Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          sVYevYDi7gGlsan2b+vEjnlj12Dvrah5tKSoOJiHoHw=
Subject key identifier:   F0:7E:25:52:67:E6:2A:BA:4F:78:5C:6F:B4:34:CD:6D:F3:C7:33:EF
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       619E096F91DAE3836C2311C4589E6CB5350ABA08
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:24 +0000
ROA not before:           Fri 11 Apr 2025 18:28:24 +0000
ROA not after:            Fri 10 Apr 2026 18:33:24 +0000
asID:                     16909
IP address blocks:        2a14:7584:6133::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9e:09:6f:91:da:e3:83:6c:23:11:c4:58:9e:6c:b5:35:0a:ba:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:24 2025 GMT
            Not After : Apr 10 18:33:24 2026 GMT
        Subject: CN=F07E255267E62ABA4F785C6FB434CD6DF3C733EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:e2:be:1f:d1:9d:1d:35:af:45:34:11:71:
                    a6:ab:18:15:68:46:55:d2:f4:e1:26:06:81:64:56:
                    6b:23:5f:a5:4a:f8:15:a6:96:4b:a2:1a:3a:47:ba:
                    2a:e2:8c:7b:f4:a9:ad:da:b3:f4:27:d8:09:37:4f:
                    b2:55:68:a2:af:7c:ce:bd:ce:67:3b:5a:9a:7f:9e:
                    cf:f0:3e:40:12:f5:3b:68:5a:ba:42:c9:5b:4c:e0:
                    52:5e:0e:8f:89:b0:a4:9b:5e:25:e1:02:a1:83:df:
                    d5:4c:38:2c:d3:83:c5:36:fb:d5:c1:86:06:6e:98:
                    e9:6f:e2:f9:5e:d2:59:90:ed:70:23:e5:75:10:72:
                    db:45:e5:e3:b0:44:17:0b:6a:4e:05:4b:22:6e:16:
                    8f:05:9f:d3:c2:6e:bb:a8:6e:6e:ed:fc:cf:eb:77:
                    27:f5:86:2c:41:80:2e:da:9e:38:69:d3:ce:d9:b4:
                    45:f6:ee:33:eb:c5:22:32:7a:2f:9a:f2:ac:e5:71:
                    44:59:37:3c:d2:a1:a4:4e:97:52:43:15:d3:e3:0d:
                    5b:88:14:e6:49:4b:95:bb:57:e0:fa:30:6e:96:46:
                    75:2c:8a:3a:62:4e:39:a7:47:75:2e:1a:e3:f2:e5:
                    eb:d2:fc:99:ff:9c:29:0b:93:24:3f:a2:79:4c:cd:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7E:25:52:67:E6:2A:BA:4F:78:5C:6F:B4:34:CD:6D:F3:C7:33:EF
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6133::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:3f:7a:61:ee:5a:fc:30:e1:75:1c:67:23:64:e5:4a:29:
         3e:df:de:dd:39:42:f1:be:73:c2:5b:fc:80:5f:92:3e:a6:36:
         1c:d2:1b:ef:9d:14:b3:23:70:64:ca:f2:77:5e:fd:23:95:47:
         b5:8b:15:db:dc:a8:4b:c5:a1:33:ef:7b:34:97:9a:6f:3a:b1:
         c0:a0:7d:b6:b8:df:9a:cd:6d:80:69:6c:e7:71:a7:5a:2e:ac:
         f4:4e:51:0b:1b:ae:18:48:10:3c:16:73:31:e5:ef:77:c4:ac:
         e2:16:dc:d1:dd:6c:8f:10:4c:36:d9:a4:84:ad:2a:f6:7a:51:
         e8:8d:c1:0f:a5:87:b6:15:8e:88:83:10:d1:f5:47:33:bb:4f:
         65:06:44:36:99:76:f2:50:98:77:97:f0:00:12:37:18:46:ef:
         92:b3:bb:b4:7b:3b:42:88:b7:f5:fe:05:0b:2e:d1:47:90:3b:
         76:5e:f6:ee:5f:a8:27:91:c6:55:77:a0:3f:53:09:7d:bd:b4:
         e9:4e:d1:7f:81:f7:3b:4b:a6:ca:59:3c:cc:73:fd:fe:dd:5e:
         35:03:a0:10:8d:2e:c3:95:52:97:7e:7e:93:bb:16:c5:cb:3c:
         0b:39:73:ea:f4:f7:99:bb:9a:ea:ca:b5:29:97:2b:16:2d:0a:
         ac:89:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----