Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          iTAsao/Da3BBPl9lFamGDqv9slwDcYfYug46Or/RNPU=
Subject key identifier:   6F:09:C6:80:EC:AF:31:E8:BE:0C:0B:90:29:A6:F2:61:CD:72:4E:BB
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       08408F58DCB00BB7551B2622D2F071CA89DD2866
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:39 +0000
ROA not before:           Fri 11 Apr 2025 18:27:39 +0000
ROA not after:            Fri 10 Apr 2026 18:32:39 +0000
asID:                     16909
IP address blocks:        2a14:7584:6122::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:8f:58:dc:b0:0b:b7:55:1b:26:22:d2:f0:71:ca:89:dd:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:39 2025 GMT
            Not After : Apr 10 18:32:39 2026 GMT
        Subject: CN=6F09C680ECAF31E8BE0C0B9029A6F261CD724EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:52:83:6a:d1:9c:cc:35:83:06:a3:4c:f7:
                    9b:e0:47:c3:f6:30:62:ba:5e:98:b9:05:a2:5e:91:
                    ba:e6:c3:bc:7b:2c:aa:3e:4f:73:d3:f7:cb:9a:54:
                    b6:ca:2a:54:5a:85:fb:4f:3e:6f:9c:47:8f:32:7b:
                    a7:78:62:3e:11:18:1b:03:4d:94:2f:fa:1b:04:9a:
                    35:5d:94:ff:1e:3d:93:10:a6:df:33:9c:e3:de:37:
                    f9:2b:bf:00:65:43:18:1f:33:12:1e:ab:0a:de:d1:
                    87:aa:03:20:36:8b:18:77:c9:55:9f:23:21:b0:69:
                    8f:4e:10:a6:a3:86:2d:0b:bb:5a:b5:85:7c:b0:50:
                    f9:0a:d0:18:a7:96:1a:67:21:a9:3a:41:32:f5:25:
                    33:7c:80:7e:70:59:c2:35:0a:af:5a:a8:de:7f:e8:
                    24:9d:24:3c:59:d7:42:c2:f1:4f:e6:dc:fa:ac:09:
                    d7:8a:43:a5:c7:b1:62:5f:8d:6b:15:32:6b:b6:a0:
                    41:e1:92:f6:2e:41:7f:18:07:08:96:04:9b:04:9c:
                    63:03:d5:7e:39:5f:29:bc:41:56:74:7d:b7:79:bf:
                    18:a8:b8:9b:69:33:ea:62:f4:ca:d8:2e:c8:13:53:
                    af:e4:4d:60:c9:5c:04:bd:62:b0:a3:1a:d1:2e:a3:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:C6:80:EC:AF:31:E8:BE:0C:0B:90:29:A6:F2:61:CD:72:4E:BB
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6122::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:c8:dd:b1:3b:7a:ac:dd:eb:37:90:61:94:c2:fa:2c:75:
         61:6a:5e:dc:d2:3c:11:2b:06:10:8a:91:31:8f:d0:95:a0:45:
         ff:70:ba:81:2f:e9:e3:86:63:c2:30:f2:cb:8f:de:0a:3e:41:
         47:36:71:fb:73:4e:67:06:5c:30:4f:5b:a2:3e:6f:36:b5:fb:
         9a:3f:ab:7b:9c:81:e6:99:47:32:a6:bf:39:9c:06:77:ca:53:
         36:2d:05:c5:7d:d9:71:b6:9b:34:0d:0c:a1:8b:44:2d:ec:9c:
         08:4f:53:89:21:79:af:46:00:e8:a4:eb:bc:3e:5a:02:33:ae:
         41:b1:9c:6b:7c:9e:9f:61:01:8c:37:ad:36:9b:f6:67:87:4e:
         a6:ab:05:1e:2c:cb:06:25:05:d5:22:22:cb:1b:95:a8:dd:23:
         4b:43:da:e2:56:10:a1:f2:cf:92:17:15:f7:ce:f9:72:0e:f3:
         c2:59:cc:43:70:37:c9:20:81:34:8b:86:76:11:a1:a3:4f:f8:
         4d:1f:28:2c:88:ce:53:2c:9a:13:81:62:c9:4e:1e:e8:ad:be:
         f0:e9:ec:00:35:3f:b3:34:18:ca:d0:b7:b1:fd:73:1c:90:49:
         36:ef:05:b7:c8:7c:5f:5d:89:13:f2:86:b8:0c:17:69:19:80:
         60:01:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----