Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          wccGb93yVVXQRRwzivIsD1xYOfycf3FviYeu7FNVsdM=
Subject key identifier:   2D:7B:AF:72:6F:6F:EA:28:E4:4E:D2:2A:E5:78:A1:24:79:24:6B:CA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4C9EDCC4CD0D7AEA12FAA624792C4371C842CD1E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:33 +0000
ROA not before:           Sun 23 Feb 2025 07:53:33 +0000
ROA not after:            Sun 22 Feb 2026 07:58:33 +0000
asID:                     16909
IP address blocks:        2a14:7584:6025::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9e:dc:c4:cd:0d:7a:ea:12:fa:a6:24:79:2c:43:71:c8:42:cd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:33 2025 GMT
            Not After : Feb 22 07:58:33 2026 GMT
        Subject: CN=2D7BAF726F6FEA28E44ED22AE578A12479246BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:11:22:b3:7f:dc:8f:ba:67:89:56:c0:11:
                    af:df:67:40:87:a6:11:3d:cb:11:99:62:02:04:53:
                    bb:f6:7e:ea:7b:63:d6:71:20:01:d8:53:5d:af:f6:
                    27:2c:4e:ee:c6:e3:36:ac:e8:b6:99:83:72:23:95:
                    6e:0b:29:ad:9f:f7:04:3b:02:2c:d5:bb:21:f6:50:
                    ab:26:11:6c:70:bc:00:cd:e3:4f:d0:90:d6:9e:16:
                    b0:39:39:b7:0f:89:61:1e:b9:d8:04:18:a9:2b:2e:
                    af:5a:0d:d3:01:5c:e6:62:c7:fa:2b:ad:6f:1b:79:
                    b1:16:39:ea:d2:86:b0:f0:7d:e2:6d:a3:4e:6a:65:
                    52:d5:c2:0b:17:51:5a:da:fc:a6:66:f1:a8:6f:65:
                    c4:9f:43:7e:61:15:28:db:fc:27:ff:a4:c8:13:22:
                    87:fa:dd:99:7e:d0:43:36:44:86:f6:ed:82:0b:41:
                    13:16:e8:4b:61:41:fe:2a:d6:7b:e2:7f:7d:0e:96:
                    d0:43:2d:74:68:81:7e:6f:cd:1e:f4:5a:b7:73:2c:
                    84:d7:77:4f:d9:d9:2d:7e:de:8e:e3:8b:3b:1a:0b:
                    55:f5:33:c5:9c:f3:28:54:fb:39:d7:65:0d:ce:62:
                    a1:2b:3b:7f:01:56:5c:bb:9b:fa:86:98:92:be:22:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7B:AF:72:6F:6F:EA:28:E4:4E:D2:2A:E5:78:A1:24:79:24:6B:CA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6025::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:1e:f3:18:60:58:83:53:37:1d:b2:06:7c:a4:c6:58:ce:
         69:b6:88:ad:93:8d:dc:79:02:6f:b9:1d:56:50:30:28:43:c3:
         fa:f3:7b:2f:b3:64:ee:57:1a:04:1e:37:bf:29:26:43:55:68:
         2e:54:84:c1:5f:89:9c:67:74:b9:1b:73:f1:11:be:de:a5:10:
         9f:42:b5:79:b9:ed:0a:53:8c:cd:05:de:76:a1:91:7c:bc:77:
         d7:0f:16:df:58:46:70:e7:63:0b:e2:bb:e5:81:1a:4d:f9:43:
         c8:d4:e2:47:bd:0f:64:75:6d:50:c6:fd:c2:61:f2:11:d4:8f:
         59:81:d3:9d:11:30:67:1d:13:6b:44:52:8e:52:14:c2:90:e3:
         6e:be:76:da:67:b0:d8:61:d7:00:fe:fc:d5:a7:72:ce:fa:bc:
         15:7b:31:cd:cb:f7:38:9d:2a:61:96:74:ec:b3:14:04:06:a9:
         27:f5:d5:87:b2:80:14:29:61:ea:49:75:68:e0:e8:bf:7d:ca:
         90:6e:f1:b2:f4:da:37:3d:e3:b3:84:8d:16:a4:5b:d7:98:63:
         b3:68:71:42:8e:62:7b:b4:83:44:fd:31:1e:79:c6:be:33:48:
         ca:dd:ea:e6:5c:6c:96:6c:0c:dd:22:4a:59:90:b7:ae:05:ff:
         c1:a0:46:bb
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTJ7cxM0NeuoS+qYkeSxDcchCzR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzUzMzNaFw0yNjAyMjIwNzU4MzNaMDMxMTAvBgNV
BAMTKDJEN0JBRjcyNkY2RkVBMjhFNDRFRDIyQUU1NzhBMTI0NzkyNDZCQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08BEis3/cj7pniVbAEa/fZ0CH
phE9yxGZYgIEU7v2fup7Y9ZxIAHYU12v9icsTu7G4zas6LaZg3IjlW4LKa2f9wQ7
AizVuyH2UKsmEWxwvADN40/QkNaeFrA5ObcPiWEeudgEGKkrLq9aDdMBXOZix/or
rW8bebEWOerShrDwfeJto05qZVLVwgsXUVra/KZm8ahvZcSfQ35hFSjb/Cf/pMgT
Iof63Zl+0EM2RIb27YILQRMW6EthQf4q1nvif30OltBDLXRogX5vzR70WrdzLITX
d0/Z2S1+3o7jizsaC1X1M8Wc8yhU+znXZQ3OYqErO38BVly7m/qGmJK+Ivb3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQULXuvcm9v6ijkTtIq5XihJHkka8owHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMjM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgJTAN
BgkqhkiG9w0BAQsFAAOCAQEAVe8e8xhgWINTNx2yBnykxljOabaIrZON3HkCb7kd
VlAwKEPD+vN7L7Nk7lcaBB43vykmQ1VoLlSEwV+JnGd0uRtz8RG+3qUQn0K1ebnt
ClOMzQXedqGRfLx31w8W31hGcOdjC+K75YEaTflDyNTiR70PZHVtUMb9wmHyEdSP
WYHTnREwZx0Ta0RSjlIUwpDjbr522mew2GHXAP781adyzvq8FXsxzcv3OJ0qYZZ0
7LMUBAapJ/XVh7KAFClh6kl1aODov33KkG7xsvTaNz3js4SNFqRb15hjs2hxQo5i
e7SDRP0xHnnGvjNIyt3q5lxslmwM3SJKWZC3rgX/waBGuw==
-----END CERTIFICATE-----