Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363961303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          gC0ebEk25kAuw9/TnaArYskK0npxunyrIKhodG/fB7w=
Subject key identifier:   1A:B2:56:31:01:83:30:F6:09:9C:1C:C9:F4:73:6A:32:80:C4:61:0D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       12553BE004FAC952493929A11C2FE60B76D11C8E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 24 Jan 2025 11:27:58 +0000
ROA not before:           Fri 24 Jan 2025 11:22:58 +0000
ROA not after:            Fri 23 Jan 2026 11:27:58 +0000
asID:                     16909
IP address blocks:        2a14:7584:69a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:3b:e0:04:fa:c9:52:49:39:29:a1:1c:2f:e6:0b:76:d1:1c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 24 11:22:58 2025 GMT
            Not After : Jan 23 11:27:58 2026 GMT
        Subject: CN=1AB25631018330F6099C1CC9F4736A3280C4610D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:f4:d9:7f:c6:c9:28:b6:9d:c4:f2:a2:cc:
                    4c:62:ac:3c:d4:0e:9a:a8:0c:1f:42:1c:b8:ba:be:
                    2c:81:63:e1:e6:d5:35:1a:52:1a:22:2f:18:99:83:
                    ff:c9:3d:9e:9c:f6:5f:be:8d:41:6c:56:e1:71:ed:
                    5f:d7:9c:30:d6:04:ff:2f:d7:15:06:59:82:4f:05:
                    31:65:fa:98:1b:fb:13:c2:49:3a:6d:51:a2:df:da:
                    4a:95:01:51:87:bb:81:66:dd:ae:ce:2f:12:e1:1e:
                    fb:d0:b3:98:41:45:a5:02:ee:86:d7:71:a6:13:a5:
                    4a:1b:43:36:d3:81:08:dc:a2:35:13:54:a0:5e:65:
                    06:40:5c:cd:7f:17:18:cc:2a:f0:5c:e9:92:a4:e8:
                    d0:16:c4:07:5b:e7:0e:21:98:d3:ad:57:62:3d:c5:
                    91:37:ed:4d:da:42:d8:b0:76:0d:cb:d8:55:52:9a:
                    67:a2:8e:9f:c3:1e:d7:02:e7:da:60:63:ea:92:58:
                    fa:29:7d:04:4c:02:0f:2e:2c:68:69:25:3f:7c:1c:
                    18:bd:26:42:db:60:6b:7d:c0:e9:ac:43:18:42:37:
                    ac:0f:07:86:0c:da:2c:94:9f:db:81:6f:66:b3:02:
                    6c:42:0d:33:d6:8a:5b:36:c8:9f:37:bd:2e:6f:9f:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:56:31:01:83:30:F6:09:9C:1C:C9:F4:73:6A:32:80:C4:61:0D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363961303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:69a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:a9:e9:72:d9:6f:d3:d6:fa:04:2e:fe:72:79:87:98:7a:
         49:56:cb:d4:58:6f:9d:f5:8c:b8:a6:5e:74:72:ad:75:d4:a8:
         e6:66:c0:8a:76:52:ba:81:c8:f1:84:f4:e5:d7:cf:2e:3c:3a:
         80:25:f6:a0:97:72:67:a1:f7:31:fc:f4:7e:0d:e5:91:b3:d3:
         95:42:4b:f9:9d:9c:a3:9a:e6:56:40:61:11:af:7f:84:08:b3:
         af:2d:6c:72:bb:4e:18:87:e9:35:45:94:19:e1:b5:21:b5:73:
         30:4d:c4:46:64:a5:ca:71:1a:2e:c7:07:8e:03:2a:c5:24:28:
         5f:56:b2:41:5c:fa:35:c2:9a:98:8c:3d:57:de:6b:45:19:63:
         41:a0:30:c9:c1:20:5f:9e:1a:e0:0d:9a:58:c9:4d:44:03:e5:
         c8:eb:f4:14:d1:1d:0a:17:28:9f:25:da:49:fc:05:14:b9:19:
         3d:3d:ea:6a:7a:a5:3f:19:d9:c2:5e:b2:61:7b:30:80:30:c2:
         c7:4c:de:bd:79:e8:a5:3d:e0:ae:51:77:e7:85:cf:61:12:f7:
         11:b5:5f:87:5f:1d:4f:95:c8:14:ac:d8:d1:a6:00:f9:cd:0b:
         19:67:84:b2:1b:2a:fa:8a:21:ec:66:b0:e4:a0:f2:cc:b3:da:
         84:8f:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----