Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366462303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Oie9BXdG1VnTqi2ONPotSmCqMxzQhSHUalXXGLOiU4E=
Subject key identifier:   9B:3F:AC:07:DB:87:B4:3A:98:D9:14:74:43:16:58:42:15:47:9A:8C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5C8FD2954F8ADA26AD0651BB63BBE99819C5EE38
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:38 +0000
ROA not before:           Thu 06 Feb 2025 19:23:38 +0000
ROA not after:            Thu 05 Feb 2026 19:28:38 +0000
asID:                     401507
IP address blocks:        2a14:7584:6db0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:d2:95:4f:8a:da:26:ad:06:51:bb:63:bb:e9:98:19:c5:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:38 2025 GMT
            Not After : Feb  5 19:28:38 2026 GMT
        Subject: CN=9B3FAC07DB87B43A98D914744316584215479A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:cc:cd:08:94:b8:24:2c:1f:ae:77:b5:77:
                    ad:0a:20:e4:3e:48:b7:5e:d4:38:56:62:c1:3b:e5:
                    65:cd:af:0f:a3:b2:d9:c0:d7:14:bf:95:72:22:19:
                    ca:78:de:0d:cf:5c:ec:36:f9:42:ca:c2:f2:a6:c0:
                    f4:ae:b5:6f:2b:b3:f5:85:f2:d0:42:5f:d5:26:10:
                    70:4a:71:84:00:4b:47:0b:6a:0d:c4:59:fd:b0:68:
                    ba:89:c9:39:02:4c:72:81:48:55:21:9a:35:6b:b9:
                    d6:8d:c7:b3:13:d4:f4:64:6c:af:63:4d:aa:94:84:
                    ea:00:cf:3e:9e:6e:cb:b3:de:7f:cd:d8:78:d7:9e:
                    c4:78:01:54:c5:08:c8:48:99:77:47:1f:30:76:c3:
                    ea:58:58:21:68:36:33:95:28:38:54:6e:55:77:21:
                    21:b6:e5:a9:d2:c5:fd:ee:98:6b:17:7b:b0:22:97:
                    80:9c:a2:06:d1:15:10:8d:8d:c3:b3:b3:8c:ab:26:
                    d0:75:47:5e:52:de:2d:4a:cd:94:cc:fa:43:20:0c:
                    61:e8:a6:fd:4c:3c:a6:68:96:e6:a2:89:a9:9a:a0:
                    f0:0b:ad:f5:06:69:f8:2b:22:12:15:87:17:5e:8d:
                    18:46:eb:3f:e7:7b:ea:5d:88:dd:95:c1:f0:bb:45:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:AC:07:DB:87:B4:3A:98:D9:14:74:43:16:58:42:15:47:9A:8C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6db0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:33:1a:ff:1c:40:20:20:61:d0:a6:37:a8:64:43:37:c5:e0:
         99:5b:a8:ee:ae:7b:88:66:9c:65:ad:3e:b9:86:18:6c:76:64:
         c7:6e:40:02:90:80:18:c8:11:4b:a7:a1:48:c6:b9:c9:25:41:
         bb:01:ed:c8:4c:e6:de:24:e7:d2:56:db:85:45:ab:04:42:a3:
         3c:29:5e:4f:7e:c0:cc:bf:15:62:83:e3:36:07:5e:a7:41:b5:
         cf:26:2d:03:e2:e3:d8:63:39:4a:52:27:e7:6b:7b:43:ce:dc:
         f6:99:b9:fa:4f:cf:1c:4e:39:c2:ec:1e:57:cc:c4:ef:b4:ec:
         0d:b5:2b:7f:d4:e2:0f:9d:5a:ba:ae:61:98:00:93:c0:21:0a:
         ea:bc:97:05:5a:16:b4:ba:34:06:08:bf:aa:d0:6f:3a:ac:6b:
         02:2c:34:00:71:88:12:0f:2c:bf:e4:42:73:f6:f3:fa:a0:73:
         18:0f:58:98:91:9b:db:7d:8f:d8:68:bb:a6:ed:7b:15:af:2d:
         11:a0:83:16:6f:69:eb:fa:ac:d2:39:d2:58:e1:94:8e:da:84:
         fb:96:f4:97:ce:6d:34:d9:53:46:10:32:64:37:df:ee:01:0b:
         88:27:26:75:85:74:d7:e7:8f:46:a8:eb:f1:98:ca:52:61:02:
         9e:c5:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----