Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363237303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          zVNQezfnhJNz/DVlziziqSgnnqt0yHyGH4ATHziRUEE=
Subject key identifier:   28:CF:02:2A:F2:67:A4:72:42:89:7E:1C:A1:B4:7D:62:1F:9A:4F:99
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1235E8EB9BA110D0F9D7E764BF5C90E13A51E687
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 24 Dec 2024 20:45:16 +0000
ROA not before:           Tue 24 Dec 2024 20:40:16 +0000
ROA not after:            Tue 23 Dec 2025 20:45:16 +0000
asID:                     16909
IP address blocks:        2a14:7584:6270::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:e8:eb:9b:a1:10:d0:f9:d7:e7:64:bf:5c:90:e1:3a:51:e6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 24 20:40:16 2024 GMT
            Not After : Dec 23 20:45:16 2025 GMT
        Subject: CN=28CF022AF267A47242897E1CA1B47D621F9A4F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:67:d9:1f:3b:95:50:9e:45:50:f1:9e:27:
                    32:55:b9:0e:32:3a:32:18:53:73:7a:0e:cb:69:16:
                    3f:7a:d5:69:68:dd:ad:64:7c:3c:58:da:f8:20:c6:
                    f7:43:83:5e:65:fb:b0:21:b3:f4:b0:dd:fd:e6:8f:
                    8c:d1:a0:c4:4e:eb:65:01:b5:fa:eb:72:f4:4a:53:
                    4a:19:51:33:a2:92:c3:9b:5f:bb:61:5a:99:a3:f8:
                    0e:43:9e:3b:42:ee:7a:ca:96:08:3d:3d:e3:37:60:
                    39:05:9d:65:20:4c:18:1f:31:4f:7f:e7:b8:3a:8d:
                    e2:78:90:6b:0b:c8:6f:9e:ae:e0:7d:76:a7:5e:92:
                    4d:ac:58:aa:d8:20:59:e8:3a:d5:80:40:45:ed:00:
                    cc:f9:52:5d:44:de:8a:22:50:e6:2d:b7:06:e2:7f:
                    96:fe:aa:fd:d4:16:8a:72:af:f3:ee:33:a9:6a:d9:
                    62:97:47:df:19:c0:4a:fa:46:db:f0:10:01:ef:bc:
                    71:fe:94:ae:e7:ba:c2:23:a8:f3:71:8f:4a:0a:ae:
                    9e:c0:4b:eb:99:6b:10:ba:a6:3b:2b:71:f9:10:e7:
                    77:6e:a9:8e:a6:13:9d:35:9c:1f:e2:7f:16:f9:ed:
                    dd:50:3a:85:ee:02:56:42:d3:a4:25:a0:f0:9b:54:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:02:2A:F2:67:A4:72:42:89:7E:1C:A1:B4:7D:62:1F:9A:4F:99
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6270::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:9d:bb:d3:78:a0:f8:0b:50:b0:c0:53:27:95:f6:a0:ef:
         81:bf:3b:0b:28:04:16:cd:8c:38:a6:19:3e:0b:73:b7:43:4c:
         60:0c:9d:8e:13:2d:50:40:f7:f6:60:3a:49:df:d0:c5:96:c5:
         b5:e9:39:55:3d:99:d7:9a:33:e2:89:ec:4e:e2:87:c5:18:36:
         ba:33:15:fa:d3:42:73:db:9d:97:5f:62:77:98:3a:8a:b6:ed:
         05:50:3a:63:cf:fa:0c:e8:93:47:4d:24:4b:35:cb:a4:54:15:
         d7:29:3a:d9:aa:d5:a9:cb:4e:38:3f:6e:fa:e2:0b:ba:64:03:
         f5:03:37:0e:08:fc:78:c5:9a:42:17:87:f6:29:fe:cd:86:d0:
         29:93:64:81:8e:70:b2:71:7d:9a:37:e1:c1:20:d8:12:99:e7:
         8c:12:44:06:b6:12:48:35:a4:e7:e6:81:96:1b:f8:02:b9:77:
         e7:63:54:87:bf:8a:04:83:9f:2b:cb:ce:c3:39:c4:71:3c:80:
         67:47:cf:8d:79:1f:d8:71:66:af:d7:f8:be:c7:ef:42:11:0a:
         84:34:89:dc:aa:ce:c2:17:a8:af:01:ba:2c:aa:9a:04:9d:f1:
         fb:fb:43:95:a9:f2:a1:bb:06:33:69:9e:e8:b7:3e:74:35:32:
         ec:fa:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----