Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363333303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ioXYpO+/auLIlBfbxCbG7XKJj83yHxkybQ1ttCVOB2s=
Subject key identifier:   76:F9:32:C0:61:2B:85:D9:8B:3B:BE:C3:D4:CE:4B:0B:AC:03:22:B4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       543B8DDC253A5E5E6ED40F08B79C9079AF963F26
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 21:04:31 +0000
ROA not before:           Thu 19 Dec 2024 20:59:31 +0000
ROA not after:            Thu 18 Dec 2025 21:04:31 +0000
asID:                     16909
IP address blocks:        2a14:7584:6330::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3b:8d:dc:25:3a:5e:5e:6e:d4:0f:08:b7:9c:90:79:af:96:3f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:59:31 2024 GMT
            Not After : Dec 18 21:04:31 2025 GMT
        Subject: CN=76F932C0612B85D98B3BBEC3D4CE4B0BAC0322B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:fc:33:7c:84:35:80:9d:18:e2:1c:91:e5:
                    b0:64:8b:73:4e:8f:bf:c7:85:ba:53:ac:c5:c5:95:
                    c8:53:6e:95:a0:e5:21:cb:e2:4e:22:4c:73:e4:9e:
                    18:33:d5:37:fd:c9:12:4e:6b:0c:26:e4:75:60:1c:
                    c2:33:b0:a1:23:95:38:2d:26:e3:dd:30:d9:38:00:
                    99:5c:ba:0a:44:03:e8:de:6b:bd:be:e2:d8:c2:15:
                    a1:ee:bc:7b:e9:d7:ce:f1:8b:31:54:5b:7f:7d:41:
                    87:46:5b:ff:8c:41:ca:9b:57:1d:a3:5b:65:7f:c3:
                    74:26:38:0d:96:7f:f9:ea:fe:ab:50:f9:f5:2d:57:
                    14:22:1d:58:38:59:2a:08:ef:cf:73:a6:a5:e2:aa:
                    43:9e:ca:d7:2b:00:5e:fd:cb:5f:06:03:a6:e6:3e:
                    c2:3f:2e:10:2d:65:2e:fc:47:65:c4:a4:56:b9:0e:
                    82:15:06:53:32:a6:29:22:56:79:18:70:44:30:de:
                    04:c5:93:ad:0f:b2:b1:74:59:5d:db:3d:85:37:fa:
                    db:3f:71:bb:1e:d7:b4:dc:7e:63:c5:54:57:01:fd:
                    b9:cb:1b:33:f6:b0:2b:ee:a4:df:f5:73:d6:4b:d8:
                    bd:64:66:a3:4e:65:7d:16:af:b1:c5:bc:7b:db:ac:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:32:C0:61:2B:85:D9:8B:3B:BE:C3:D4:CE:4B:0B:AC:03:22:B4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6330::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:64:55:fc:93:93:76:97:07:aa:f4:ae:55:b9:59:92:ab:
         74:1b:a7:95:bc:9b:e5:82:4b:9e:f8:c6:73:a3:48:85:75:f1:
         a4:85:7b:b7:1a:7c:00:bb:5a:f9:06:b3:a9:ec:5c:48:e7:1c:
         0e:67:12:ac:f7:a3:1b:6c:b2:20:bc:31:a1:04:12:05:3a:bc:
         75:51:e0:27:5a:33:43:e0:1d:25:39:3c:6d:10:b5:92:73:bd:
         6b:4b:5a:32:f1:2b:f7:84:4d:88:8e:fe:65:62:a1:60:b3:55:
         cb:56:52:89:51:10:7e:05:cb:f0:92:80:45:ea:4c:6f:da:97:
         6a:1e:08:63:05:85:6b:72:55:4f:63:11:f9:f9:72:7a:9d:6b:
         9d:59:8a:14:0b:34:da:f4:da:55:d5:5c:84:75:55:26:9a:49:
         d7:98:ec:fa:8f:95:77:d9:86:f0:38:13:e5:16:f5:45:c9:26:
         e7:ef:c3:a6:06:26:90:52:0c:76:6f:84:f4:f6:9b:ea:93:8a:
         94:56:f4:89:cb:c5:87:bc:4d:25:86:97:f9:cd:32:be:39:e1:
         db:c6:39:63:a7:62:69:0e:48:a9:0c:5e:f3:42:f6:b1:20:67:
         21:75:60:99:91:14:2f:f7:fa:f7:d5:c8:cc:32:d3:dc:18:d9:
         03:b8:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----