Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34342d3438203d3e203136393039.roa
File:                     326131343a373538343a363537303a3a2f34342d3438203d3e203136393039.roa (raw, json)
Hash identifier:          pSU9BTh7gt+C+D0hWiUc+ZZvl6ilDZJcibfcngcyalY=
Subject key identifier:   B9:70:FE:F6:B6:64:80:FB:7A:0C:84:FD:2E:1F:81:A7:4B:9B:DD:07
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       798C9BC1704B930A267EE01C99D311F8E021A6FB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34342d3438203d3e203136393039.roa
Signing time:             Wed 15 Jan 2025 19:12:41 +0000
ROA not before:           Wed 15 Jan 2025 19:07:41 +0000
ROA not after:            Wed 14 Jan 2026 19:12:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:6570::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:9b:c1:70:4b:93:0a:26:7e:e0:1c:99:d3:11:f8:e0:21:a6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 15 19:07:41 2025 GMT
            Not After : Jan 14 19:12:41 2026 GMT
        Subject: CN=B970FEF6B66480FB7A0C84FD2E1F81A74B9BDD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:16:d5:f3:95:5c:08:1b:61:7c:02:b9:25:
                    cb:f4:29:57:db:40:fe:3b:6d:ac:00:84:29:58:eb:
                    c3:16:d8:e4:1c:2c:79:17:ad:5d:64:16:66:88:26:
                    20:e0:96:13:36:3f:69:b6:69:49:c4:50:ac:bd:ae:
                    d5:fc:da:30:8c:92:9d:43:06:ad:ef:d9:fc:01:9f:
                    65:d0:61:97:9f:b4:24:a0:a4:1b:e5:00:02:be:d5:
                    7d:78:04:4f:d0:3e:59:05:e1:ce:aa:32:79:4c:5b:
                    9b:00:7e:c6:1d:48:3d:aa:8b:ab:44:0b:a3:51:9a:
                    92:b0:e8:e7:0f:f2:7a:a1:8e:be:5c:9f:5e:7f:6f:
                    b3:d2:7d:23:ed:71:61:c3:8a:7f:05:8c:69:ce:ae:
                    4b:14:4d:b3:43:b3:c7:94:75:95:68:7c:8e:5d:57:
                    09:2a:b7:a2:52:99:b4:57:00:03:43:1f:36:d5:ea:
                    55:df:51:01:b1:42:47:ad:76:32:aa:5f:21:00:90:
                    c9:9a:32:d0:23:92:b7:bd:e2:3f:74:6d:01:60:00:
                    83:07:ac:65:a3:5f:37:9a:f1:33:24:e7:87:fa:14:
                    64:b0:70:16:de:17:cf:99:f2:d0:2d:c1:c6:95:51:
                    89:83:9b:9d:12:ab:06:24:11:d6:46:83:04:de:86:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:FE:F6:B6:64:80:FB:7A:0C:84:FD:2E:1F:81:A7:4B:9B:DD:07
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537303a3a2f34342d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6570::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:69:87:8e:25:66:6d:e8:cd:80:ae:e7:79:1c:82:cd:ca:e6:
         2d:83:13:20:17:b9:e9:12:d2:f0:52:55:db:90:18:50:8f:e4:
         35:a1:8b:58:46:0c:c2:2d:86:8d:f0:f8:df:59:bd:b1:e5:52:
         eb:57:07:b1:7f:ab:3b:c2:c0:f3:a2:5b:73:1a:cc:46:d8:ff:
         2c:30:85:47:1c:51:68:ad:07:d5:cd:71:5d:a1:fc:cd:47:bc:
         15:12:ba:62:ba:2f:dd:1c:46:59:bc:58:08:99:1c:fa:2f:9f:
         5f:78:e0:73:fb:ee:9d:39:7c:ad:b5:35:0e:a9:2f:e5:37:dd:
         d3:15:4a:74:ba:bf:6b:d3:52:25:fa:e6:68:27:28:09:a3:2a:
         02:6e:15:5b:20:f9:ca:9e:03:b4:36:55:93:df:57:67:ed:fe:
         8e:4d:08:b4:28:e2:2a:db:08:97:76:a8:16:af:13:00:52:e6:
         cc:f7:0f:d0:3c:61:b9:0e:93:96:b5:42:35:b5:39:d8:5d:1a:
         16:5a:db:12:1d:68:b9:b3:33:a6:25:c2:67:d7:26:12:09:3a:
         02:7d:79:6c:57:dd:9f:65:d0:d7:fd:aa:2d:bc:b7:d9:5e:dc:
         0a:81:7f:55:41:6b:4e:8e:ed:51:f6:e5:f1:3f:05:ea:3c:9f:
         3b:88:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----