Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366661303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366661303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          d9UF5sWNf46nz9AYbX7W/ZTkfB+zh+HQWXUjo3PaGAo=
Subject key identifier:   78:E4:D2:3E:4D:EA:22:BE:BA:3E:19:7E:70:D9:EA:78:62:97:7B:59
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2786D75107E4BDFBC13230707F696B5541A23E35
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366661303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 10 Feb 2025 15:03:11 +0000
ROA not before:           Mon 10 Feb 2025 14:58:11 +0000
ROA not after:            Mon 09 Feb 2026 15:03:11 +0000
asID:                     16909
IP address blocks:        2a14:7584:6fa0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:d7:51:07:e4:bd:fb:c1:32:30:70:7f:69:6b:55:41:a2:3e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 10 14:58:11 2025 GMT
            Not After : Feb  9 15:03:11 2026 GMT
        Subject: CN=78E4D23E4DEA22BEBA3E197E70D9EA7862977B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:61:96:b1:ab:44:5f:bd:a2:a8:82:ca:a4:
                    5e:5d:81:f5:aa:31:81:82:91:3f:ad:ab:2d:3d:5a:
                    27:24:2e:4d:77:0e:f5:ca:73:fe:f2:c3:17:bf:f3:
                    8f:67:50:9a:11:5b:90:70:3f:fa:2d:1b:7d:ca:2c:
                    c9:5f:99:84:91:00:3a:5c:6b:e2:2a:42:74:c1:fd:
                    28:aa:77:a7:a2:7b:64:1b:db:86:d0:d4:19:b2:74:
                    dd:97:ce:58:6c:2d:76:31:b1:72:02:50:19:99:a0:
                    c8:e2:5b:40:35:ec:f8:5b:96:2a:9e:4c:d0:48:71:
                    2a:08:35:65:e0:79:e0:57:29:8c:3a:0c:a6:65:79:
                    fb:88:81:20:b6:12:a7:2b:88:02:00:fd:33:51:d6:
                    ee:0f:02:dc:85:c9:ed:3c:f0:c3:da:eb:35:da:34:
                    7d:7a:8e:9d:83:8d:cd:8b:32:a0:2d:dc:d8:f5:58:
                    3f:d4:00:e5:11:51:1e:56:1c:cd:38:95:8e:a2:20:
                    c3:1e:99:47:8d:6b:9f:15:3d:17:0f:26:62:ed:83:
                    8e:7b:8c:45:4f:cf:84:26:9b:1e:c5:ac:a8:29:45:
                    a8:cf:14:18:71:cf:f0:c4:92:c3:a9:cf:6e:29:6c:
                    f5:a4:b3:7b:d9:31:b2:0d:db:8e:86:c9:6d:d3:a2:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:D2:3E:4D:EA:22:BE:BA:3E:19:7E:70:D9:EA:78:62:97:7B:59
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366661303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6fa0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:34:55:6a:6f:c4:a2:83:1a:b8:16:79:96:30:a7:fc:e5:7d:
         2f:22:3e:32:fd:ab:b2:37:94:f1:4e:8f:60:e7:c9:e3:36:92:
         a9:74:ef:28:5e:60:e4:21:d0:89:39:40:36:31:8d:3a:7a:7e:
         85:57:70:96:38:fa:53:48:27:b7:d4:77:f8:cd:23:ab:8f:27:
         e1:af:32:76:43:da:01:c4:61:ab:83:b6:33:09:7e:89:32:2f:
         c1:11:23:c7:e0:9f:22:32:90:70:23:36:a9:8c:16:50:74:3f:
         ac:7c:0a:b4:d4:83:5b:68:0b:68:24:ac:af:e9:02:06:09:e1:
         23:b1:22:ad:52:15:ca:32:fa:a4:82:a6:51:9c:21:e4:7f:09:
         1b:05:6d:22:0a:81:66:c9:e0:46:42:01:9c:05:83:76:77:10:
         a0:8e:75:a6:2a:c4:02:9d:a7:40:d1:2a:a3:33:e6:6e:cf:c0:
         06:f5:13:6c:f2:44:f6:6b:b8:41:34:47:60:e6:37:b1:15:bb:
         bf:5a:30:00:c1:3c:af:a3:35:78:d9:f4:12:1e:06:5f:eb:88:
         07:af:00:68:3b:19:6a:80:bf:e7:6f:30:42:3d:39:ab:69:37:
         29:34:c1:e9:ca:cb:28:8e:4b:58:ce:67:31:1e:da:8f:53:10:
         55:0c:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----