Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          bnDkyO5N8Lg1Pd5ur+u1mxtkY5XtZhYs70yvRImT0uA=
Subject key identifier:   74:AC:3F:89:09:DE:20:8F:B1:84:CE:13:9A:C1:1E:6B:2D:BE:B0:71
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0B71E004A2F36A2114BD15A124F949D9AF241606
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:09 +0000
ROA not before:           Fri 11 Apr 2025 18:29:09 +0000
ROA not after:            Fri 10 Apr 2026 18:34:09 +0000
asID:                     16909
IP address blocks:        2a14:7584:613d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:71:e0:04:a2:f3:6a:21:14:bd:15:a1:24:f9:49:d9:af:24:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:09 2025 GMT
            Not After : Apr 10 18:34:09 2026 GMT
        Subject: CN=74AC3F8909DE208FB184CE139AC11E6B2DBEB071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:62:13:3e:90:a5:dd:c3:ae:5f:d5:1e:38:
                    20:be:54:fd:17:cb:78:dc:24:5c:d6:f7:6b:65:2a:
                    dc:89:85:d0:87:9f:96:e8:b2:b7:83:3c:d0:66:56:
                    34:65:b6:cc:77:4d:99:61:a4:18:d8:8a:2c:e2:43:
                    44:f1:0b:ce:5f:12:4d:42:ad:e8:02:95:83:24:82:
                    83:fe:64:97:af:e7:50:ed:9a:ab:2a:85:46:f1:9e:
                    22:34:0e:02:8f:76:01:1f:67:77:78:68:36:31:92:
                    a8:27:3d:3a:bd:49:82:ee:49:0d:dd:7e:d9:6e:6c:
                    48:b1:7c:2b:41:42:d6:d9:1e:8e:f4:b9:ab:df:1c:
                    e8:e5:af:92:8b:56:8d:a9:cc:a7:03:0f:46:0e:24:
                    3d:1a:18:03:76:b6:27:f4:c3:d8:d5:83:4a:8d:b0:
                    f2:42:3f:e6:42:2f:df:e2:54:8c:28:31:40:d4:1f:
                    d6:fd:3b:49:38:c0:6f:71:8b:19:b9:73:6b:35:00:
                    e2:a4:0f:60:4d:4a:35:01:28:6b:0d:30:79:20:b0:
                    67:d3:2a:cb:8a:cc:3d:ee:04:9b:57:35:c2:c1:aa:
                    0f:4d:52:81:66:57:a8:c8:6d:d0:b6:a4:0d:11:ee:
                    98:11:76:7f:36:d0:a2:3c:07:b8:59:a3:0a:9d:d0:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AC:3F:89:09:DE:20:8F:B1:84:CE:13:9A:C1:1E:6B:2D:BE:B0:71
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:613d::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:4c:3d:dd:92:e5:dc:36:54:a9:71:61:ff:dc:33:a7:84:
         82:6b:85:85:51:54:06:ee:00:c5:65:56:5b:d0:1c:74:18:79:
         72:22:b2:75:ee:28:59:e7:df:8e:0e:12:39:f2:48:5c:ef:98:
         cb:a5:71:e0:bb:27:be:b0:a1:39:10:db:55:09:7a:ef:13:83:
         7c:18:92:50:52:29:37:cd:d0:ec:ef:94:81:7b:be:22:82:9c:
         b8:17:29:0a:36:69:b8:4c:f3:9d:83:52:63:04:fc:cf:c9:bc:
         bf:89:94:36:0c:d3:5c:c0:bf:f0:15:da:3d:bc:99:c8:2c:2d:
         57:d5:10:b2:29:c6:78:00:23:09:dd:e0:da:a9:d0:b5:9a:3a:
         eb:7d:fb:81:3b:c5:8f:a3:f3:f8:36:ca:50:93:b0:dc:d1:9c:
         8e:09:ac:3b:bc:ae:02:f2:c4:59:20:1c:35:42:17:8b:83:1b:
         30:ce:2b:ec:4d:a2:86:ef:f7:d1:56:66:ce:1c:af:e3:dc:51:
         ea:78:bf:69:96:f2:21:38:75:31:92:40:47:e4:01:93:a9:55:
         da:44:26:00:9f:6e:78:7c:7f:e3:7e:3f:8a:7c:bf:17:ec:ab:
         57:13:90:8f:b3:f1:c4:cd:63:fc:b3:14:ca:8e:9d:77:98:3d:
         d0:4e:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----