Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031653a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363031653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Yn0DsLRrEdbOItoOmoK2OMKFK2GvnAahKDd/yKiNylU=
Subject key identifier:   36:78:E3:ED:7D:72:45:DE:96:A0:19:4E:8D:9D:28:7C:33:51:8C:19
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7D6A4F8D73BA9CD65F3CC36EA010C3F8E880FE6B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031653a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 23 Feb 2025 07:57:28 +0000
ROA not before:           Sun 23 Feb 2025 07:52:28 +0000
ROA not after:            Sun 22 Feb 2026 07:57:28 +0000
asID:                     401507
IP address blocks:        2a14:7584:601e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:4f:8d:73:ba:9c:d6:5f:3c:c3:6e:a0:10:c3:f8:e8:80:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:52:28 2025 GMT
            Not After : Feb 22 07:57:28 2026 GMT
        Subject: CN=3678E3ED7D7245DE96A0194E8D9D287C33518C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:31:30:11:2d:12:6f:4f:71:ff:4e:df:5e:
                    9f:fb:17:a4:96:ed:c7:73:87:1a:91:43:7e:7b:3d:
                    02:99:cb:ee:a1:b5:d8:7f:ec:c7:31:31:fe:ec:ab:
                    64:33:e5:7f:70:ff:a4:fc:03:2e:2c:cc:69:c1:43:
                    12:a4:fc:0b:fd:5d:02:90:5f:09:6b:da:0d:15:86:
                    df:fd:b3:d3:90:77:4c:e5:8c:8e:f1:5f:bd:6b:e5:
                    b0:e9:27:a5:fe:94:33:bd:2f:68:e6:b0:b6:38:0d:
                    19:e4:96:cc:12:16:a3:d3:d0:55:a5:4f:0d:ed:46:
                    d3:43:92:d1:b4:8d:48:83:31:fb:4d:f6:30:2f:1d:
                    da:b2:98:0a:72:57:f8:11:d6:ab:4e:d7:42:71:5d:
                    f4:48:fe:d6:ce:d1:55:40:e4:b9:af:82:cf:ce:22:
                    27:2b:5d:d1:5a:45:ea:78:70:8e:53:81:50:1b:06:
                    1a:97:51:fc:ff:7e:11:4a:12:b0:c9:e8:3d:e5:94:
                    fb:84:95:9e:74:d0:08:93:d5:61:02:7d:27:be:2e:
                    54:9d:c3:2c:64:58:a8:49:3f:f3:2d:6b:f4:4e:b6:
                    97:d9:6e:60:54:53:93:45:4d:fd:43:91:a8:d1:4e:
                    85:63:e9:95:a8:e8:c7:e1:eb:da:b8:e6:e1:70:2f:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:E3:ED:7D:72:45:DE:96:A0:19:4E:8D:9D:28:7C:33:51:8C:19
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031653a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:601e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:08:70:57:cf:50:68:67:3a:1e:68:fe:7b:7e:1f:94:2d:96:
         10:a5:fe:e7:3d:6e:da:78:76:36:6b:60:82:6d:8b:51:68:c8:
         f9:82:29:66:da:58:ce:af:f6:ed:31:b3:4b:1c:4e:be:25:1b:
         cc:73:39:d6:4f:54:27:73:37:ac:87:28:61:67:66:df:4b:70:
         e9:4e:78:6b:c8:af:57:84:4b:fb:bc:30:53:78:c4:a7:0e:14:
         f3:df:de:69:23:2d:70:38:b0:04:31:66:7e:59:70:bb:d1:47:
         de:d1:ca:04:f9:90:14:0c:f5:f4:55:f9:11:0a:8e:fe:06:3e:
         d7:b2:68:b3:cb:73:9b:b8:1a:72:2f:e9:93:65:23:20:49:26:
         02:97:32:7b:20:97:c2:ad:4d:d4:f5:cf:35:0f:52:d9:99:9c:
         ef:b6:80:6a:41:3b:3b:9b:74:4a:4c:10:e3:16:c1:b9:e0:cb:
         c5:95:26:b0:14:ab:fe:01:5a:8a:68:1e:c0:3f:93:64:9e:87:
         96:0e:7d:63:c9:00:5f:c3:ae:0d:d0:87:8d:7b:7d:c5:8c:76:
         2e:c8:10:4f:53:00:c5:02:88:ed:e6:58:8b:c1:ae:48:ef:0b:
         e2:0b:b9:41:93:13:fc:4a:a5:8e:00:07:9d:97:53:62:fb:40:
         3d:cb:fd:1f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfWpPjXO6nNZfPMNuoBDD+OiA/mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzUyMjhaFw0yNjAyMjIwNzU3MjhaMDMxMTAvBgNV
BAMTKDM2NzhFM0VEN0Q3MjQ1REU5NkEwMTk0RThEOUQyODdDMzM1MThDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafTEwES0Sb09x/07fXp/7F6SW
7cdzhxqRQ357PQKZy+6htdh/7McxMf7sq2Qz5X9w/6T8Ay4szGnBQxKk/Av9XQKQ
Xwlr2g0Vht/9s9OQd0zljI7xX71r5bDpJ6X+lDO9L2jmsLY4DRnklswSFqPT0FWl
Tw3tRtNDktG0jUiDMftN9jAvHdqymApyV/gR1qtO10JxXfRI/tbO0VVA5Lmvgs/O
IicrXdFaRep4cI5TgVAbBhqXUfz/fhFKErDJ6D3llPuElZ500AiT1WECfSe+LlSd
wyxkWKhJP/Mta/ROtpfZbmBUU5NFTf1DkajRToVj6ZWo6Mfh69q45uFwL7wNAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUNnjj7X1yRd6WoBlOjZ0ofDNRjBkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGAe
MA0GCSqGSIb3DQEBCwUAA4IBAQClCHBXz1BoZzoeaP57fh+ULZYQpf7nPW7aeHY2
a2CCbYtRaMj5gilm2ljOr/btMbNLHE6+JRvMcznWT1QnczeshyhhZ2bfS3DpTnhr
yK9XhEv7vDBTeMSnDhTz395pIy1wOLAEMWZ+WXC70Ufe0coE+ZAUDPX0VfkRCo7+
Bj7Xsmizy3ObuBpyL+mTZSMgSSYClzJ7IJfCrU3U9c81D1LZmZzvtoBqQTs7m3RK
TBDjFsG54MvFlSawFKv+AVqKaB7AP5NknoeWDn1jyQBfw64N0IeNe33FjHYuyBBP
UwDFAojt5liLwa5I7wviC7lBkxP8SqWOAAedl1Ni+0A9y/0f
-----END CERTIFICATE-----