Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Uq/YqLbNgk4dEk+7Z8l1K/1MNrm2OqTveQ2aIfMU908=
Subject key identifier:   64:BA:6E:F9:F1:6B:E1:12:27:11:0A:98:1B:A7:2A:59:37:72:A7:B8
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0A1D496E3231200CCFEEAADA7A97938BBF444B30
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:01 +0000
ROA not before:           Fri 11 Apr 2025 18:28:01 +0000
ROA not after:            Fri 10 Apr 2026 18:33:01 +0000
asID:                     16909
IP address blocks:        2a14:7584:612c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1d:49:6e:32:31:20:0c:cf:ee:aa:da:7a:97:93:8b:bf:44:4b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:01 2025 GMT
            Not After : Apr 10 18:33:01 2026 GMT
        Subject: CN=64BA6EF9F16BE11227110A981BA72A593772A7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:8c:43:e0:78:a0:04:dc:cb:6a:05:d9:6a:
                    7c:9f:ab:71:42:96:ad:2f:57:24:d0:a7:6f:76:eb:
                    5d:d5:59:8f:ab:74:fb:df:e2:a7:d1:6c:47:63:b5:
                    87:27:93:22:ed:e4:c1:98:30:36:2a:35:a4:c7:5c:
                    3f:08:7c:99:1f:43:3e:40:ec:d9:be:82:74:44:ed:
                    db:93:c6:aa:bc:e3:21:ee:2b:02:99:80:79:2f:7c:
                    bf:1b:ac:36:ac:54:d0:a2:62:a6:88:14:58:fa:4a:
                    86:5e:0f:0c:48:96:29:9e:16:c0:58:24:52:92:f9:
                    7f:0e:a4:5d:78:d7:fe:15:1b:88:f9:a5:61:aa:f3:
                    fc:9c:16:dd:24:21:18:4a:9b:14:81:6a:91:15:5a:
                    fb:e8:ee:9f:af:9c:f1:0a:ca:3c:c9:50:3d:b8:e7:
                    71:23:75:ff:7f:ed:73:38:fa:6b:16:a8:34:05:b1:
                    62:29:15:7d:b2:4b:1f:69:0f:d8:bc:89:94:e1:4d:
                    02:4c:42:4b:b5:e2:3f:42:49:97:4c:d8:6d:2f:d2:
                    44:11:6b:8b:bb:5c:a5:b1:a4:2e:fd:3b:ba:37:03:
                    54:69:92:e9:40:e4:2a:4b:53:2a:ca:7d:94:60:a7:
                    c9:ff:1a:cd:3b:d8:69:cb:2c:6d:86:06:5a:13:0d:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:6E:F9:F1:6B:E1:12:27:11:0A:98:1B:A7:2A:59:37:72:A7:B8
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:612c::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:ab:d0:da:99:a5:ac:cb:7a:65:84:62:36:50:d9:80:05:
         14:96:6a:50:2d:45:21:9f:5e:84:1f:29:26:89:9a:a8:8b:92:
         ca:17:d7:7a:f3:de:e3:0a:b8:a3:85:c3:ae:54:1f:d9:8e:4c:
         4e:59:7b:64:a9:9d:d5:5a:8a:8a:a3:9f:0a:7d:bb:c7:e8:4f:
         58:c6:9d:f7:b8:a3:a9:25:b3:c8:06:74:ac:b0:d3:28:f5:75:
         74:bd:32:92:11:33:c7:98:69:b4:39:28:33:c0:26:30:02:64:
         08:a8:89:c0:0c:55:7c:7c:e4:8c:e3:6b:9c:12:e0:eb:52:9b:
         5b:19:65:18:25:6a:09:9a:a7:39:54:40:b9:20:a7:9f:d2:d2:
         87:88:68:28:30:7f:50:34:4a:34:1b:b4:2d:0b:7a:26:a3:ff:
         bc:05:83:26:de:b2:1c:e5:f6:a4:67:81:a6:d6:70:c1:06:1a:
         61:c2:41:a9:88:b7:8e:93:53:3e:a3:0f:cc:cb:99:45:da:8f:
         5e:c1:1e:bb:9d:c2:48:77:a9:5a:9b:57:04:c9:56:ab:f6:ea:
         24:bd:fa:91:86:30:ec:1a:04:85:4f:ba:90:4c:7b:4a:76:c4:
         dc:e8:2b:c2:2c:a4:f2:50:52:f5:9d:5c:d5:18:fa:d7:a3:df:
         83:62:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----