Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363439303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          544dWMkyk3z7c2nHcXIjkfm8pKz1TdXRpxEFwuws9iY=
Subject key identifier:   86:DC:CC:FE:03:3E:73:65:80:06:0D:4E:0B:57:9F:8F:1E:D0:90:05
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2D65639BC1879897D27B03CAFDFE4AA3905DC3BA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 20:17:01 +0000
ROA not before:           Thu 19 Dec 2024 20:12:01 +0000
ROA not after:            Thu 18 Dec 2025 20:17:01 +0000
asID:                     16909
IP address blocks:        2a14:7584:6490::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:65:63:9b:c1:87:98:97:d2:7b:03:ca:fd:fe:4a:a3:90:5d:c3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:12:01 2024 GMT
            Not After : Dec 18 20:17:01 2025 GMT
        Subject: CN=86DCCCFE033E736580060D4E0B579F8F1ED09005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:f2:c8:08:84:11:05:c2:c9:9d:ef:4b:fa:
                    9f:dd:83:71:8d:e3:9c:9e:54:15:30:2f:6e:55:37:
                    8b:08:51:62:27:10:6c:e9:b0:b9:d8:da:2e:8e:52:
                    6c:13:6f:fe:fc:51:6c:59:84:6f:b2:4c:85:f3:0e:
                    d1:07:45:92:87:45:82:f4:31:52:6f:e0:07:fb:60:
                    28:03:9a:37:fb:94:10:b6:92:b7:53:a7:e6:de:fa:
                    55:1b:e0:a7:4b:6a:5b:38:b1:91:ea:dc:18:a1:59:
                    87:70:69:3e:36:bd:af:65:09:69:b3:b1:26:0b:2b:
                    b9:51:b4:a6:f9:53:f0:00:4e:18:c7:95:10:cc:ad:
                    13:74:15:49:4c:d9:49:a9:ad:9d:5a:3f:0e:32:a6:
                    2f:a9:ec:8b:ea:24:c0:09:81:8d:dd:cd:64:86:0f:
                    11:f5:b6:0c:29:66:13:e8:f0:84:f6:b4:dc:dc:49:
                    fb:c6:2b:d3:8b:ca:0a:79:e6:a2:72:c2:de:43:f7:
                    7d:26:47:0f:45:b9:9c:bb:b2:e0:4a:48:56:4d:bc:
                    4a:be:04:e5:2f:0f:4d:dd:9d:d9:4d:52:9b:96:3b:
                    45:35:4c:8d:0e:83:2e:13:5c:a5:5c:67:4f:9f:81:
                    05:50:09:ea:1c:5c:5e:a9:0b:e3:ec:2c:13:46:e9:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DC:CC:FE:03:3E:73:65:80:06:0D:4E:0B:57:9F:8F:1E:D0:90:05
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363439303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6490::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:16:46:79:39:6e:33:71:38:74:1e:0e:79:cd:ec:70:05:
         4e:71:a5:0d:08:0d:fe:84:65:7a:c1:b1:87:2e:c6:0e:b6:ad:
         40:3d:76:b7:57:f2:28:69:72:dc:a5:2e:31:b3:c9:8b:33:ed:
         da:9f:73:bd:59:9a:9d:8d:c6:db:79:eb:5c:38:18:e0:cf:68:
         92:2e:b7:a2:10:82:5b:01:12:45:f5:04:bc:be:ab:dd:25:66:
         66:bf:bb:7b:92:6e:26:4a:83:bd:83:c3:46:79:44:43:8d:8f:
         86:ae:24:2e:02:21:89:7c:f7:d1:9f:2a:11:3f:e2:55:40:df:
         5e:66:e2:3b:b1:9c:35:80:a3:fc:2b:01:36:12:39:90:28:d9:
         59:b5:99:57:83:60:f0:57:0b:1f:a5:a4:fc:fa:f4:3e:ea:44:
         03:71:6b:25:7e:d7:14:66:c2:5a:34:7d:4c:1c:7c:36:29:6c:
         38:c2:05:c4:5d:72:9d:85:c9:e7:a9:e6:c6:07:54:ea:ea:12:
         e5:e8:ec:81:b5:22:50:69:30:05:5b:71:8c:70:cf:68:a9:53:
         22:a5:a8:0d:be:19:da:e5:51:6e:0d:7d:c5:f5:a9:a4:1b:c8:
         2c:65:da:31:3b:b3:32:bc:20:02:ba:d3:76:e5:70:6b:c3:df:
         14:c0:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----