Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366437303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          0OvNx3mbEB8lMQGNKKN8uRU4yx99ZfWBrKvMHYY6CbY=
Subject key identifier:   EF:AD:E7:99:B1:98:0D:F1:70:49:55:54:EE:64:77:B7:B7:BF:E1:2D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6F2971E9AA63786B64F8B50113EB0DFBA869FD60
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:35 +0000
ROA not before:           Thu 06 Feb 2025 19:23:35 +0000
ROA not after:            Thu 05 Feb 2026 19:28:35 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:29:71:e9:aa:63:78:6b:64:f8:b5:01:13:eb:0d:fb:a8:69:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:35 2025 GMT
            Not After : Feb  5 19:28:35 2026 GMT
        Subject: CN=EFADE799B1980DF170495554EE6477B7B7BFE12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:81:52:54:15:2d:00:ae:fb:6d:d6:42:7d:
                    34:9a:19:04:a5:75:63:8f:57:79:79:9e:8e:ff:3b:
                    be:e8:fa:6e:f4:98:01:68:ca:e7:c1:86:4b:ea:4f:
                    af:59:3b:16:e2:f6:bc:3f:85:15:af:07:26:ad:c4:
                    cc:ff:31:8e:f2:33:b2:8e:65:f9:f8:81:ae:1c:17:
                    6a:ff:f2:02:48:d4:5c:a7:f3:74:b3:45:c5:ee:d6:
                    19:55:16:75:04:e4:35:05:b3:40:5b:4f:29:a0:ba:
                    f5:7b:21:ac:a1:61:d0:b8:89:ee:66:6c:54:69:d7:
                    57:76:73:a5:a2:37:e5:d6:96:5b:e8:b0:da:dc:e6:
                    9d:bf:84:67:c7:44:25:5f:bf:32:f3:b1:6d:1f:21:
                    ac:7b:c9:d1:cc:f0:68:8e:7b:d3:00:fc:bf:a8:02:
                    1f:4e:e7:c4:c3:dd:08:63:af:c3:0a:3c:6a:ef:ec:
                    ed:25:55:75:2d:2a:4f:cf:a9:b1:f4:f0:27:4e:2e:
                    0e:07:78:73:7f:45:16:0f:22:f2:77:ba:47:fc:67:
                    56:5d:ea:ef:fd:83:bf:cb:e0:e2:b3:8d:a7:34:a6:
                    fd:7d:5d:f9:27:35:21:b1:02:7a:02:fd:92:8e:10:
                    0c:f1:51:ee:e5:1f:f0:c8:fd:12:13:8e:00:ab:9d:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:E7:99:B1:98:0D:F1:70:49:55:54:EE:64:77:B7:B7:BF:E1:2D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d70::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:60:56:b4:d8:7a:77:57:92:34:c6:2d:ff:0c:87:b8:e5:a8:
         c4:04:91:58:3b:05:32:eb:be:1c:6a:4b:5b:76:1d:06:ae:47:
         9d:70:eb:4a:27:e3:e5:9a:2d:8c:c7:bf:99:5f:80:4b:bb:b2:
         9c:1d:02:6d:d2:8c:88:12:d6:19:2e:34:cf:3e:a2:ca:6e:9c:
         e2:82:2e:7f:22:cf:31:e2:ec:85:58:6f:32:b2:b7:93:42:eb:
         90:8d:44:ef:37:cd:5e:da:98:5e:e7:28:5e:29:2a:47:5c:c6:
         6c:f5:76:a5:9c:a8:f8:11:25:ff:ae:bf:6c:05:84:56:c0:bd:
         fd:3b:32:61:09:2e:4d:db:c2:92:c2:e6:3f:a6:07:2b:19:d9:
         ca:d5:f2:a4:9b:bf:dd:2d:d7:3d:76:f1:0b:3f:73:f7:88:e0:
         dc:6f:dd:72:ff:a6:d6:76:66:c8:90:27:f1:8c:3f:6c:6b:1b:
         cb:1c:d4:07:b7:32:b8:5b:6e:fd:bf:84:00:e0:a2:52:77:e0:
         54:6a:b2:27:5a:0d:68:f1:f5:20:11:73:9c:06:32:bc:29:ca:
         e8:f3:25:a8:ab:f3:79:58:ea:ee:af:72:0d:18:e8:d0:a3:ee:
         72:67:1f:ca:59:cc:6b:bd:43:9a:54:d5:d9:c3:6c:24:b7:c2:
         db:37:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----