Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          NVdPPmsfn0VKb6kllsKLxjdA5EGmlAhQzCGGIw+AdB4=
Subject key identifier:   D8:95:F6:BF:6B:24:B0:D8:A5:7E:CE:60:A4:DD:27:5C:C4:4C:F1:54
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2C5458646DE7281E5A4F2DA23DDD77DD853EF771
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:24 +0000
ROA not before:           Fri 11 Apr 2025 18:28:24 +0000
ROA not after:            Fri 10 Apr 2026 18:33:24 +0000
asID:                     16909
IP address blocks:        2a14:7584:6132::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:58:64:6d:e7:28:1e:5a:4f:2d:a2:3d:dd:77:dd:85:3e:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:24 2025 GMT
            Not After : Apr 10 18:33:24 2026 GMT
        Subject: CN=D895F6BF6B24B0D8A57ECE60A4DD275CC44CF154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:18:9f:2c:26:86:b2:a0:c4:60:34:46:4f:
                    9a:a6:bb:8c:cc:a4:8b:75:b3:73:d9:55:69:f5:06:
                    f9:c4:da:32:aa:58:9d:83:8c:d6:7a:3a:17:cc:66:
                    da:44:6f:37:75:95:98:e7:4b:5a:e4:5f:8d:d0:c9:
                    19:85:76:86:79:19:d5:8a:39:bd:f9:4b:f4:58:45:
                    da:54:31:95:d4:d4:48:3f:6b:3a:dc:a5:7b:39:55:
                    81:4c:32:40:5f:da:74:25:bf:b8:f4:45:7d:53:e9:
                    60:cb:c2:9e:b3:08:06:ba:2f:d6:8c:50:49:fb:23:
                    c2:2d:68:d1:b0:18:05:aa:ff:69:06:35:38:a4:be:
                    00:9e:76:7b:1d:13:c1:1f:8a:b6:7a:5d:09:4c:71:
                    2a:d8:e5:04:80:6b:85:b1:c2:ef:ac:12:10:99:1f:
                    78:da:dc:1e:db:59:2d:eb:3b:32:5b:d8:7a:c1:7c:
                    72:2b:cf:3a:19:2a:87:08:cb:a6:c2:95:ee:23:a7:
                    7c:59:03:bd:3d:a9:17:c2:c5:d0:68:2b:8f:58:cc:
                    7c:6e:60:6e:f0:64:70:db:6c:73:52:5d:2f:b1:52:
                    25:6a:66:ac:7e:6b:ab:d7:a7:99:ad:61:5c:3c:f0:
                    99:5d:04:f1:99:3b:75:ff:ae:b1:e0:71:16:37:d1:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:F6:BF:6B:24:B0:D8:A5:7E:CE:60:A4:DD:27:5C:C4:4C:F1:54
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6132::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:a3:1d:53:54:ce:b0:67:a7:f2:dd:9f:d8:54:12:22:ae:
         65:93:33:6c:80:47:4b:6c:3f:b9:1c:38:47:a8:a7:0a:a1:5d:
         a7:d7:ee:b6:30:5a:df:4e:d2:f5:23:48:05:41:52:42:04:55:
         3c:18:4f:84:41:8d:d8:28:be:e7:80:39:e2:1e:de:3f:b3:9b:
         9b:69:e6:5f:fa:2f:a4:0b:88:74:00:bc:10:3a:0a:14:e4:73:
         80:40:b5:e8:66:0b:fe:c2:0b:8e:ab:62:4f:7e:b6:2d:87:21:
         f5:42:c6:d6:c0:d9:8d:f4:c8:0a:d1:69:8c:24:ba:02:2f:e2:
         71:37:3d:2b:a5:33:4b:f2:2e:65:99:0b:40:7e:e5:45:03:cf:
         3d:42:c0:c7:70:2b:e2:70:86:11:af:27:01:ad:d2:54:65:7e:
         99:71:01:fe:bd:98:d9:c5:55:72:94:66:60:35:65:05:4b:e6:
         79:df:e5:aa:b2:02:eb:ce:b6:76:05:1d:48:2b:3a:8c:ff:db:
         7a:2c:7e:05:27:43:0b:01:b5:22:78:5b:f0:15:ec:41:60:4d:
         08:01:60:67:bc:27:d7:cc:85:19:c3:6a:36:8f:5c:11:ae:7c:
         6b:63:88:d2:c4:1e:99:bd:db:4a:fe:84:f0:e1:75:4b:d5:65:
         7b:04:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----