Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030383a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          livn78IjloX5PbFkUPttTcDN8jlaTEI15zr1LXlFTd4=
Subject key identifier:   BB:03:54:5F:93:80:39:A9:B9:A2:7E:D3:36:2A:93:B0:30:18:43:E5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7F5BC0DEB31E62B8F27CA9D4160D5215C3519BB4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030383a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:54 +0000
ROA not before:           Sat 15 Feb 2025 21:06:54 +0000
ROA not after:            Sat 14 Feb 2026 21:11:54 +0000
asID:                     16909
IP address blocks:        2a14:7584:6008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5b:c0:de:b3:1e:62:b8:f2:7c:a9:d4:16:0d:52:15:c3:51:9b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:54 2025 GMT
            Not After : Feb 14 21:11:54 2026 GMT
        Subject: CN=BB03545F938039A9B9A27ED3362A93B0301843E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:5c:7a:6d:35:7b:b7:7f:32:ca:0f:01:e5:
                    e4:f8:a8:cc:20:2b:90:69:b2:9b:b7:50:55:43:90:
                    76:83:88:17:01:62:0b:62:ed:f6:56:6e:d2:ef:15:
                    a2:32:24:8b:e0:50:4f:56:7b:df:6c:7d:b1:cf:8c:
                    91:7e:ed:db:72:b6:02:59:cc:73:dd:25:a0:88:0d:
                    5e:cb:e5:1d:9f:a3:4e:55:32:f6:64:b0:38:22:6e:
                    6a:d6:78:32:a2:95:be:d6:d4:19:30:7a:19:6c:16:
                    99:6d:29:77:77:74:06:c8:a5:86:f6:9f:58:70:8d:
                    18:b4:03:23:dd:20:de:a9:f1:e5:2e:5a:47:63:e1:
                    e0:bd:8d:a1:a0:3a:94:f7:d9:c6:ec:b2:a4:6a:9f:
                    93:78:76:69:12:3a:8c:25:cd:8c:d5:59:9f:d4:05:
                    e7:c5:68:a6:79:fe:8f:27:b4:36:60:e4:a7:1b:49:
                    51:1a:ef:fd:60:43:db:cc:90:d7:41:6b:b7:2d:e0:
                    28:62:cd:39:df:de:f9:ed:da:d7:cf:91:40:99:9e:
                    33:b7:20:85:76:e3:b9:02:73:76:3f:b9:87:5a:b4:
                    b8:1a:b4:9a:8e:4a:03:fb:84:77:a1:8d:ae:48:2a:
                    25:95:18:2f:c5:0f:ca:6c:4f:a4:d0:aa:a4:ba:59:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:54:5F:93:80:39:A9:B9:A2:7E:D3:36:2A:93:B0:30:18:43:E5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030383a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:99:0c:cf:e3:e5:c1:79:61:9a:af:33:57:63:a6:e8:b1:
         1e:68:b4:83:80:69:e4:67:12:67:95:15:96:e9:01:31:a4:23:
         b2:63:7a:97:c7:75:9a:08:9d:8e:9c:5c:85:e6:80:03:1c:43:
         aa:f5:a6:a9:64:83:e4:7f:8c:46:f3:32:19:d7:cb:50:64:ab:
         05:98:1e:ff:3f:60:b8:f1:18:ad:56:63:88:61:e8:d1:43:23:
         c8:60:c0:c6:32:b7:d9:13:77:04:8e:b8:23:8d:e4:66:32:7b:
         98:1b:d8:4a:2e:57:da:96:8e:09:fa:b5:70:15:89:68:a4:3c:
         c1:e9:bf:44:c5:85:0d:ce:a0:f0:08:5b:ae:0f:4d:a4:b0:28:
         42:f5:2c:c1:cb:29:48:d3:60:2c:1b:e8:0a:7f:ef:0b:13:a4:
         48:ea:28:fa:2a:bf:49:31:38:c8:ff:6d:62:c5:62:cd:d0:b9:
         22:d1:09:7e:20:c6:0b:97:7f:a2:03:94:67:94:99:ee:a5:7f:
         8b:cd:37:7f:47:c0:d7:0c:13:00:61:5c:56:61:a8:48:e8:cb:
         a1:cb:9a:b3:33:3f:9d:87:ac:73:8f:02:a1:ce:c6:01:fb:26:
         5d:fc:e4:c1:c6:c9:17:7d:28:59:36:a8:9e:8f:1b:c4:2b:3f:
         53:44:97:9a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUf1vA3rMeYrjyfKnUFg1SFcNRm7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMTUyMTA2NTRaFw0yNjAyMTQyMTExNTRaMDMxMTAvBgNV
BAMTKEJCMDM1NDVGOTM4MDM5QTlCOUEyN0VEMzM2MkE5M0IwMzAxODQzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi51x6bTV7t38yyg8B5eT4qMwg
K5Bpspu3UFVDkHaDiBcBYgti7fZWbtLvFaIyJIvgUE9We99sfbHPjJF+7dtytgJZ
zHPdJaCIDV7L5R2fo05VMvZksDgibmrWeDKilb7W1BkwehlsFpltKXd3dAbIpYb2
n1hwjRi0AyPdIN6p8eUuWkdj4eC9jaGgOpT32cbssqRqn5N4dmkSOowlzYzVWZ/U
BefFaKZ5/o8ntDZg5KcbSVEa7/1gQ9vMkNdBa7ct4ChizTnf3vnt2tfPkUCZnjO3
IIV247kCc3Y/uYdatLgatJqOSgP7hHehja5IKiWVGC/FD8psT6TQqqS6WeB3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUuwNUX5OAOam5on7TNiqTsDAYQ+UwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMDM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgCDAN
BgkqhkiG9w0BAQsFAAOCAQEAUD2ZDM/j5cF5YZqvM1djpuixHmi0g4Bp5GcSZ5UV
lukBMaQjsmN6l8d1mgidjpxcheaAAxxDqvWmqWSD5H+MRvMyGdfLUGSrBZge/z9g
uPEYrVZjiGHo0UMjyGDAxjK32RN3BI64I43kZjJ7mBvYSi5X2paOCfq1cBWJaKQ8
wem/RMWFDc6g8Ahbrg9NpLAoQvUswcspSNNgLBvoCn/vCxOkSOoo+iq/STE4yP9t
YsVizdC5ItEJfiDGC5d/ogOUZ5SZ7qV/i803f0fA1wwTAGFcVmGoSOjLocuaszM/
nYesc48Coc7GAfsmXfzkwcbJF30oWTaono8bxCs/U0SXmg==
-----END CERTIFICATE-----