Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363539303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363539303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          8WKF5ZbqzsRnM9pZNovnD4oCG93lKp0hfecfYMmdRjM=
Subject key identifier:   48:0D:09:38:FD:42:35:E8:C1:D0:32:1A:74:B6:96:8E:40:A1:18:7A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       72D5536A75397DC7C23C8087A5E06E762CD6589B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363539303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 21 Dec 2024 20:46:32 +0000
ROA not before:           Sat 21 Dec 2024 20:41:32 +0000
ROA not after:            Sat 20 Dec 2025 20:46:32 +0000
asID:                     16909
IP address blocks:        2a14:7584:6590::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:53:6a:75:39:7d:c7:c2:3c:80:87:a5:e0:6e:76:2c:d6:58:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 21 20:41:32 2024 GMT
            Not After : Dec 20 20:46:32 2025 GMT
        Subject: CN=480D0938FD4235E8C1D0321A74B6968E40A1187A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:6c:27:22:99:46:76:0b:bf:57:83:4c:53:
                    a2:29:eb:d6:cd:64:d4:b6:dd:2e:b2:fe:e0:f4:11:
                    3a:42:bf:24:20:b7:77:06:8d:44:c3:b0:d8:b3:8a:
                    00:f2:8f:e6:f1:b9:a2:e6:33:3f:13:3c:24:58:17:
                    dd:c4:13:c3:60:ce:c2:42:8b:cf:24:30:63:83:26:
                    b1:78:0f:ae:df:37:1e:c0:2d:fb:8c:b2:9b:fe:85:
                    f3:91:95:8c:0f:ee:d9:04:d6:74:42:1f:c2:ee:81:
                    64:55:63:3f:78:e3:14:d9:51:e4:12:90:4b:a2:f9:
                    65:ea:92:ea:26:c2:ae:11:20:02:65:2c:3b:d5:25:
                    04:cd:50:75:86:c6:8f:fd:c5:06:d0:0c:93:ad:d4:
                    f6:3f:76:11:ca:a4:3d:3d:6d:51:14:83:92:b6:be:
                    87:8a:d8:b2:a3:15:d1:52:35:0b:48:7b:62:d2:94:
                    f5:fb:c6:c1:22:17:d3:95:1a:38:b3:6e:40:b6:4c:
                    44:65:03:c3:29:77:7a:62:c6:10:89:9a:0f:fd:e4:
                    3b:bc:36:83:2b:55:7d:7b:62:bd:10:8c:d2:21:2c:
                    79:f9:c6:4c:98:e2:ca:90:27:2f:e0:a3:c7:7e:46:
                    6a:6a:74:a3:e5:d9:b3:fb:c2:24:8f:fd:c0:a0:57:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0D:09:38:FD:42:35:E8:C1:D0:32:1A:74:B6:96:8E:40:A1:18:7A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363539303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6590::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:81:99:e7:38:7c:30:8d:ae:e9:2e:ef:05:6f:5b:4f:64:f3:
         09:6e:66:b6:f2:0a:c1:c3:f2:c9:88:67:ce:4d:00:43:f4:70:
         a9:47:7b:73:51:ee:fb:56:65:b6:f9:4e:a6:c9:d8:ee:d5:d3:
         b6:55:d4:a1:40:98:eb:a8:ae:a4:01:94:fd:9b:03:13:95:04:
         bb:a3:b5:a7:7a:9e:2f:29:65:09:24:83:44:48:75:36:ec:4d:
         66:02:07:25:3c:c5:ce:9f:21:5a:fb:a4:0e:4b:9d:75:6e:1d:
         31:27:ed:08:ff:73:0c:a6:a1:13:9e:64:a9:22:3a:e5:28:66:
         38:7f:14:0f:8b:88:77:39:50:63:ad:52:0c:a3:5e:69:ee:b7:
         02:26:6c:17:67:88:8e:d6:21:e6:72:ba:b8:b9:35:46:34:97:
         96:03:8d:d7:9a:f0:85:a0:49:e4:32:e0:93:e5:c3:77:9b:1e:
         a9:de:ce:ea:8d:22:8d:90:13:3c:26:cc:b9:68:79:9d:5e:b8:
         a6:21:78:aa:3c:ae:46:22:ac:26:2c:3f:f0:ab:1d:c4:7f:47:
         55:26:b7:46:4e:b3:2c:09:4f:f1:3c:59:30:35:41:00:82:c3:
         c9:fe:70:e9:45:77:9a:9e:98:5d:b7:d2:19:af:ba:3e:97:ee:
         8d:7c:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----