Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366461303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          u9FIATX35syDIY1iCN8bDHdJq0ih9ce9EtI16c32VTM=
Subject key identifier:   91:6F:C1:01:5B:D7:DB:7D:F2:49:8A:30:1B:B5:C1:5D:60:1A:67:DF
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       662911FC7120C10DC8BC6ABD6E500A7AFBA699B9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:37 +0000
ROA not before:           Thu 06 Feb 2025 19:23:37 +0000
ROA not after:            Thu 05 Feb 2026 19:28:37 +0000
asID:                     401507
IP address blocks:        2a14:7584:6da0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:29:11:fc:71:20:c1:0d:c8:bc:6a:bd:6e:50:0a:7a:fb:a6:99:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:37 2025 GMT
            Not After : Feb  5 19:28:37 2026 GMT
        Subject: CN=916FC1015BD7DB7DF2498A301BB5C15D601A67DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:04:ea:18:6b:39:e7:53:84:0f:cc:a8:47:
                    3b:6a:44:e2:66:23:56:ff:d0:fa:29:c1:05:14:04:
                    03:32:35:c8:32:c0:be:6c:c4:3a:b6:82:e9:ec:8a:
                    86:f8:88:6e:e7:36:19:58:bb:c1:fd:87:09:41:59:
                    b5:e1:e9:0a:c7:99:fe:c8:27:aa:98:38:5a:9c:fe:
                    d2:45:ef:91:06:1b:55:d9:9c:4c:c3:7c:d0:52:12:
                    34:d2:09:24:6c:24:f8:d7:06:27:a1:a9:5e:b3:f3:
                    50:1e:73:d3:cc:cb:fd:05:64:74:87:f3:da:41:d6:
                    89:d8:a1:29:14:3d:cf:2c:0a:71:5d:e9:0f:96:08:
                    f3:7c:a1:bb:82:9c:a1:3d:74:e5:eb:ad:50:e1:d6:
                    ff:d7:33:07:90:33:b0:11:4b:90:b7:19:a9:ba:f6:
                    5d:00:0e:86:eb:d0:68:c5:ab:3c:27:4e:55:55:9c:
                    5d:22:90:ea:3b:a8:b8:e5:7c:b7:48:0e:e2:6d:23:
                    63:7e:ab:75:b4:e5:e2:93:8e:90:08:5a:00:ce:69:
                    1f:0b:26:8e:fb:b2:30:e4:44:8d:76:35:d0:5f:2f:
                    8e:05:dc:75:28:1b:b6:60:15:e0:84:66:ad:cc:34:
                    dd:cd:a2:1c:ec:e5:b2:74:c2:41:16:6c:8a:2f:54:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:C1:01:5B:D7:DB:7D:F2:49:8A:30:1B:B5:C1:5D:60:1A:67:DF
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6da0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:dc:44:3c:86:4f:49:8b:dd:db:de:49:9d:a3:75:8e:bd:
         d8:4a:55:9c:a3:48:b0:b9:f7:2e:04:9a:88:4b:0e:58:0f:bc:
         9b:e2:85:dd:2b:f4:79:6a:3d:6f:a7:65:6b:1c:19:5d:58:69:
         6e:25:f3:5f:44:7a:33:78:76:5b:f3:bc:85:cb:54:d6:7f:5f:
         9b:64:dc:4b:2a:78:a9:9d:9a:85:0a:05:31:7a:db:b2:9d:4f:
         e6:4e:74:7c:24:6f:4f:c5:89:5d:35:e9:cf:2a:69:ca:ca:04:
         85:52:c9:8c:a8:fd:9d:b6:db:a8:f8:cf:f0:77:4f:81:3d:b9:
         d2:78:c4:cd:78:82:7a:e7:75:26:42:f6:8f:b4:b6:4b:12:af:
         82:d2:5d:e8:a9:95:56:be:f8:ef:6a:21:5d:86:32:18:e2:af:
         d8:57:fd:27:22:c8:77:7e:bd:f6:a5:5f:02:31:9a:a3:82:a0:
         5b:a3:fb:5d:3b:e2:48:a5:6f:a0:e0:bc:dc:3b:85:6e:2f:3f:
         7b:c8:8c:25:a2:5f:dc:53:3d:7f:14:37:ec:4c:10:82:90:5e:
         55:c0:9b:e6:e7:bc:fd:48:d1:dc:b8:1e:7e:c6:e7:96:44:d5:
         55:88:d7:c1:dd:b1:a1:14:c0:30:75:8c:ec:53:c5:9e:98:10:
         73:5e:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----