Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363737303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          bQugKl3BkrlE+J0VoP9ZbpXGcmgvgI3FZCuTsDoGmgQ=
Subject key identifier:   76:A3:19:F8:C8:C3:33:08:56:E5:4F:C1:DF:B4:47:8A:12:94:88:B9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4C0228BA3BD49E3D1B8BB97DA7B214B10E9538A6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 21:04:26 +0000
ROA not before:           Thu 19 Dec 2024 20:59:26 +0000
ROA not after:            Thu 18 Dec 2025 21:04:26 +0000
asID:                     16909
IP address blocks:        2a14:7584:6770::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:28:ba:3b:d4:9e:3d:1b:8b:b9:7d:a7:b2:14:b1:0e:95:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:59:26 2024 GMT
            Not After : Dec 18 21:04:26 2025 GMT
        Subject: CN=76A319F8C8C3330856E54FC1DFB4478A129488B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:0d:f0:23:21:b0:b1:98:7c:ce:27:00:bf:
                    7a:c8:d8:1f:51:ab:7a:3e:93:68:5a:90:c2:c2:5d:
                    2b:6a:d8:cd:d1:32:fd:f4:ca:31:48:47:31:e3:c6:
                    03:79:97:ed:f1:eb:b1:e7:5e:f0:31:78:bb:4a:1f:
                    35:1d:dd:16:6a:93:a5:09:fe:9d:81:f6:b7:6f:ed:
                    5c:28:1a:d7:bf:cd:8a:18:96:3b:11:1a:58:a1:f6:
                    02:50:e8:44:aa:10:f5:1c:7d:56:9f:28:d4:3e:be:
                    da:62:d6:fe:da:14:21:57:69:b3:4f:aa:dd:66:2b:
                    73:1f:70:cd:60:fb:56:08:ed:3e:f4:90:ee:52:e3:
                    e5:0b:0c:37:e7:e6:18:87:93:24:6d:de:a4:dd:55:
                    a1:2f:b5:66:af:b9:6f:83:f8:da:00:aa:ce:d5:c0:
                    cd:df:a0:4a:60:e9:4f:7b:80:20:66:07:30:dc:3d:
                    ae:dc:5f:d4:a6:45:24:3e:f5:82:9f:6b:7c:7e:3b:
                    c8:b0:00:9b:55:bc:2b:84:ea:a0:99:c0:4a:f8:b4:
                    bf:42:14:d4:78:9e:4b:27:ec:22:92:88:86:67:a0:
                    f7:5d:9d:ef:d0:e6:30:40:e8:e6:9c:a9:42:9c:10:
                    a3:01:e7:87:5e:5f:51:5d:86:41:f4:ae:df:92:09:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:19:F8:C8:C3:33:08:56:E5:4F:C1:DF:B4:47:8A:12:94:88:B9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6770::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:49:32:11:92:89:36:2d:10:6a:63:f1:82:48:64:f2:bf:
         1a:8e:da:09:90:00:e4:02:1e:b3:4d:7e:d4:ea:96:b3:a2:a4:
         46:aa:05:08:84:ee:34:26:a8:e0:1d:ca:7c:62:c2:f0:14:09:
         36:30:54:26:b1:e8:70:8a:10:1f:d4:d4:36:4e:43:ff:f2:dc:
         89:b2:87:e8:6b:a6:e5:f4:3c:65:bf:90:a7:69:bb:51:0e:41:
         ed:37:a6:6d:8a:24:46:77:8a:c2:26:76:48:e9:4f:26:9c:91:
         c3:ef:12:f6:0e:f5:b7:0d:73:b8:05:22:a5:e4:3e:4e:da:1f:
         10:09:31:05:6d:3d:c5:09:40:ea:d6:73:4e:50:48:2e:dd:34:
         a0:00:81:f8:b9:fb:f1:f8:41:11:0d:d8:8d:c1:64:8b:59:5f:
         f6:77:b2:67:ce:bd:a6:95:4a:bd:3d:31:cc:74:96:56:75:3b:
         cd:f7:7f:1b:8d:be:1a:11:08:41:61:8b:0a:65:aa:1c:83:a2:
         2b:26:8d:af:fe:6f:a6:02:da:7c:e5:6f:70:ba:61:07:30:60:
         21:8e:1a:45:f1:a9:71:be:6e:8e:af:82:c1:2c:20:21:56:4e:
         37:8e:1b:d7:9e:88:91:cf:6d:f5:b1:8d:ad:50:ad:1e:24:53:
         21:50:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----