Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          iwjR+aiLvPR2zEYYdk2vomyKe1W36NxTOaju9c9L0v8=
Subject key identifier:   48:F6:D1:4C:91:19:17:33:2E:72:9A:EF:FF:47:DE:02:4C:10:21:39
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       38D34EEEB2E4E2E64AF96910B90DE69D5B18134D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:21 +0000
ROA not before:           Sat 15 Feb 2025 21:07:21 +0000
ROA not after:            Sat 14 Feb 2026 21:12:21 +0000
asID:                     16909
IP address blocks:        2a14:7584:600b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:4e:ee:b2:e4:e2:e6:4a:f9:69:10:b9:0d:e6:9d:5b:18:13:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:21 2025 GMT
            Not After : Feb 14 21:12:21 2026 GMT
        Subject: CN=48F6D14C911917332E729AEFFF47DE024C102139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:60:a9:4c:6b:07:d0:f9:dd:53:99:b5:1d:
                    ff:63:04:00:ef:47:a0:40:04:f7:09:6c:ba:3a:e3:
                    fb:f1:97:aa:6f:58:e7:75:3e:11:81:5c:1d:a4:d8:
                    05:14:b4:c7:8d:92:44:56:8b:8c:7c:59:8f:9a:28:
                    a9:3e:c6:1d:68:49:c2:a1:bc:b8:21:a5:04:0c:86:
                    6a:a6:b8:46:ce:9e:b4:f3:d0:65:05:c5:4e:ba:7a:
                    57:d1:9e:89:21:c2:f8:cf:ad:0a:db:99:1f:63:61:
                    ea:4e:79:18:8d:ca:03:ff:89:56:19:74:bb:fb:86:
                    06:cc:49:a2:25:11:6b:fc:cf:2d:32:14:b2:e4:7b:
                    f8:d9:d2:13:12:8a:53:01:81:cd:96:45:90:ab:8c:
                    56:74:d0:24:e4:9a:6f:af:be:f8:71:68:5f:d8:14:
                    8d:13:e1:8e:aa:cc:41:f1:55:14:c7:f8:22:60:db:
                    dc:c0:8c:79:d2:62:fb:a4:76:ef:5e:6f:11:c7:18:
                    81:a8:30:ef:70:c6:ce:1f:77:65:49:73:32:5a:19:
                    29:ee:b7:74:58:8b:51:79:8a:90:2b:06:c4:be:40:
                    58:54:90:3e:b7:9d:bb:62:72:57:5d:92:72:cb:7c:
                    58:5a:9b:fb:81:7d:5c:7c:a6:ce:b4:12:f2:fc:d8:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F6:D1:4C:91:19:17:33:2E:72:9A:EF:FF:47:DE:02:4C:10:21:39
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:d0:aa:c0:0b:4a:24:42:91:dd:92:ce:7d:88:03:e8:da:8d:
         46:1a:18:3a:e2:8a:27:42:d5:e0:9e:ee:1f:1a:26:be:e3:dc:
         e2:eb:75:fc:36:c2:1e:d5:94:25:aa:24:e9:a5:ea:eb:d7:8c:
         b8:70:2c:77:a1:40:f6:d9:e8:75:64:e5:6c:92:d3:86:b2:ac:
         c4:2b:4d:30:f2:83:78:ae:da:86:41:6d:b8:6f:1b:23:79:52:
         5b:92:ce:3a:d3:37:d3:ad:cf:ea:6b:64:39:83:63:b1:43:ed:
         fc:22:c5:3e:d6:44:fc:8d:10:09:90:2d:91:47:36:7d:0a:eb:
         fa:43:e2:77:69:e0:b2:d0:4a:69:c9:79:cf:20:db:8f:3c:c2:
         fd:ed:86:1d:30:fd:50:25:08:da:99:f3:41:9f:6b:ea:65:b9:
         81:25:c8:a6:bf:22:cb:dd:31:4f:92:d8:7f:53:f9:13:cc:c2:
         a7:d5:50:75:41:23:3f:05:77:c6:dd:3e:e9:77:71:b7:a0:5a:
         fc:58:90:4a:5a:4f:f2:f4:4f:cf:c7:b2:64:07:af:9c:d0:1b:
         6a:b2:a4:fe:76:23:0d:00:36:57:86:c5:61:27:7e:08:da:aa:
         db:75:40:82:c7:06:ba:49:50:f2:c5:72:1b:7c:98:fc:ae:60:
         25:69:da:14
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUONNO7rLk4uZK+WkQuQ3mnVsYE00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMTUyMTA3MjFaFw0yNjAyMTQyMTEyMjFaMDMxMTAvBgNV
BAMTKDQ4RjZEMTRDOTExOTE3MzMyRTcyOUFFRkZGNDdERTAyNEMxMDIxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAt2CpTGsH0PndU5m1Hf9jBADv
R6BABPcJbLo64/vxl6pvWOd1PhGBXB2k2AUUtMeNkkRWi4x8WY+aKKk+xh1oScKh
vLghpQQMhmqmuEbOnrTz0GUFxU66elfRnokhwvjPrQrbmR9jYepOeRiNygP/iVYZ
dLv7hgbMSaIlEWv8zy0yFLLke/jZ0hMSilMBgc2WRZCrjFZ00CTkmm+vvvhxaF/Y
FI0T4Y6qzEHxVRTH+CJg29zAjHnSYvukdu9ebxHHGIGoMO9wxs4fd2VJczJaGSnu
t3RYi1F5ipArBsS+QFhUkD63nbticlddknLLfFham/uBfVx8ps60EvL82LDBAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUSPbRTJEZFzMucprv/0feAkwQITkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMDYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgCzAN
BgkqhkiG9w0BAQsFAAOCAQEApdCqwAtKJEKR3ZLOfYgD6NqNRhoYOuKKJ0LV4J7u
HxomvuPc4ut1/DbCHtWUJaok6aXq69eMuHAsd6FA9tnodWTlbJLThrKsxCtNMPKD
eK7ahkFtuG8bI3lSW5LOOtM3063P6mtkOYNjsUPt/CLFPtZE/I0QCZAtkUc2fQrr
+kPid2ngstBKacl5zyDbjzzC/e2GHTD9UCUI2pnzQZ9r6mW5gSXIpr8iy90xT5LY
f1P5E8zCp9VQdUEjPwV3xt0+6Xdxt6Ba/FiQSlpP8vRPz8eyZAevnNAbarKk/nYj
DQA2V4bFYSd+CNqq23VAgscGuklQ8sVyG3yY/K5gJWnaFA==
-----END CERTIFICATE-----