Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          WsdXb8GVA+CJXHg97Z9LlZMUE75ArID1x93NFOAIydU=
Subject key identifier:   19:4E:C1:E7:A0:BC:30:51:1B:1D:B7:A7:2D:6D:BE:46:D8:FE:11:4C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       79918888542F9E084FA17A80C8AD0F28B72536DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 24 Dec 2024 20:50:37 +0000
ROA not before:           Tue 24 Dec 2024 20:45:37 +0000
ROA not after:            Tue 23 Dec 2025 20:50:37 +0000
asID:                     16909
IP address blocks:        2a14:7584:6030::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:88:88:54:2f:9e:08:4f:a1:7a:80:c8:ad:0f:28:b7:25:36:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 24 20:45:37 2024 GMT
            Not After : Dec 23 20:50:37 2025 GMT
        Subject: CN=194EC1E7A0BC30511B1DB7A72D6DBE46D8FE114C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:fa:07:76:4c:1b:18:c1:e0:d3:c4:f3:06:
                    e0:0c:70:50:84:61:d2:63:48:45:d4:2e:a1:65:da:
                    e2:40:e1:0f:3d:d8:a3:3c:a3:eb:42:8b:83:c1:fd:
                    8b:9e:2b:8c:f2:01:87:14:80:27:f5:ca:31:50:35:
                    8a:25:fb:9e:48:6a:c3:86:66:32:69:e5:dc:18:c7:
                    c3:27:67:dd:45:74:c3:62:43:16:ec:5d:e6:f4:fe:
                    39:4e:45:9f:4e:33:0a:75:d4:46:df:7c:bc:b8:89:
                    62:50:62:2d:cc:aa:3d:3b:46:6c:97:45:f5:88:9f:
                    50:54:8a:56:ce:25:3d:cf:5b:a0:ee:66:12:53:b8:
                    07:61:b0:c1:74:60:f8:39:2e:3d:fd:16:4b:55:ca:
                    94:fb:b4:5b:fc:2a:09:5c:d1:e7:2a:82:53:c2:e7:
                    a3:06:67:84:5c:57:5e:26:26:86:93:c7:43:1a:4f:
                    d0:61:98:b0:39:99:65:5e:8a:ab:4b:ff:4f:3d:a0:
                    79:6c:30:fb:6e:df:04:42:6a:79:02:66:f9:75:6b:
                    52:a9:11:ef:ce:97:6c:41:a1:a5:02:c2:6d:41:93:
                    b7:c7:b0:bd:f7:26:19:f0:d1:69:57:35:16:62:2b:
                    0a:82:09:8d:c4:34:ed:14:f2:eb:fe:99:fe:de:eb:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4E:C1:E7:A0:BC:30:51:1B:1D:B7:A7:2D:6D:BE:46:D8:FE:11:4C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6030::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:2c:7e:5b:ce:a4:0c:e7:25:be:d6:d2:27:9f:ae:3f:8e:1d:
         69:79:9a:e4:a5:26:f8:47:ee:c8:33:58:21:6e:55:9a:ca:d9:
         57:d6:6e:4f:f4:1e:f7:71:d3:82:d3:f8:0e:67:f4:db:9a:fb:
         b9:8f:7f:d4:92:04:b0:08:ec:ca:b3:c8:ed:95:5b:34:cf:e7:
         08:f3:e2:5c:33:3f:d0:5d:c1:b2:f0:c1:fa:82:7d:ad:4c:45:
         6a:07:e8:2d:50:b9:16:da:c3:ba:dd:3f:d9:91:4b:1c:3b:2b:
         c9:bc:bf:d1:c7:5c:3a:a2:c0:8b:ea:7f:36:2e:93:33:7e:28:
         a9:aa:9b:7d:41:fd:fb:5c:4a:f7:d0:44:67:f2:8f:65:da:f7:
         9f:b6:8e:ad:1b:bc:f1:3e:72:59:4c:9b:b2:84:72:a3:cd:b3:
         61:55:c4:72:48:5e:cc:b4:b8:d1:d6:6f:99:6b:8a:75:67:4b:
         80:ae:de:d6:08:41:16:f9:7f:db:53:27:35:40:99:de:1a:0b:
         b4:7b:7d:84:99:f4:9a:bc:56:ef:11:60:f0:9a:34:80:43:66:
         02:12:10:d8:a1:4a:78:8e:e7:18:71:3d:3a:54:50:09:0f:b3:
         2a:ab:21:95:af:f6:8b:0d:80:10:5d:1a:fb:b6:f6:c6:7c:c6:
         64:4c:43:83
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeZGIiFQvnghPoXqAyK0PKLclNtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjQyMDQ1MzdaFw0yNTEyMjMyMDUwMzdaMDMxMTAvBgNV
BAMTKDE5NEVDMUU3QTBCQzMwNTExQjFEQjdBNzJENkRCRTQ2RDhGRTExNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TvoHdkwbGMHg08TzBuAMcFCE
YdJjSEXULqFl2uJA4Q892KM8o+tCi4PB/YueK4zyAYcUgCf1yjFQNYol+55IasOG
ZjJp5dwYx8MnZ91FdMNiQxbsXeb0/jlORZ9OMwp11EbffLy4iWJQYi3Mqj07RmyX
RfWIn1BUilbOJT3PW6DuZhJTuAdhsMF0YPg5Lj39FktVypT7tFv8Kglc0ecqglPC
56MGZ4RcV14mJoaTx0MaT9BhmLA5mWVeiqtL/089oHlsMPtu3wRCankCZvl1a1Kp
Ee/Ol2xBoaUCwm1Bk7fHsL33Jhnw0WlXNRZiKwqCCY3ENO0U8uv+mf7e64HXAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUGU7B56C8MFEbHbenLW2+Rtj+EUwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgMDAN
BgkqhkiG9w0BAQsFAAOCAQEAByx+W86kDOclvtbSJ5+uP44daXma5KUm+EfuyDNY
IW5VmsrZV9ZuT/Qe93HTgtP4Dmf025r7uY9/1JIEsAjsyrPI7ZVbNM/nCPPiXDM/
0F3BsvDB+oJ9rUxFagfoLVC5FtrDut0/2ZFLHDsryby/0cdcOqLAi+p/Ni6TM34o
qaqbfUH9+1xK99BEZ/KPZdr3n7aOrRu88T5yWUybsoRyo82zYVXEckhezLS40dZv
mWuKdWdLgK7e1ghBFvl/21MnNUCZ3hoLtHt9hJn0mrxW7xFg8Jo0gENmAhIQ2KFK
eI7nGHE9OlRQCQ+zKqshla/2iw2AEF0a+7b2xnzGZExDgw==
-----END CERTIFICATE-----