Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366666303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          lZykiPLAHMDeKoGWOMseW30kRSdbog2niOrk2fgztLc=
Subject key identifier:   C8:EF:39:3C:DE:8E:F5:AF:19:EC:AB:C1:AD:41:A3:71:BE:CB:60:20
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1E7A24C2350E4E5DDFD1FB146F22B24FB686EEED
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 10 Feb 2025 15:03:40 +0000
ROA not before:           Mon 10 Feb 2025 14:58:40 +0000
ROA not after:            Mon 09 Feb 2026 15:03:40 +0000
asID:                     16909
IP address blocks:        2a14:7584:6ff0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7a:24:c2:35:0e:4e:5d:df:d1:fb:14:6f:22:b2:4f:b6:86:ee:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 10 14:58:40 2025 GMT
            Not After : Feb  9 15:03:40 2026 GMT
        Subject: CN=C8EF393CDE8EF5AF19ECABC1AD41A371BECB6020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:b4:86:ed:e7:69:9b:c1:56:33:2e:c4:5b:
                    87:07:69:21:e9:0a:75:8b:37:03:a3:e6:1f:0d:9e:
                    d3:ce:fd:b5:a0:cf:81:28:1b:ff:a2:b2:df:7f:66:
                    11:b9:24:50:f1:63:b2:9a:d8:ea:9a:86:f5:fb:7c:
                    fc:33:15:d7:44:c2:09:74:03:f8:d5:03:56:ba:33:
                    ff:5a:0d:d2:a5:fd:a1:9f:60:4e:1b:48:8c:3e:15:
                    5a:0e:20:4c:18:7c:57:35:db:13:d8:e9:09:c7:c1:
                    62:97:e4:86:20:23:94:4d:f7:f0:74:38:72:29:8a:
                    67:f3:6b:ad:25:db:e2:02:b1:f9:99:26:fc:cc:89:
                    ff:78:8f:7d:cb:70:82:ab:9b:b0:7b:59:9b:72:6b:
                    64:0b:20:91:2f:a0:32:e9:b7:d8:5f:9a:98:54:1f:
                    ce:bb:ca:51:65:5a:cf:f1:88:06:ec:f6:c4:d0:86:
                    3e:78:89:0b:41:0e:ed:33:aa:ad:e2:2a:63:ef:a9:
                    a4:41:ff:89:e8:9e:73:7c:ea:91:3f:aa:15:5e:9f:
                    12:15:1d:f2:3e:4e:fe:96:40:a6:b5:a4:cc:5a:6a:
                    0c:c8:e7:b0:18:06:f8:3d:d1:78:a0:6f:32:75:be:
                    57:f0:c7:43:af:a4:a4:e6:ec:00:03:ef:59:d3:44:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:39:3C:DE:8E:F5:AF:19:EC:AB:C1:AD:41:A3:71:BE:CB:60:20
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6ff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:fa:34:9b:71:75:57:af:aa:f4:c2:dd:fd:9d:aa:c4:8a:
         32:8c:7a:56:31:71:9f:7a:57:76:5a:b5:60:9a:8e:69:4a:36:
         2d:f8:a8:f6:3d:ed:a3:31:06:a3:d1:34:75:df:9b:f3:df:dc:
         bf:0e:11:d4:25:c2:3a:72:ff:f5:d1:7a:82:4d:96:10:62:07:
         d3:01:46:29:f5:e4:10:1c:43:a3:49:94:51:14:d0:0c:a5:4b:
         af:3b:f6:54:29:ca:00:72:56:d0:a1:5c:58:c6:36:cc:7d:74:
         5e:1b:99:6e:0b:fd:bc:53:e6:c1:95:8a:61:7c:69:5c:a3:7c:
         f0:5a:ab:07:6f:16:3e:17:10:66:93:fd:29:c7:d4:a6:85:30:
         ed:1c:42:ca:ff:7e:43:db:b9:52:85:7a:63:5d:6c:8e:af:06:
         f7:85:98:d4:80:d0:22:dc:14:99:d5:d5:14:3a:75:98:05:94:
         50:21:05:d6:75:77:e4:88:41:44:c1:a6:98:e3:86:8e:39:e7:
         12:7f:bc:e1:74:15:96:a1:d8:d0:ce:35:3c:c4:5b:d0:c1:35:
         dc:5b:1f:5e:49:ac:eb:bc:e1:44:35:a6:0f:5b:73:6e:01:12:
         b1:ab:6f:0b:06:e2:51:08:98:71:b5:ec:53:af:27:ae:6e:1e:
         3d:1f:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----