Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          l1k8SWOwIMp19ODeqE7r0cKU+5HH4dDp61fcWzFUfRk=
Subject key identifier:   FF:29:6B:04:74:17:34:B9:42:89:5E:CE:5A:13:A6:04:83:0C:CB:EB
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6218B4B3BC0C9B2E80B90779CD4583D1BC1540F4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:03 +0000
ROA not before:           Fri 11 Apr 2025 18:28:03 +0000
ROA not after:            Fri 10 Apr 2026 18:33:03 +0000
asID:                     16909
IP address blocks:        2a14:7584:612f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:18:b4:b3:bc:0c:9b:2e:80:b9:07:79:cd:45:83:d1:bc:15:40:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:03 2025 GMT
            Not After : Apr 10 18:33:03 2026 GMT
        Subject: CN=FF296B04741734B942895ECE5A13A604830CCBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:a4:fb:2a:b8:bd:d5:80:44:e7:22:6a:85:
                    46:a9:b2:30:d0:1b:d2:6f:ff:d2:4a:8a:46:7b:9f:
                    15:fb:d1:7f:a7:0b:56:e7:6e:f9:44:f6:61:c7:39:
                    7a:0d:99:e8:89:90:90:21:da:05:5a:cc:7c:9e:a4:
                    46:40:2c:d8:3d:80:8d:ed:d8:fc:58:42:41:87:84:
                    00:57:af:30:cb:32:35:50:26:f3:f4:c1:33:59:73:
                    29:64:8a:4c:00:15:55:c8:67:7c:44:22:b4:2c:e0:
                    c2:b6:c0:8c:03:fc:4b:ab:6f:b4:0a:8d:f4:0b:10:
                    bc:c1:de:8e:f6:a5:f2:42:69:4a:2a:fc:49:c3:e6:
                    4f:6c:6e:97:e5:13:24:4a:cf:50:ca:5a:b6:6a:8c:
                    fc:ff:a3:82:14:f4:03:f8:32:96:aa:d8:f8:58:10:
                    bb:a0:56:45:36:6f:fe:9d:f7:c1:3e:ab:5e:45:6d:
                    c4:7e:2f:75:bc:2a:f0:6a:6d:27:c3:95:b2:35:dd:
                    4e:e9:6a:e5:01:b9:32:3f:76:d6:92:53:d1:74:20:
                    91:f9:86:d6:1e:7e:92:d7:df:04:65:e3:db:71:79:
                    20:65:f5:73:7a:85:27:21:e2:65:07:24:25:eb:fc:
                    63:d7:82:8e:49:b2:7f:88:ec:7c:4c:8f:76:52:25:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:29:6B:04:74:17:34:B9:42:89:5E:CE:5A:13:A6:04:83:0C:CB:EB
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:612f::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:25:1a:49:a4:07:34:fa:e5:05:0f:1d:87:18:e4:db:32:
         b6:55:5c:c3:43:04:b5:59:1a:7c:be:61:ab:c5:c5:49:21:53:
         18:49:a5:99:b3:58:ad:ba:b6:f0:1b:1c:3d:16:f7:99:76:7c:
         ba:49:ba:11:04:d2:41:22:8d:60:8b:e7:e9:54:c2:1a:22:f9:
         09:df:25:13:17:52:94:68:bf:79:cc:cd:9d:f9:ea:97:fc:09:
         24:db:a8:93:c7:93:50:34:cb:c4:32:bc:91:2b:c9:25:10:c3:
         33:c7:6e:ee:6d:e5:fd:14:6f:ae:3c:9d:7b:b8:e1:37:76:f2:
         fe:eb:ec:0c:be:4a:8d:69:0c:7f:28:af:1f:25:de:12:8a:18:
         d8:a3:9e:50:3f:32:89:30:7d:da:f7:d8:5b:9f:38:6b:df:04:
         66:e7:01:f0:98:ae:78:d6:19:1d:e3:4e:71:50:88:e2:de:c2:
         59:77:8c:8e:dd:f3:63:7e:b8:c8:b1:1f:c2:2d:99:94:cb:91:
         d0:79:78:62:db:f1:4b:a1:96:e8:d8:18:1a:74:0f:0f:3f:5f:
         3b:3a:1f:06:ad:40:7f:ad:85:9c:bb:a9:50:00:c8:bf:42:ff:
         25:17:d7:9a:a5:09:9b:6c:de:d5:27:00:c2:aa:a9:64:19:51:
         00:f2:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----