Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5tHJ4nWNOGwBm5HNp+VjGUaVzCDCm49ThZAn4jTy47U=
Subject key identifier:   FC:FC:69:7F:20:91:70:FF:18:42:3D:E8:1B:80:79:D5:18:11:FE:33
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       33B127034AB1BDC7755978203074CD0E64B3ED7F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:27 +0000
ROA not before:           Fri 11 Apr 2025 18:28:27 +0000
ROA not after:            Fri 10 Apr 2026 18:33:27 +0000
asID:                     16909
IP address blocks:        2a14:7584:6137::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b1:27:03:4a:b1:bd:c7:75:59:78:20:30:74:cd:0e:64:b3:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:27 2025 GMT
            Not After : Apr 10 18:33:27 2026 GMT
        Subject: CN=FCFC697F209170FF18423DE81B8079D51811FE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:4e:9f:52:eb:45:e9:5d:d3:62:70:99:0d:
                    d7:cd:6a:4e:42:2a:28:b8:c5:27:7a:da:64:c4:03:
                    9c:a9:48:a6:30:33:4d:38:13:e0:23:dd:90:81:1b:
                    71:87:3e:d6:ab:24:5f:3f:3b:15:15:94:1a:e4:ab:
                    79:ae:79:ef:41:5c:83:be:0c:7b:c5:75:cd:1d:1d:
                    6a:27:5c:60:93:e9:c8:ee:38:c0:3b:53:89:ae:4e:
                    9f:7c:d5:52:8c:c9:ba:d1:58:e9:f6:35:e5:14:9e:
                    0b:5c:81:70:48:5c:a6:4a:38:db:f1:46:5c:d0:c4:
                    f2:e2:0e:cd:b9:29:1a:5b:8b:99:f7:52:75:75:47:
                    49:9e:1d:d7:50:c7:02:a9:fd:aa:e6:90:c3:bd:36:
                    b3:7c:21:a3:60:36:7a:1f:fd:7f:37:f5:ba:2d:70:
                    93:28:9a:49:9a:81:e9:4c:f8:2c:43:44:6d:0d:75:
                    d4:4c:47:e6:b3:95:3e:28:e1:25:44:48:b5:d2:c4:
                    ff:09:31:dd:78:e9:cc:99:da:88:f7:3e:0a:7a:89:
                    80:20:f0:86:bf:0e:7d:d7:42:c1:24:57:b0:68:57:
                    e4:cb:61:1b:4b:c9:c0:f5:27:4d:e0:cb:8b:3c:9e:
                    97:a5:cb:59:42:97:32:4d:21:63:36:a7:a9:a0:14:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:69:7F:20:91:70:FF:18:42:3D:E8:1B:80:79:D5:18:11:FE:33
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6137::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:70:10:b9:9b:ec:d0:82:2b:b1:85:d0:ab:e9:fa:ce:7c:65:
         e6:d7:3f:40:d1:6f:70:07:15:1d:b7:fa:28:9f:07:74:8a:66:
         b6:21:9f:e4:f4:8a:2d:3b:d7:39:ba:d4:2b:3d:f9:74:11:0e:
         71:ff:a4:03:01:1a:7d:7d:85:de:dc:62:78:98:05:34:b2:f8:
         6e:f4:95:6d:e7:4a:31:1e:67:a1:35:0b:5d:12:57:30:23:17:
         08:e7:44:6c:83:d5:38:67:7f:08:7e:87:6f:a7:1b:5b:f3:a5:
         56:91:aa:9f:86:01:09:58:94:37:f8:a0:26:db:57:82:10:ed:
         ea:d8:08:59:2a:da:90:d8:9c:a4:48:bc:08:e4:b2:9c:8a:66:
         53:c2:d3:94:9e:d4:da:40:d9:84:7a:e5:06:52:f7:00:18:8c:
         e2:8b:8f:35:5d:ae:e4:d9:fd:f2:93:48:11:c4:5f:0a:9e:86:
         3c:7d:2a:c1:ff:26:ae:c5:59:0b:a1:54:53:7c:2e:7b:04:a7:
         6e:90:18:da:1a:99:16:4c:ae:c9:21:a1:5b:f7:bc:9f:52:99:
         df:9f:e9:e9:96:d4:6a:2f:2c:b6:9c:78:66:3d:45:f6:f7:1b:
         af:15:57:7b:31:61:88:9e:28:e1:07:91:b0:8c:71:d0:d3:93:
         c7:12:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----