Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          yowmo0aM/aVzeAMNBsXpxPgv5qWDeLVDGvur8CteseY=
Subject key identifier:   6D:24:60:E7:C4:9D:C2:33:9B:56:18:9D:77:A3:B7:B2:03:7F:0B:33
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       71E23C3D3FF45BC50F3DCA9232F36FD70F42D577
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:42 +0000
ROA not before:           Fri 11 Apr 2025 18:27:42 +0000
ROA not after:            Fri 10 Apr 2026 18:32:42 +0000
asID:                     16909
IP address blocks:        2a14:7584:6125::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e2:3c:3d:3f:f4:5b:c5:0f:3d:ca:92:32:f3:6f:d7:0f:42:d5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:42 2025 GMT
            Not After : Apr 10 18:32:42 2026 GMT
        Subject: CN=6D2460E7C49DC2339B56189D77A3B7B2037F0B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:4d:10:24:0a:11:55:5c:12:b0:ef:93:b6:
                    99:5e:e9:55:a5:f8:06:69:15:aa:6f:34:dc:fe:87:
                    d1:0f:1e:57:20:40:9f:cf:17:76:78:ef:09:49:76:
                    16:79:39:49:4b:f5:82:eb:85:ff:6e:40:ee:c5:21:
                    b1:c3:47:e4:d8:a4:1a:dc:5c:ab:d0:5a:8c:5c:b0:
                    2e:55:7d:7e:a4:6d:13:ea:fe:8d:90:2f:d8:64:b0:
                    db:b6:ec:e0:3b:1a:6c:23:1c:cf:71:ea:47:78:b8:
                    cd:2c:a1:9b:5e:3b:8b:3e:d4:4b:25:60:ce:14:e1:
                    93:8e:92:80:33:48:99:28:85:62:d5:de:b9:dd:94:
                    24:5c:99:f7:75:d2:f9:38:7f:c0:fb:bb:23:3c:b3:
                    f0:99:8a:58:c9:22:1b:53:97:d5:58:98:f4:47:a6:
                    aa:11:5c:09:2f:29:db:df:89:16:20:dc:5e:7b:84:
                    45:30:8e:c3:f3:27:7a:09:64:33:f0:c6:6f:23:b8:
                    07:c1:13:e7:eb:15:47:ce:94:53:45:41:9d:76:48:
                    ea:6a:51:85:f5:11:6d:df:e9:0c:e6:e8:f5:c4:8d:
                    b7:8e:ac:33:fe:c2:a7:29:56:b7:06:11:3a:f1:4b:
                    84:c0:2a:1f:74:ad:3a:5b:16:a2:7c:59:10:75:c8:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:60:E7:C4:9D:C2:33:9B:56:18:9D:77:A3:B7:B2:03:7F:0B:33
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6125::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:a7:2e:73:9a:29:cd:74:a3:da:5f:df:8b:28:a4:24:4c:
         d7:39:f8:4d:24:c0:8b:84:d1:7c:20:ab:77:f4:b9:8e:be:d2:
         04:d5:34:87:cb:a0:6c:22:1c:ab:5a:07:d9:47:6d:60:d2:ba:
         4b:b1:56:f2:89:db:5f:d6:67:a2:ad:84:52:08:f9:9b:d8:ec:
         e0:56:2d:69:05:21:68:4e:fe:a6:96:23:c4:93:29:9c:9f:0d:
         24:f7:24:b3:5e:4a:66:e8:b0:7c:78:14:9a:48:9b:88:69:59:
         44:c2:d1:f1:ac:7e:ef:39:e7:c6:fe:42:a8:9b:c4:5c:81:00:
         d6:81:54:25:5d:51:43:1d:b1:fa:41:cc:63:46:c4:58:e5:37:
         dd:e6:45:42:3e:5a:a5:55:42:ea:f3:2e:44:66:20:37:11:3e:
         56:7a:04:89:a5:59:d8:dc:c4:f4:76:c8:45:6c:66:b1:95:e0:
         c7:59:6a:14:cb:ae:fe:85:21:5e:c7:bd:ad:4b:bd:76:6a:1a:
         41:ec:9c:be:37:9e:ba:9f:8e:29:a2:75:4d:13:e8:f4:04:6e:
         9e:b1:98:f4:36:16:da:eb:22:b7:b9:7d:2f:cc:f7:2b:82:8a:
         07:1f:ee:68:b6:53:d7:e2:34:fd:37:c1:37:26:d4:bf:8b:73:
         f5:56:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----