Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363866303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363866303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          +MkGIuivqIQEnYEOFQTgteQbmYHYY5VIKdxyDWYRKrs=
Subject key identifier:   23:07:0B:A4:FD:A9:7D:7F:88:BF:F3:CA:11:DA:22:DF:EF:78:F3:F5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0D7A6478822D54E78D0D0CB60ADCFEAFCC6D6B04
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363866303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 24 Dec 2024 20:45:32 +0000
ROA not before:           Tue 24 Dec 2024 20:40:32 +0000
ROA not after:            Tue 23 Dec 2025 20:45:32 +0000
asID:                     16909
IP address blocks:        2a14:7584:68f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7a:64:78:82:2d:54:e7:8d:0d:0c:b6:0a:dc:fe:af:cc:6d:6b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 24 20:40:32 2024 GMT
            Not After : Dec 23 20:45:32 2025 GMT
        Subject: CN=23070BA4FDA97D7F88BFF3CA11DA22DFEF78F3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:7e:97:83:b2:71:80:54:48:1d:f9:ec:2d:
                    11:a4:79:0e:4f:94:20:a9:d8:c6:5e:ab:ef:6f:35:
                    a0:b8:75:3c:a8:f8:d1:77:80:48:ca:aa:dc:61:da:
                    6b:74:c1:9e:ca:8e:08:9c:71:91:d0:9f:37:cc:2a:
                    fd:a2:e0:65:da:c6:2e:aa:c2:b1:a6:3c:0a:85:45:
                    5d:be:3a:b4:8e:2c:fd:50:6a:df:e8:fa:cc:57:e5:
                    62:ba:f8:15:f5:73:4a:d9:61:a8:3b:49:93:09:8e:
                    1d:21:8b:c1:48:53:c8:80:44:c4:7b:ed:5e:6d:84:
                    ad:4a:2a:95:f9:f8:f2:bb:bf:c7:47:55:9b:20:f7:
                    1d:b4:8e:b1:93:76:c8:3a:dc:c2:44:c5:f5:b6:82:
                    fa:dc:f1:7c:37:ac:fd:3c:fb:6b:11:fd:54:85:16:
                    fd:82:fc:62:4c:ef:f0:0c:2b:c3:89:d8:eb:18:e4:
                    70:1b:0d:d5:1e:08:20:a7:70:20:fd:32:b6:e3:6a:
                    de:58:8a:31:d8:2b:ac:17:9f:8d:ff:41:63:f8:ec:
                    0e:16:21:49:ba:01:6e:1b:3d:93:f3:f9:06:8c:10:
                    46:d3:3b:7a:35:54:21:80:33:5d:b7:6a:2a:2e:b0:
                    0f:b1:56:e8:d1:b0:0d:36:6e:d1:15:0e:f7:00:6d:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:0B:A4:FD:A9:7D:7F:88:BF:F3:CA:11:DA:22:DF:EF:78:F3:F5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363866303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:68f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:98:53:09:48:e8:05:2a:c2:92:6b:25:55:09:bb:cf:f9:
         79:c5:1f:a9:90:31:cd:34:07:fe:3f:d4:5e:2a:58:6a:03:08:
         69:b9:dd:bf:f9:b0:1a:2a:cf:b4:03:f8:cd:2c:b7:a5:c5:cb:
         b5:f3:54:84:b3:e2:a1:dc:60:fc:1d:7b:a3:6d:68:eb:e9:c4:
         b8:b6:df:68:f5:c3:7e:34:05:68:85:29:df:b4:6c:ac:77:34:
         3d:6e:c7:81:79:74:8c:6b:3a:72:34:3e:22:89:43:b3:f2:0d:
         a7:7f:f5:b8:4f:c5:9e:3c:a4:cc:dc:6e:25:c0:7e:ef:bd:68:
         53:f5:6a:6f:fa:a8:71:eb:b4:d5:9f:27:6e:66:04:3f:39:1b:
         26:5b:f1:e8:b8:a2:6e:0e:12:ec:42:9f:f5:dc:ba:11:ff:d3:
         d1:d1:75:5a:02:78:29:49:cb:54:9a:3a:aa:f6:9a:06:70:4f:
         ad:72:7a:c2:7f:74:36:9f:82:c3:b5:16:ac:0e:ab:a8:78:44:
         14:dc:66:6e:dd:9c:ca:ac:c8:e5:b4:e0:8e:42:8a:20:92:35:
         9f:0a:b5:f6:75:b5:fe:a6:de:9a:bb:b5:30:39:0a:15:09:00:
         57:28:f0:ba:ea:72:5c:42:07:7e:1c:76:eb:0c:a7:89:cf:ee:
         cd:94:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----