Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          bHnb9QZC8K/XRoBJ/0SG+pVsVmQgdcOgiPFVpt//6q4=
Subject key identifier:   10:AB:E9:0E:36:95:FD:DC:DB:A1:85:D5:52:BD:B6:12:B7:FB:9E:D7
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6959564EA4B8F5DA1C431285CDEEEC6F01DE0C7E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:02 +0000
ROA not before:           Fri 11 Apr 2025 18:28:02 +0000
ROA not after:            Fri 10 Apr 2026 18:33:02 +0000
asID:                     16909
IP address blocks:        2a14:7584:612e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:56:4e:a4:b8:f5:da:1c:43:12:85:cd:ee:ec:6f:01:de:0c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:02 2025 GMT
            Not After : Apr 10 18:33:02 2026 GMT
        Subject: CN=10ABE90E3695FDDCDBA185D552BDB612B7FB9ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:13:76:be:6a:16:e6:f0:b2:89:1f:c4:73:
                    27:27:71:19:69:68:2b:7d:0b:d9:b0:ea:98:23:36:
                    59:64:1c:ab:7f:7a:3a:12:e2:e5:0b:e6:04:8d:d2:
                    50:9c:57:42:7f:a8:e8:33:ea:ee:24:61:5d:1a:06:
                    4c:00:2a:5b:8a:d8:f3:e5:6c:9a:42:57:fa:97:8f:
                    0f:ad:0d:61:3f:f2:10:97:07:f3:8c:8b:e1:d0:1d:
                    db:97:c2:ed:c9:50:38:80:9e:ec:42:44:05:5a:db:
                    1a:67:f1:cd:84:62:64:d7:1c:38:a3:f4:11:dd:c1:
                    17:a8:14:1b:21:8c:22:65:e8:58:a2:21:a6:fc:42:
                    95:19:91:eb:47:f3:53:83:62:ce:a6:f9:dd:e0:2c:
                    85:28:12:62:b3:79:7d:40:b5:a4:d6:b2:cc:ed:31:
                    f4:1c:9f:df:0d:fa:71:84:2a:70:a6:7a:4d:c2:15:
                    dc:53:85:6d:f8:eb:8a:47:f4:21:32:32:7c:f1:d1:
                    fd:18:e7:8e:01:44:55:4e:ce:a2:35:3c:1c:87:31:
                    71:ad:08:5f:75:50:3f:c4:2f:b2:b7:d6:03:11:6a:
                    e5:2f:49:59:17:ed:68:b1:44:c7:72:54:00:28:06:
                    14:59:ac:fc:90:04:5b:9d:b4:6a:36:82:6d:61:c8:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:E9:0E:36:95:FD:DC:DB:A1:85:D5:52:BD:B6:12:B7:FB:9E:D7
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:612e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:6b:97:59:9d:27:a3:46:72:a3:5e:61:72:7a:1b:94:7e:
         e8:8a:3e:d1:66:56:90:97:76:af:85:91:0a:60:10:a6:03:5a:
         18:06:c7:75:03:1c:69:c7:4f:6f:25:a1:1a:25:13:65:e4:d1:
         ac:47:62:b9:9b:e4:31:33:ed:26:26:0b:18:2d:cb:bd:4d:f9:
         fd:fb:fc:1e:3b:7b:fa:e5:21:eb:60:f3:5a:40:b0:43:45:11:
         1d:04:50:16:64:bf:3a:b8:ed:7a:75:bb:08:ae:2a:d1:8a:02:
         b2:c4:ad:27:d2:db:39:d5:99:b2:b4:02:fe:6e:30:c7:8b:24:
         da:af:77:b5:5b:38:7f:97:7e:c8:32:3c:a4:4f:fa:c7:99:20:
         c6:53:e0:f4:09:6c:bc:0f:2d:ac:6f:74:4b:73:7d:8c:35:70:
         c7:19:73:69:c7:e8:b0:dc:04:b8:a4:52:eb:a9:f3:6d:1b:ee:
         72:66:99:67:a7:78:12:6b:93:c9:0c:2c:47:47:67:8e:34:9b:
         87:43:c8:b7:fb:5c:24:94:69:bd:ae:9d:2f:55:09:cf:29:d4:
         3c:1f:32:4f:84:2e:b1:54:e4:a7:31:2a:7d:2d:a3:49:85:d9:
         1b:7c:f9:d7:07:45:f1:a8:36:d0:36:80:93:09:18:eb:6e:6e:
         86:1a:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----