Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366435303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          KX8b7lEC5Im5PH+P+40nV45diPOC9Lu83wW0/gF7rNU=
Subject key identifier:   B0:FE:C1:D4:6A:CB:5E:71:FB:8A:D4:D1:82:69:6B:AF:2A:B4:93:7B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       38C08D67EBDDC0DB175453DF629CA61CA588BD0E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:27:42 +0000
ROA not before:           Thu 06 Feb 2025 19:22:42 +0000
ROA not after:            Thu 05 Feb 2026 19:27:42 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c0:8d:67:eb:dd:c0:db:17:54:53:df:62:9c:a6:1c:a5:88:bd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:22:42 2025 GMT
            Not After : Feb  5 19:27:42 2026 GMT
        Subject: CN=B0FEC1D46ACB5E71FB8AD4D182696BAF2AB4937B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:01:8b:ab:cc:ac:02:bf:fe:a5:f1:e3:68:
                    af:2d:67:ea:79:4d:4c:a6:0e:dc:cf:44:75:9d:50:
                    0b:17:32:51:a3:5f:b1:45:42:7f:4b:7e:8b:7b:80:
                    58:61:f8:ac:f7:73:9d:41:93:8c:62:81:fc:26:ec:
                    4d:70:5e:b7:f7:8c:5b:30:59:ac:9c:b6:5a:7c:27:
                    a4:c9:79:38:75:a2:b2:f6:42:4d:0b:b8:af:72:b9:
                    70:99:f2:1d:e3:f4:70:c5:22:7c:8b:42:9e:76:65:
                    b2:97:95:7b:38:43:25:a5:0c:60:de:84:8e:d5:22:
                    2b:9a:63:4a:fc:8a:4d:0d:e4:1c:6e:8e:a4:6d:57:
                    42:9e:8b:44:91:f7:7f:87:68:05:60:ba:7b:b0:87:
                    96:81:4f:53:3a:8e:49:83:0c:f7:6d:80:90:dd:9b:
                    5e:a1:2d:bb:bc:d8:b9:79:e6:6c:c9:77:65:ae:e5:
                    57:69:72:88:fc:27:f8:f1:70:41:0b:eb:0a:d3:df:
                    90:36:33:91:09:61:0a:ae:cc:8d:01:20:9a:bf:8c:
                    5d:a8:d3:7d:2b:2a:01:37:51:fa:a2:6d:ec:f8:8f:
                    d9:3c:89:e6:4e:b0:86:75:85:9e:bf:08:18:80:97:
                    e9:35:50:8a:96:c8:29:c1:2e:7b:bc:d4:c1:cc:30:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FE:C1:D4:6A:CB:5E:71:FB:8A:D4:D1:82:69:6B:AF:2A:B4:93:7B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d50::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:b9:6b:57:62:b4:d2:53:d2:32:fb:7b:24:a3:5b:9f:28:
         da:2f:ac:b2:89:72:48:0a:2b:6f:db:a9:80:19:d7:de:24:18:
         40:46:b5:9f:d3:70:af:56:be:1a:e2:ec:5b:b3:c1:6a:87:e4:
         bb:10:f9:41:8b:a3:11:60:99:7d:a0:8b:4a:e3:a6:a4:74:26:
         da:f4:08:78:53:22:78:e7:45:27:38:e8:b3:84:75:b0:b0:10:
         2c:cf:e2:26:d0:84:29:94:5e:1e:2b:fc:3c:1a:03:df:44:f6:
         be:73:33:58:ac:36:b3:c8:48:d0:d8:7b:c7:4a:06:99:ef:be:
         ab:5f:06:c8:6f:20:7c:5f:e8:33:50:41:43:17:36:6b:ff:7f:
         92:8d:7e:2e:6b:67:63:ed:14:bf:9a:44:f7:f1:05:9a:8f:91:
         f9:5d:cc:44:c8:b3:6d:f2:04:a8:11:9b:47:c8:9f:89:21:6c:
         6b:e0:9b:2b:44:cd:59:fe:9d:a4:35:81:82:16:d2:6a:e2:da:
         96:53:16:99:61:e3:1d:4c:ac:e3:f6:68:98:36:03:9f:3e:f9:
         63:59:f1:60:10:85:af:4c:2e:ad:c1:77:e8:0a:f0:7b:74:c4:
         b6:50:d7:95:23:a4:de:4b:ce:57:78:df:b0:66:4c:6c:b2:39:
         fd:5c:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----