Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          v9KrR8VethU+Q2mKRDFqGlEbfL3zIEuF/xWpCWMIBq8=
Subject key identifier:   D9:80:27:1A:D5:9E:79:63:EA:A9:DA:6E:96:88:FB:81:8A:3F:FB:7D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0937AE1E00C21DC7205E0608B5173753DD5D16A5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:07 +0000
ROA not before:           Fri 11 Apr 2025 18:29:07 +0000
ROA not after:            Fri 10 Apr 2026 18:34:07 +0000
asID:                     16909
IP address blocks:        2a14:7584:613a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:ae:1e:00:c2:1d:c7:20:5e:06:08:b5:17:37:53:dd:5d:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:07 2025 GMT
            Not After : Apr 10 18:34:07 2026 GMT
        Subject: CN=D980271AD59E7963EAA9DA6E9688FB818A3FFB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:64:de:f6:18:b5:bf:0f:f1:63:5a:54:d1:
                    5e:65:b4:10:3a:40:d8:62:c7:57:ad:39:7c:fd:5d:
                    5c:1c:2f:67:c8:46:7c:fb:6b:f0:34:e6:11:79:a5:
                    5f:91:e1:fd:fa:0f:fb:16:48:0d:49:9f:32:da:3e:
                    88:ac:ba:03:33:05:0d:6e:42:93:f3:b1:c4:37:68:
                    fb:b4:f2:b7:b7:ed:8c:80:6b:a2:88:4d:44:28:d3:
                    dc:a4:f4:7d:96:c6:e5:87:dd:5a:79:e0:bb:7c:f0:
                    26:5c:8a:62:49:2b:49:8f:9b:85:f7:9c:64:f9:23:
                    d8:48:16:8b:86:50:95:1a:34:c9:58:09:35:90:0e:
                    fe:19:7a:11:42:ba:3e:e8:5f:52:ae:99:9b:16:eb:
                    62:cc:db:6a:26:be:81:21:af:bd:c3:5b:84:38:14:
                    9e:33:c9:08:9c:3f:b3:b5:42:1a:4a:17:1b:70:cb:
                    de:26:f8:07:f2:49:73:bd:93:55:44:22:a3:cf:06:
                    5a:2f:db:0d:e2:ec:68:bf:99:ce:47:3d:2d:e2:fb:
                    7e:29:13:3e:c7:2b:23:5f:18:56:56:76:bf:c1:e9:
                    75:c4:b2:33:57:9a:bb:b1:b7:b4:f3:87:9c:3a:e8:
                    99:40:3a:9b:9d:db:66:fc:be:f7:68:1a:27:39:27:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:27:1A:D5:9E:79:63:EA:A9:DA:6E:96:88:FB:81:8A:3F:FB:7D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:613a::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:53:01:46:a6:e2:2d:0e:93:d6:18:1d:b3:bc:8c:30:f8:
         53:b3:0e:87:68:10:ea:1f:ec:f0:b4:cd:bb:12:e7:1b:d1:a5:
         78:75:fc:93:7f:21:70:0d:40:fc:da:c7:fb:b5:70:0d:90:55:
         0a:ad:bf:6b:5e:ff:41:d9:4b:33:3a:8e:5a:de:43:fe:2f:ca:
         32:fb:f2:72:c9:a6:2a:d2:d0:1a:a6:30:1d:59:15:b4:0f:3f:
         f8:03:f7:0d:c3:42:a9:81:e7:04:92:80:92:35:d7:08:72:18:
         07:9e:ec:d2:42:74:d9:57:3e:21:c0:88:eb:a1:4e:bf:98:7a:
         5d:4d:40:d9:d7:76:1f:0d:38:88:eb:aa:5e:ec:6e:df:9d:86:
         3b:68:21:fd:22:9b:8f:10:d1:23:98:f7:d6:35:52:c1:65:0c:
         66:da:c1:0f:c8:18:2c:9a:31:61:91:ed:a6:b9:27:05:8e:5d:
         c5:ac:2a:d0:06:8a:d6:96:ae:39:48:30:3c:1c:53:e8:55:97:
         e7:b4:da:05:72:ed:d3:98:95:63:ab:d3:2d:8d:f7:fd:71:37:
         dd:cf:5b:ef:07:7a:d4:3f:f8:05:16:fc:57:af:dd:dc:a1:17:
         26:af:de:19:56:83:95:41:25:e1:71:d9:b6:f0:5c:47:35:99:
         0e:9e:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----