Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366232303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          W3bzZaNOPd3/QDrkN/hhw3srprlV6ZD4Z4j8scU1R9Y=
Subject key identifier:   A4:F7:6F:51:FF:6C:63:2C:1E:27:DA:D5:1E:B7:0E:2F:AE:CC:0D:1D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2D6B991938CBE8B24E9A37844E36142A996B58D9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 21 Dec 2024 20:45:36 +0000
ROA not before:           Sat 21 Dec 2024 20:40:36 +0000
ROA not after:            Sat 20 Dec 2025 20:45:36 +0000
asID:                     16909
IP address blocks:        2a14:7584:6b20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:99:19:38:cb:e8:b2:4e:9a:37:84:4e:36:14:2a:99:6b:58:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 21 20:40:36 2024 GMT
            Not After : Dec 20 20:45:36 2025 GMT
        Subject: CN=A4F76F51FF6C632C1E27DAD51EB70E2FAECC0D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:3a:18:ae:47:8d:34:6f:ce:70:98:92:d9:
                    de:36:04:33:d1:51:b6:ac:43:50:fe:e4:46:7e:e6:
                    40:5f:87:b1:95:2f:5f:55:c5:48:61:83:91:60:dd:
                    2a:8c:42:cd:12:35:b4:8e:e1:8d:78:3d:bd:9b:74:
                    6e:07:92:f4:92:1a:a7:e0:48:26:49:eb:64:54:fc:
                    14:06:d5:ba:09:a2:fe:38:cd:6e:95:67:b6:7a:80:
                    a2:eb:28:95:1e:c6:9f:60:89:48:26:bd:a2:c2:d3:
                    18:76:f6:7d:a9:59:19:fa:a8:2c:a3:4c:92:67:90:
                    95:23:24:9b:ca:18:b1:41:02:02:12:30:71:c5:ff:
                    36:1e:a5:5d:63:74:68:d6:90:fe:ef:d8:43:38:da:
                    24:06:f1:ca:4f:9f:d4:86:ff:bd:7a:e7:32:14:6a:
                    f6:0a:f6:62:e8:46:c7:d7:6c:da:e5:1e:3e:a9:c0:
                    32:2a:81:df:c4:04:dc:98:56:ec:b9:cc:90:ea:96:
                    a7:da:29:4d:6d:d3:55:12:59:64:73:df:1d:b8:45:
                    25:18:94:e7:ad:70:43:52:a4:d2:d7:74:f8:4b:4f:
                    c3:c6:1b:6b:25:cb:ac:82:a1:65:e8:b7:37:04:8e:
                    3b:a4:06:4b:d9:ef:1a:6d:e7:c2:bd:87:49:83:51:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:6F:51:FF:6C:63:2C:1E:27:DA:D5:1E:B7:0E:2F:AE:CC:0D:1D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6b20::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:2a:62:1b:3a:de:34:f0:72:6f:69:00:c3:48:86:51:75:
         7a:ef:9f:0d:71:ef:6b:37:dd:de:58:c9:35:d9:bc:6a:8b:fa:
         a2:81:06:5b:48:e6:fb:92:3e:d9:33:4d:51:01:73:1b:b4:24:
         33:7b:af:d4:47:01:44:e9:65:bf:21:7b:e8:40:d2:98:f1:4a:
         75:8f:75:5e:b7:2d:65:91:3a:dc:d6:b8:ff:2d:04:3b:23:e6:
         7a:cb:06:8a:b1:e3:90:75:45:69:36:18:eb:bf:4e:10:d1:48:
         83:73:86:1f:a2:17:61:d3:53:05:ef:9e:6b:db:46:de:fb:d5:
         a2:97:3d:03:4b:61:7c:53:64:07:2f:f2:13:d0:38:01:e0:b7:
         96:7b:57:c0:3b:26:d2:95:0e:95:89:5e:0d:f5:56:6d:7a:6b:
         60:64:f3:d5:45:e6:4d:83:d0:97:0c:e0:d1:d7:6c:66:24:57:
         b3:a2:47:6a:2a:4b:6b:56:1e:7b:4b:2e:8c:bc:d6:4b:b2:e0:
         8c:00:77:e0:22:d9:16:54:a7:3b:81:17:dd:44:8b:79:b2:fb:
         0e:11:37:c8:40:06:58:15:12:33:26:31:2f:b7:89:f8:7e:8c:
         a5:ef:f6:c5:44:b3:ed:30:13:4f:55:ed:d5:3d:36:9b:3c:e6:
         e7:32:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----