Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Xy+Be+CSYco0oVlnVXmUt7aKg5Q4RBAOAEZzgqSNDe4=
Subject key identifier:   43:83:75:73:CC:0F:27:6C:41:7C:37:0C:EA:CE:83:07:A9:C3:9C:EE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3518BB80065DB8E5AABABB1008E6F83DB22E93C7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 20:48:04 +0000
ROA not before:           Thu 19 Dec 2024 20:43:04 +0000
ROA not after:            Thu 18 Dec 2025 20:48:04 +0000
asID:                     16909
IP address blocks:        2a14:7584:6a90::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:18:bb:80:06:5d:b8:e5:aa:ba:bb:10:08:e6:f8:3d:b2:2e:93:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:43:04 2024 GMT
            Not After : Dec 18 20:48:04 2025 GMT
        Subject: CN=43837573CC0F276C417C370CEACE8307A9C39CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:7b:0d:84:66:c6:23:10:29:e2:ba:79:74:
                    71:48:9f:25:af:c2:1b:56:d3:a0:c7:d7:13:17:4e:
                    4d:82:ff:5f:20:2c:b6:cd:f6:aa:aa:3c:5b:4f:73:
                    cd:30:9d:e7:e8:84:dd:e9:55:c2:9e:a4:b9:e7:8b:
                    14:f2:9d:de:6b:17:70:a0:66:51:76:37:05:fe:91:
                    e5:49:36:1e:66:ed:4f:3a:86:b2:9c:d8:c3:71:b7:
                    f4:2c:07:ca:a5:84:c3:ab:2b:b5:a7:1d:e6:12:18:
                    96:d7:16:4e:d5:74:a2:c7:75:3e:f1:d5:a4:d3:95:
                    69:6a:44:2c:5e:6d:60:61:ce:09:e8:43:52:06:60:
                    38:b2:d5:20:61:51:ad:92:95:8c:d2:15:f7:2d:9e:
                    55:ea:1d:f2:21:46:11:c9:cf:c0:a2:e0:a4:92:28:
                    94:8f:a7:7d:3c:9c:d8:7f:bc:92:7d:3c:7c:5c:bd:
                    66:70:b6:0b:ba:5e:2b:fa:6e:c4:9a:c6:b0:f1:89:
                    a4:14:a7:36:49:05:31:7e:ef:86:d6:62:3e:4f:82:
                    ec:1e:2f:38:a7:f4:9c:17:d2:95:94:b5:6d:bd:15:
                    1d:cc:97:7a:a2:b4:75:1d:b5:5c:49:fc:03:b9:9c:
                    60:39:d1:ee:a5:6a:04:05:f2:66:9a:12:98:55:10:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:83:75:73:CC:0F:27:6C:41:7C:37:0C:EA:CE:83:07:A9:C3:9C:EE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366139303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6a90::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:c8:77:60:f2:f6:0e:93:d6:08:79:01:02:99:7b:bc:cb:
         16:62:81:7b:8d:fd:99:91:b8:6c:0a:80:dc:f5:6f:96:95:b8:
         1b:8e:29:e0:79:5b:ab:ff:6a:64:ec:13:2f:e4:eb:fc:ce:9c:
         a3:cb:09:82:1b:ad:54:6d:bd:63:f2:13:ad:47:51:7a:43:a0:
         54:c9:f6:98:f4:24:6e:1f:2d:22:0b:bb:40:73:e2:79:0f:7a:
         c4:ee:d4:13:74:00:fd:90:09:a2:16:bb:46:01:4a:5e:5c:2e:
         1c:a6:ec:d3:8d:07:2d:66:61:dc:7e:8d:ed:34:75:6f:14:cc:
         5e:b6:c5:be:06:e7:8e:34:5b:2c:f4:fe:75:a4:a5:4a:05:39:
         e1:17:6f:dd:51:0e:fd:37:86:31:bc:2d:79:60:61:1d:e9:f9:
         8c:4c:5a:d5:86:61:e2:39:7d:85:39:77:4c:00:b9:00:9d:b7:
         04:dd:af:23:97:f3:0a:58:5c:2f:4f:5f:80:03:52:a8:88:87:
         c0:ca:a1:8e:a3:cf:ef:2a:52:f1:29:a1:d4:e8:7d:1f:b9:49:
         38:e0:59:79:b7:1a:ce:53:4b:74:c5:ba:e6:dd:33:ec:fd:8b:
         8d:b8:0e:e2:1a:a2:d5:3b:89:86:9d:10:8a:91:b1:42:41:71:
         0e:c3:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----