Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Hob14GkPj8y+VgrTLOa0xvHIeUUOD10v7psNqn72hB8=
Subject key identifier:   EC:2D:A3:05:2B:44:EB:81:7A:F5:69:4D:85:EA:A9:CF:9A:42:C4:64
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       16375AA47C141F3F28415BCA676C44B7B7918F99
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:10 +0000
ROA not before:           Fri 11 Apr 2025 18:29:10 +0000
ROA not after:            Fri 10 Apr 2026 18:34:10 +0000
asID:                     16909
IP address blocks:        2a14:7584:613e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:5a:a4:7c:14:1f:3f:28:41:5b:ca:67:6c:44:b7:b7:91:8f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:10 2025 GMT
            Not After : Apr 10 18:34:10 2026 GMT
        Subject: CN=EC2DA3052B44EB817AF5694D85EAA9CF9A42C464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:87:79:47:e7:c7:c4:05:06:07:8a:48:a5:
                    9b:7d:66:23:81:ff:50:2c:78:60:83:0a:e9:e5:83:
                    fa:63:0e:92:d8:aa:17:c5:2b:47:22:47:6c:da:20:
                    06:2e:d9:52:fc:97:c9:a0:0b:2c:87:69:a4:5f:18:
                    f7:13:b4:da:96:9a:c3:a8:3e:9f:24:5e:c6:d9:d7:
                    9b:19:e8:09:2e:6b:18:64:0d:92:55:74:c1:51:61:
                    16:8d:36:f2:7e:f5:22:e6:a2:f8:c3:29:e6:98:46:
                    47:16:a1:5e:d9:7e:02:1f:e4:a1:ea:b3:10:d6:3b:
                    c1:0d:58:72:c2:b3:0d:b2:46:17:4c:7d:8d:76:a8:
                    6a:5d:4a:f3:31:cc:1b:7f:d0:21:fc:fb:3f:27:2c:
                    f5:5f:4b:6b:c4:e8:52:8c:c0:f1:9e:52:41:65:24:
                    36:64:72:57:90:53:64:39:5a:5c:d1:26:90:cc:f4:
                    e3:78:94:a9:b8:b1:dc:ca:18:7e:38:4f:af:df:ca:
                    09:a5:25:35:53:d6:a3:ec:1b:85:be:d7:1c:c9:f8:
                    09:3a:16:45:e7:64:a2:b2:74:62:83:fd:fc:6a:fa:
                    dd:dc:70:9d:ac:c6:03:9c:0b:ec:26:65:2c:48:56:
                    0a:f2:ef:7a:e0:47:4a:aa:31:b8:64:3f:d9:44:93:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:A3:05:2B:44:EB:81:7A:F5:69:4D:85:EA:A9:CF:9A:42:C4:64
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:613e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:f3:0c:89:d9:1e:a0:6e:b3:35:8a:37:91:b5:81:c3:6c:f9:
         1d:cc:12:65:0f:4f:93:ef:2c:33:b4:c5:85:dc:1b:4b:36:57:
         5d:94:d2:03:85:de:dd:10:7c:00:92:b1:9e:80:d8:a1:58:57:
         23:6e:9c:5b:58:03:01:de:e6:17:cc:69:d7:ff:63:4e:6a:ba:
         af:80:69:91:77:b2:8a:5d:f1:df:32:ba:87:a8:66:f3:1d:c5:
         21:5b:d0:4b:cb:d6:13:ba:8b:c6:fb:5a:69:73:68:fa:ef:87:
         f8:5b:9f:ea:a4:43:f0:2b:4b:bb:3d:4c:d3:c8:50:b7:8f:4f:
         de:63:a6:5c:bd:b0:9f:34:aa:04:c5:0b:dd:ae:c7:52:42:d6:
         fe:60:d3:c6:55:3d:88:a1:84:22:4d:b5:07:45:c3:65:47:5c:
         4e:50:15:26:4a:e7:14:41:aa:dc:ae:6c:e0:ee:89:03:ec:95:
         ca:71:e5:10:12:18:ad:20:65:ef:ff:40:1c:81:15:eb:0d:f3:
         b1:2f:1f:ec:08:91:7f:cb:7a:c8:b3:4b:ed:d1:7b:50:02:3c:
         db:5e:1f:f8:25:ec:9a:64:05:8c:18:00:d5:5c:d1:09:59:c3:
         9d:b6:2f:47:39:79:c2:18:22:33:ef:cd:76:5b:3f:f7:35:2d:
         8c:43:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----