Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366436303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          CgRvDWGAo/7zR/xG3+9hnzbV6txnLM1+mEXE/PGmIGE=
Subject key identifier:   C4:94:08:91:2F:F3:85:97:F7:16:80:C4:36:1F:D2:D1:B5:C3:CB:A9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3CD0E2ACBE68AA36DB18912EB1B5B72254300CDC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:34 +0000
ROA not before:           Thu 06 Feb 2025 19:23:34 +0000
ROA not after:            Thu 05 Feb 2026 19:28:34 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:e2:ac:be:68:aa:36:db:18:91:2e:b1:b5:b7:22:54:30:0c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:34 2025 GMT
            Not After : Feb  5 19:28:34 2026 GMT
        Subject: CN=C49408912FF38597F71680C4361FD2D1B5C3CBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:76:52:26:bf:e3:9b:6b:20:e7:aa:11:14:86:
                    5e:ca:67:71:df:d8:31:f3:7b:f8:1f:e7:db:7e:da:
                    da:79:b5:39:03:30:72:cd:5a:8f:a0:1d:23:89:cd:
                    d4:04:b5:1f:87:48:29:ff:c1:cc:f5:de:49:0b:b8:
                    96:0c:67:07:a3:c3:99:6c:32:14:37:9e:24:48:ab:
                    d1:b9:d8:d4:e9:e2:74:94:b4:0a:f3:88:1d:ea:60:
                    4e:a6:52:71:68:72:aa:4b:bd:c0:92:60:28:4d:45:
                    01:7d:d1:82:a0:41:64:ec:e3:bd:99:54:38:0c:7f:
                    43:fc:61:84:31:97:22:d0:28:06:34:7a:2b:eb:8d:
                    83:76:36:c6:bb:99:2d:21:3c:1c:09:b5:4a:8c:f0:
                    3d:e9:92:b0:b6:17:82:ce:d0:a5:1c:7e:69:f1:bb:
                    72:e6:62:07:84:e5:da:c9:9e:58:b4:b7:52:b2:30:
                    d0:27:14:3d:fa:78:33:6f:8f:fc:23:ca:19:9a:6a:
                    34:38:4c:77:be:ee:f0:17:e5:53:12:5a:e9:9b:2c:
                    d1:14:b6:fa:06:1f:d8:b5:47:13:2d:8d:3d:fb:77:
                    09:bd:8c:33:b9:c8:bd:ec:a6:42:70:82:23:a8:90:
                    76:44:95:a1:10:35:23:8b:4f:97:f0:12:9b:88:be:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:08:91:2F:F3:85:97:F7:16:80:C4:36:1F:D2:D1:B5:C3:CB:A9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366436303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d60::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:bb:25:2f:67:f0:74:0e:80:85:04:92:07:9f:ed:79:fe:
         42:a8:4d:c1:fc:09:40:b8:0d:07:2a:52:84:1b:e4:cc:9c:c7:
         15:56:b0:9f:d1:83:eb:da:df:87:28:43:3f:c6:29:d0:15:60:
         03:45:04:cd:0c:df:42:46:38:f0:db:da:a9:66:28:2b:35:23:
         f1:37:b0:56:53:12:9a:e5:73:b8:9e:ee:f8:a5:5a:38:49:fd:
         ad:54:ae:43:8a:a7:b1:5d:3e:f4:f8:85:0a:9c:ae:38:4d:c2:
         2d:f8:05:db:8e:24:4f:ee:c8:0b:e7:35:fd:dc:8d:5a:71:da:
         61:81:8f:22:8a:67:5e:7f:89:a9:a7:7d:a1:75:80:7e:e7:ed:
         a8:97:12:e8:6b:e0:76:b3:f7:19:37:d9:52:59:50:96:5a:71:
         73:24:a3:f7:08:03:72:76:38:3f:61:6a:85:11:bc:fd:5f:65:
         0f:fb:b0:9f:b8:a4:d4:e0:91:5a:e1:50:3c:37:05:04:24:01:
         2b:fb:e0:ed:53:b9:3a:c0:53:47:fb:79:86:5a:e6:0a:23:b1:
         90:44:83:57:ec:cf:35:22:ee:1f:1e:20:64:2e:8e:25:5b:d8:
         0e:cf:2d:c8:ca:e0:b7:de:a0:da:9d:31:81:eb:0c:b7:36:dd:
         c6:4b:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----