Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363362303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          MNKU3freF9X5bkZelay8KBtlWwB9k61JBMsbVrCG6zQ=
Subject key identifier:   CA:6B:0F:C5:80:0D:7A:1C:FC:FE:69:BB:57:58:CC:9A:50:90:93:54
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       16CD4D70F06C98C2FE9FD27A54AF3DA6D46FAEF5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 21 Dec 2024 20:46:18 +0000
ROA not before:           Sat 21 Dec 2024 20:41:18 +0000
ROA not after:            Sat 20 Dec 2025 20:46:18 +0000
asID:                     16909
IP address blocks:        2a14:7584:63b0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cd:4d:70:f0:6c:98:c2:fe:9f:d2:7a:54:af:3d:a6:d4:6f:ae:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 21 20:41:18 2024 GMT
            Not After : Dec 20 20:46:18 2025 GMT
        Subject: CN=CA6B0FC5800D7A1CFCFE69BB5758CC9A50909354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:4c:fc:f8:3c:b4:85:c3:cd:86:88:c6:77:
                    13:2d:ab:04:cd:90:10:b0:96:22:db:8d:b8:be:f1:
                    aa:bd:8c:3e:48:43:b7:29:2a:a1:bb:39:b3:16:88:
                    4e:e5:fd:f0:2b:43:17:a1:d8:e8:b6:51:61:ac:9d:
                    d6:1a:46:36:de:43:aa:04:3e:f0:92:3c:bf:ca:48:
                    ba:8e:e4:50:d5:83:ac:56:56:b5:5a:90:e0:aa:83:
                    5c:c8:bc:3c:d0:ba:d0:9b:7a:a8:87:fa:29:55:24:
                    6c:29:a9:2f:13:1f:e7:4c:85:45:a5:70:12:9f:9b:
                    1f:3f:10:51:6b:91:eb:44:1c:da:60:82:d6:f6:49:
                    af:11:b2:af:57:57:40:62:11:cb:97:f3:da:5d:31:
                    48:cb:4c:7b:45:c7:df:80:06:8c:bc:31:7d:8a:ea:
                    c2:84:d8:4e:c2:d2:7e:d7:32:df:a1:6d:35:bd:75:
                    a8:4d:26:2f:63:4e:e2:fb:d1:f6:03:5e:14:38:21:
                    93:62:7e:8b:69:6c:54:ea:41:34:d2:74:e6:d6:12:
                    fb:69:f4:47:ad:ae:18:5c:c9:c9:42:ec:f0:37:5f:
                    6b:84:9e:48:dd:6f:17:ad:5c:0b:78:2b:68:76:d9:
                    65:99:f5:fa:68:f0:03:bc:69:b2:22:3b:b6:fc:19:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:0F:C5:80:0D:7A:1C:FC:FE:69:BB:57:58:CC:9A:50:90:93:54
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:63b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:9c:ab:d5:2c:3e:e8:3c:44:34:1d:09:ed:5b:8f:09:ef:
         44:6f:8a:3e:7b:d6:01:12:8e:f3:f0:9e:21:75:e8:ca:1a:d6:
         c2:aa:c0:90:90:b2:39:34:6b:a1:65:cb:3e:5a:0e:47:c6:c7:
         87:01:2f:ff:c1:04:83:1b:14:ff:47:f0:ae:66:47:7b:ab:0a:
         e9:7e:d2:be:be:3c:24:63:cb:84:15:6a:62:c6:8d:0f:7c:2f:
         12:31:91:6b:6c:63:93:8c:6c:58:8a:5c:ff:63:ba:5e:5b:a4:
         ed:d8:42:3c:b9:0c:56:36:5f:7b:0a:70:7d:86:b8:c7:16:d1:
         57:7c:c5:79:99:68:f0:53:35:75:c1:5e:04:de:0b:73:4e:42:
         78:41:d5:a5:78:83:e9:97:4b:18:9e:a6:1c:94:5f:21:25:57:
         98:ac:79:e2:64:ad:a4:b4:79:8e:6f:14:e9:bd:c1:05:7e:90:
         f7:f2:34:7d:e7:f7:fd:56:04:ae:84:ce:9d:f2:30:c2:03:d0:
         ae:14:c3:5c:7f:2e:ef:dd:ef:e7:9a:e2:d5:92:5f:9a:f3:8b:
         1e:10:d9:79:12:81:aa:ac:f1:53:bc:9d:cc:19:39:6e:43:0e:
         9e:06:61:2e:97:9c:88:00:26:79:55:91:2e:6d:11:f8:3b:ca:
         e8:21:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----