Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vSbG5pASpIH6I7jAGrfhPNuPbU7rMSmZJDc3TRzYCwE=
Subject key identifier:   8C:7E:77:DE:3A:EA:9A:E6:03:68:BF:5C:15:68:A6:D7:60:59:2A:1B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1482C228E5524B991465FF50AEBCDB720CCE336F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:59 +0000
ROA not before:           Fri 11 Apr 2025 18:27:59 +0000
ROA not after:            Fri 10 Apr 2026 18:32:59 +0000
asID:                     16909
IP address blocks:        2a14:7584:612a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:c2:28:e5:52:4b:99:14:65:ff:50:ae:bc:db:72:0c:ce:33:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:59 2025 GMT
            Not After : Apr 10 18:32:59 2026 GMT
        Subject: CN=8C7E77DE3AEA9AE60368BF5C1568A6D760592A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:11:f9:ba:d3:4a:26:39:61:70:ea:51:cd:
                    e6:83:93:bd:fc:5f:20:43:02:90:24:b0:9a:9d:17:
                    bf:3c:48:a5:12:b6:c7:11:bd:e3:19:3a:5a:a5:4e:
                    e7:8f:84:97:1f:8b:aa:d2:49:50:af:b6:b8:04:34:
                    34:0d:c8:13:6d:07:51:a7:cf:a7:70:8d:cc:cb:dd:
                    11:07:7b:be:58:82:13:85:e9:65:37:50:12:84:42:
                    05:b7:5d:70:bb:ad:9e:fc:ba:24:97:2b:63:ee:70:
                    63:e7:4d:2b:0f:71:ce:a2:8b:c4:f2:fd:be:5f:e7:
                    42:43:40:92:80:4c:d8:44:7b:85:a9:4c:cf:2f:45:
                    ab:8b:f2:3f:43:28:2c:cf:0d:c2:52:de:17:e4:85:
                    00:86:16:5f:72:7c:df:9f:89:a0:02:b7:b1:66:30:
                    e4:d3:d5:d9:27:41:5f:11:2a:44:30:0e:28:a4:0f:
                    a9:ea:91:42:07:de:c0:9d:8f:17:b0:77:60:1f:5b:
                    75:4f:58:bd:c8:1f:57:f8:60:ed:0e:09:13:15:3a:
                    43:0a:ee:63:f0:30:72:95:ff:a5:5d:f6:72:6a:69:
                    e1:88:39:10:db:24:a1:83:83:3b:e9:f3:2f:70:b3:
                    66:38:e8:91:f7:26:c4:95:d3:48:7d:fe:b3:6f:1c:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:77:DE:3A:EA:9A:E6:03:68:BF:5C:15:68:A6:D7:60:59:2A:1B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:612a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:0d:6b:a2:95:ec:f9:2a:64:b0:df:56:88:98:45:94:59:
         36:bc:52:b5:63:60:99:bb:ce:63:69:4f:55:a2:c4:80:35:f0:
         3b:8a:b2:61:25:33:75:d9:e4:39:2c:d7:de:c6:56:65:5f:4d:
         f1:63:4c:54:7e:13:cc:b4:5a:10:d6:a8:55:4e:c4:42:85:11:
         f8:04:5e:4a:34:53:e4:6d:42:c6:10:16:36:25:9f:d7:fd:43:
         84:bb:eb:6c:d9:c5:1b:13:d7:5f:90:3d:27:cc:0f:3c:d6:9a:
         83:af:6a:22:23:92:06:cb:c1:ba:ef:2e:38:4b:8e:4b:b8:52:
         66:d3:2d:93:9a:2f:e1:f9:9a:5d:32:fa:d9:da:1c:8b:52:77:
         5a:ad:dd:65:34:20:c6:2c:df:2f:56:65:ec:d6:9e:58:25:f6:
         33:ad:fd:60:a8:95:51:f5:a8:c5:a6:d1:d7:32:c2:14:c6:b6:
         47:6a:74:36:fc:06:e9:d3:5f:0f:34:23:e1:5c:29:52:ed:35:
         cf:47:e5:36:07:2f:bf:c2:43:5b:af:df:52:c4:1e:a3:a3:66:
         8b:01:a2:23:4e:6c:84:0d:6a:b1:87:20:b5:ac:3e:a1:b7:5c:
         77:2c:0e:ac:d0:15:f8:98:ea:ac:2f:b3:72:d7:da:02:aa:e5:
         16:c9:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----