Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363134323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          EyIKpxTl+4aZNxuOy6wInjcXbzDyv9v3fHUJDbk5Mss=
Subject key identifier:   38:51:F4:97:FF:E8:4D:87:A5:DF:C9:06:80:FF:C0:72:34:B6:3F:54
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0BFEA110ED9AD92B839B061318AA8C1B31286706
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:13 +0000
ROA not before:           Fri 11 Apr 2025 18:29:13 +0000
ROA not after:            Fri 10 Apr 2026 18:34:13 +0000
asID:                     16909
IP address blocks:        2a14:7584:6142::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fe:a1:10:ed:9a:d9:2b:83:9b:06:13:18:aa:8c:1b:31:28:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:13 2025 GMT
            Not After : Apr 10 18:34:13 2026 GMT
        Subject: CN=3851F497FFE84D87A5DFC90680FFC07234B63F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:1b:30:c1:6a:5e:71:25:55:c3:ce:86:8f:
                    4b:d4:86:3f:ab:44:8c:da:8f:eb:61:ca:27:c1:1d:
                    c3:4b:14:de:4a:05:98:49:af:5c:91:69:01:2a:5c:
                    31:79:d0:c3:b4:e2:55:0d:df:26:48:0a:df:53:52:
                    a7:4a:1c:80:2e:1c:84:49:fa:78:29:9d:42:89:b7:
                    b1:81:e9:f9:b6:d6:62:04:b3:a1:16:43:50:fd:e8:
                    f7:e3:16:04:d0:0a:7d:e9:e6:99:4d:89:3f:f0:0f:
                    49:c8:75:91:31:11:44:6b:d5:3b:b5:72:91:d9:46:
                    6c:30:58:f0:88:4b:1a:ee:d7:c5:70:f1:c5:84:76:
                    59:a1:59:c7:21:a2:88:a3:d8:d8:e6:18:55:16:10:
                    6f:28:20:94:3f:cf:ee:eb:8a:2b:1b:98:27:f2:44:
                    b9:c3:8f:82:96:9e:a5:96:c3:16:fc:75:22:61:e0:
                    d4:31:0d:13:6a:bb:11:45:84:f7:36:63:8d:f9:5b:
                    f2:40:5a:b7:bc:4d:cb:78:dd:93:a1:51:ef:91:46:
                    5a:6d:03:91:3d:8b:e8:0a:08:cf:dd:fc:e3:5d:f9:
                    c0:5d:77:a7:55:4d:61:19:76:e7:e2:8f:24:92:dd:
                    f2:68:fd:28:e0:62:76:00:36:a2:ff:e7:ae:7c:36:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:51:F4:97:FF:E8:4D:87:A5:DF:C9:06:80:FF:C0:72:34:B6:3F:54
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6142::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:59:94:6a:8f:2d:44:a2:5c:53:ea:c0:6d:21:e6:51:56:
         9c:2f:18:e2:47:7b:53:9f:64:0c:a0:a3:50:3f:86:92:76:3d:
         7a:35:e7:c3:97:7f:5e:1a:be:94:7b:76:30:96:42:c9:cf:77:
         74:d5:28:26:85:c0:89:c6:14:1c:d6:4a:ec:8e:54:25:01:3a:
         ed:b5:b4:64:6b:36:99:06:42:ee:78:e1:a4:fb:26:64:d3:db:
         71:ca:a5:7f:ee:39:b2:2e:a2:62:ff:2e:a2:13:f2:78:78:5a:
         aa:0f:9f:9a:30:aa:00:3f:0a:4d:d6:72:43:db:66:be:a5:58:
         da:4a:4e:8e:5b:4f:5e:d7:60:49:29:ef:dd:1e:9e:13:a7:c2:
         29:82:ff:c4:99:ca:7e:1a:b9:ba:09:41:85:75:3d:c2:e7:62:
         c9:f8:9f:c9:90:1f:28:42:97:95:21:8e:ed:91:63:90:09:12:
         05:30:d0:76:68:bb:37:05:cf:e1:db:6a:08:28:c9:a6:1f:a7:
         06:a0:49:f6:a5:ae:22:06:18:f6:d5:9f:8b:9e:0d:18:5b:d7:
         2f:0e:75:b6:fd:12:e3:0b:9a:f6:a0:c2:ab:a7:fa:c1:7e:ad:
         2a:83:7a:3d:b7:d0:97:10:7f:79:52:62:9a:86:f0:76:be:9b:
         4a:7e:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----