Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          7C2hsDLyU6eBs87OA0M3YmQmgw7V8pGj/IBPYf0rl98=
Subject key identifier:   71:68:79:00:8F:0A:1B:DE:68:D6:96:BE:BF:C2:5B:03:09:6A:CF:CA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       246DF1A3BB6550ECFF099E79C5F20E08888CE200
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 24 Dec 2024 20:50:55 +0000
ROA not before:           Tue 24 Dec 2024 20:45:55 +0000
ROA not after:            Tue 23 Dec 2025 20:50:55 +0000
asID:                     16909
IP address blocks:        2a14:7584:6340::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6d:f1:a3:bb:65:50:ec:ff:09:9e:79:c5:f2:0e:08:88:8c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 24 20:45:55 2024 GMT
            Not After : Dec 23 20:50:55 2025 GMT
        Subject: CN=716879008F0A1BDE68D696BEBFC25B03096ACFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:59:8e:59:45:f6:99:2b:b9:a8:7b:fe:e5:
                    9c:7a:84:98:18:fd:32:37:d1:74:0e:be:45:03:1b:
                    9c:98:66:88:25:67:b4:c4:16:1c:f9:55:b9:f3:22:
                    e6:da:1e:79:79:44:d8:71:ee:c8:c2:25:40:a3:46:
                    42:26:78:c3:bc:e5:a8:7f:6d:20:e8:85:80:2a:b0:
                    ca:a7:d2:6f:d6:23:73:44:6e:1b:9b:fe:1b:90:20:
                    2e:8e:2d:13:c8:dc:ce:51:15:d8:97:20:64:c8:1c:
                    06:75:8c:96:cf:96:dd:91:ee:3f:ae:bd:dd:89:fe:
                    49:cb:af:9d:4f:7e:05:03:c9:44:c8:31:e3:02:71:
                    13:4f:98:0f:6b:d1:4e:f4:60:e1:3a:a9:40:0d:f2:
                    4d:49:f8:53:37:45:fc:22:85:d5:32:a7:b7:43:8f:
                    51:94:18:d3:23:59:38:a5:66:38:50:74:a5:0c:82:
                    e7:7e:d4:1d:3e:d3:31:15:90:61:d8:4a:d1:2d:d3:
                    fd:9a:da:c5:05:8e:b5:4e:fa:48:dd:61:25:6e:64:
                    b3:34:0e:7d:46:1b:05:38:e1:dc:c3:9f:68:e7:64:
                    b0:50:b4:a9:bf:8b:41:4e:89:4a:ee:f0:c2:9c:72:
                    e2:8d:a5:b6:cf:32:bb:09:2f:ef:fd:60:dc:d3:70:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:79:00:8F:0A:1B:DE:68:D6:96:BE:BF:C2:5B:03:09:6A:CF:CA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6340::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:d0:0d:93:b9:54:73:79:bd:9d:ce:df:d2:73:c6:47:14:
         51:04:5e:ad:cc:7b:19:3f:c7:9c:67:fd:f9:95:73:ae:c8:60:
         fa:11:96:d1:b0:e8:a9:19:9c:ac:1c:cb:bb:9e:47:90:22:32:
         15:67:0e:45:ce:bc:22:be:7b:01:e1:be:79:8b:5f:5f:90:f5:
         4f:e0:fb:4e:05:e7:54:68:a0:f6:79:ad:31:f2:05:d3:a0:e4:
         ed:4c:1b:dd:6e:62:1f:38:34:32:4e:81:3f:68:49:6e:ca:89:
         84:e4:df:a1:6c:d4:32:bd:59:57:26:29:5c:06:ac:6a:90:63:
         00:22:b4:42:f3:94:c8:d8:7f:21:fd:a0:b7:45:84:d1:3a:b8:
         e3:2f:43:4a:d5:bf:d1:37:e5:7a:66:01:4e:ae:ac:4b:0a:21:
         d9:60:6c:a9:86:73:39:6a:f7:93:b2:00:b2:a7:49:3e:d7:72:
         3f:73:05:87:60:36:3c:07:49:38:30:5f:2f:fa:86:d0:61:aa:
         20:05:73:d5:09:73:5e:ef:7c:74:23:5e:23:23:f7:39:46:78:
         26:58:95:1b:a5:1a:09:ff:36:99:a4:c9:96:6f:e9:58:53:cb:
         64:46:4e:51:c7:bc:5f:ad:29:99:1b:a2:f7:17:3b:24:83:3b:
         74:7a:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----