Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          WyS9xlFhfbuTwOIBvc/2A+94Gk9pTkWf3mxLYfF4Pl8=
Subject key identifier:   8A:18:67:96:B1:ED:FC:96:2F:A7:55:20:0F:90:0A:81:B8:35:29:A3
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       51FB4586E2B321706368293BFF72618134C93127
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:59 +0000
ROA not before:           Fri 11 Apr 2025 18:27:59 +0000
ROA not after:            Fri 10 Apr 2026 18:32:59 +0000
asID:                     16909
IP address blocks:        2a14:7584:6129::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fb:45:86:e2:b3:21:70:63:68:29:3b:ff:72:61:81:34:c9:31:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:59 2025 GMT
            Not After : Apr 10 18:32:59 2026 GMT
        Subject: CN=8A186796B1EDFC962FA755200F900A81B83529A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:72:d7:9f:c2:5b:aa:d3:2f:ee:75:c1:e5:
                    22:f9:0a:bf:4c:6b:f2:db:6a:66:50:78:3a:9d:3e:
                    2a:30:d1:02:e2:30:65:7c:19:8d:7e:97:53:66:aa:
                    76:f7:09:8b:45:c6:a3:d1:74:e1:bb:5e:77:ab:6b:
                    ae:0f:2a:35:9b:61:b2:f0:59:2e:3e:9c:9a:64:0a:
                    56:98:d0:c9:49:e0:26:af:72:04:1a:3f:67:52:5b:
                    1d:13:58:03:f4:45:d2:a4:bb:a5:5c:9e:fc:aa:7e:
                    cd:9b:b3:77:4a:5b:5a:ac:2f:46:c8:4c:ff:ef:a9:
                    07:b1:21:9f:61:d3:75:9e:ef:72:39:10:1c:37:82:
                    e2:ca:d7:25:66:07:78:79:72:d3:48:f1:e5:f0:a5:
                    03:c5:df:5b:0d:1c:3d:ee:8a:3e:04:94:cf:83:ed:
                    70:9d:6d:0a:e7:9e:8c:5e:41:7c:5e:fe:af:b3:20:
                    5e:d2:a9:81:d6:1e:b5:24:89:d0:cb:01:27:13:c9:
                    b9:7b:72:dc:72:36:f3:7d:e1:dc:68:96:f2:a9:e1:
                    4a:4b:b9:2f:96:94:22:32:80:a7:bc:f1:bd:bb:46:
                    3b:d3:05:e9:94:e2:c1:3c:b9:24:89:8f:94:fa:22:
                    2a:6e:6a:6c:d8:a2:b6:ce:fa:ed:61:64:1a:b2:af:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:67:96:B1:ED:FC:96:2F:A7:55:20:0F:90:0A:81:B8:35:29:A3
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6129::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:fc:aa:ae:df:b7:68:32:f6:01:8a:ac:27:65:b1:84:da:
         c0:85:46:b6:60:37:4d:78:a2:9f:43:c9:b5:ae:04:ef:1f:e9:
         78:f0:b9:17:fa:c0:cd:6f:d8:e9:ba:2a:3d:fb:7d:3d:14:d7:
         c9:ea:93:39:f9:5a:ab:cb:4a:61:df:52:46:18:f0:c1:2e:03:
         39:6c:3b:30:b5:2a:ba:41:31:29:cf:2a:2a:42:a6:d4:90:55:
         8e:18:80:cc:ed:bd:29:eb:e3:70:d2:6f:04:f7:47:be:36:55:
         3b:c9:12:e2:16:ea:fa:57:3d:89:a6:ec:61:ea:9c:b9:9a:24:
         a7:af:00:b7:60:75:3d:7e:9e:17:ea:82:33:75:2e:ed:fd:eb:
         9f:88:ae:41:a4:c2:36:b1:45:fb:6f:6e:cd:a9:56:2d:54:d4:
         e7:5d:45:ba:d1:df:45:fd:90:45:a0:a2:dd:00:88:d5:14:e6:
         3f:62:b1:67:e2:db:0f:a1:42:f7:98:82:aa:bb:52:6a:f8:b3:
         87:63:00:9e:c5:af:a6:47:cf:3a:09:cb:a8:41:8a:11:23:00:
         a8:81:0d:08:a6:b8:19:c1:58:7d:10:32:b0:eb:b7:ed:e0:91:
         0b:d7:87:51:0e:ab:4c:1f:e2:3d:e4:43:b4:c7:37:88:29:d7:
         a5:26:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----