:19:2f:9e:e5:fc:e1:8f:
         b5:4c:24:03:4a:95:55:b8:e6:ad:ba:d9:9e:e0:e4:11:3c:48:
         da:40:bb:d8:b3:40:06:a6:16:80:ec:3e:3a:b8:95:82:8d:62:
         61:5d:57:eb:8f:0a:9a:67:d5:5d:76:96:98:2c:e7:7c:bc:67:
         2f:19:fd:8a:4d:27:5c:a1:e1:f3:aa:c1:dc:4c:3f:f7:39:f6:
         22:4e:e0:ca:8b:c1:2d:4a:bf:06:b1:72:55:10:cd:48:fe:58:
         0b:1f:69:cc:20:f5:cc:d3:de:33:a6:b6:1a:50:10:f9:9b:55:
         c4:ff:61:18:a9:ff:e4:41:68:dd:28:19:db:c4:7e:7b:05:0a:
         93:88:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----