Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          imzC5zfi4DUcZuaatAHp4Voow8EW3tzS7ijeY/01oWg=
Subject key identifier:   57:B6:29:44:C6:A1:FB:88:64:2F:F6:FA:36:F7:04:5F:48:4C:CB:2A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2B51CF798FFC038A5D5641468C012678DB5AAB57
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:58 +0000
ROA not before:           Sun 23 Feb 2025 07:53:58 +0000
ROA not after:            Sun 22 Feb 2026 07:58:58 +0000
asID:                     16909
IP address blocks:        2a14:7584:6031::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:51:cf:79:8f:fc:03:8a:5d:56:41:46:8c:01:26:78:db:5a:ab:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:58 2025 GMT
            Not After : Feb 22 07:58:58 2026 GMT
        Subject: CN=57B62944C6A1FB88642FF6FA36F7045F484CCB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:10:7a:4a:a3:6f:22:58:dc:60:4c:42:ad:
                    e1:3e:2a:a9:07:2b:a7:4c:a4:7d:e0:d9:16:8a:69:
                    8b:82:ce:b9:5f:36:8d:e0:0e:c6:75:06:f5:f8:74:
                    97:0e:5a:71:d6:2a:6a:2e:7c:e6:37:1d:11:1c:90:
                    6b:f0:c6:3c:b8:5b:b1:6a:19:4b:7f:be:b8:ad:b3:
                    29:2e:e3:ea:82:82:79:87:d1:8a:07:26:b1:bf:36:
                    8d:85:7d:12:ec:e4:8a:87:a5:04:e2:10:13:53:52:
                    b6:b1:57:a2:ea:d7:85:86:f9:55:12:46:98:9b:b0:
                    54:28:5b:93:ad:4d:e5:15:14:0a:57:86:49:4a:18:
                    f2:4f:f3:81:3e:25:0b:c8:12:24:91:bc:b3:41:92:
                    eb:8d:df:da:65:d8:0e:fb:40:f4:10:47:af:a3:ac:
                    04:0b:8c:cd:2a:84:12:a8:14:eb:a0:ca:47:28:32:
                    c5:d2:80:d0:9f:86:53:55:2c:61:07:88:f6:86:bd:
                    59:b9:dc:1d:e6:95:af:53:42:f6:a0:4d:e8:e4:4f:
                    5b:63:74:74:d9:6a:dd:64:bd:b0:24:92:0c:69:36:
                    f0:50:9d:65:77:8c:8c:9d:b8:e0:68:f7:f5:0b:04:
                    0a:8b:00:21:9d:1e:04:27:4b:8a:e8:64:1f:1c:ec:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B6:29:44:C6:A1:FB:88:64:2F:F6:FA:36:F7:04:5F:48:4C:CB:2A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6031::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:3c:88:60:12:87:6a:bb:09:45:e9:c7:ce:3d:ff:12:64:
         e6:16:4b:32:58:18:c0:d2:d2:e5:66:24:fe:06:8b:17:f4:44:
         3f:6a:51:4a:72:a5:c7:54:ed:2c:3d:74:79:b5:79:17:3a:e0:
         57:19:16:8a:56:0f:e2:37:c8:79:43:9a:21:7b:9b:e7:cb:58:
         17:94:76:d3:bf:ec:40:02:19:85:07:99:eb:8d:74:08:ce:fc:
         e4:b1:0c:8b:53:84:a0:95:c4:78:91:15:6b:8d:1d:b8:6c:5f:
         81:a9:23:07:56:9b:c5:23:2a:ba:d2:fc:a8:31:f3:b4:d0:2b:
         27:db:15:39:0f:da:eb:84:c2:43:5c:f7:1e:fd:38:98:5d:ff:
         67:b5:64:b6:79:9d:aa:3d:c3:07:aa:88:de:b6:c4:ab:94:41:
         41:8a:83:6f:1f:c0:4c:c3:cd:c4:44:56:b4:f3:06:ab:e1:be:
         90:cf:b8:81:ae:2e:06:2c:18:ad:12:b1:b8:8d:b9:e0:8f:a8:
         f1:57:27:9c:e2:3c:9c:71:93:3f:8f:1f:56:a9:14:45:21:8c:
         89:a0:4c:0b:80:8d:b8:53:73:f7:20:04:76:48:82:b9:bc:64:
         3f:56:a0:15:20:e3:56:ce:27:59:8f:f3:56:7a:84:00:2f:66:
         07:e1:7d:ac
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUK1HPeY/8A4pdVkFGjAEmeNtaq1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzUzNThaFw0yNjAyMjIwNzU4NThaMDMxMTAvBgNV
BAMTKDU3QjYyOTQ0QzZBMUZCODg2NDJGRjZGQTM2RjcwNDVGNDg0Q0NCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwRB6SqNvIljcYExCreE+KqkH
K6dMpH3g2RaKaYuCzrlfNo3gDsZ1BvX4dJcOWnHWKmoufOY3HREckGvwxjy4W7Fq
GUt/vritsyku4+qCgnmH0YoHJrG/No2FfRLs5IqHpQTiEBNTUraxV6Lq14WG+VUS
RpibsFQoW5OtTeUVFApXhklKGPJP84E+JQvIEiSRvLNBkuuN39pl2A77QPQQR6+j
rAQLjM0qhBKoFOugykcoMsXSgNCfhlNVLGEHiPaGvVm53B3mla9TQvagTejkT1tj
dHTZat1kvbAkkgxpNvBQnWV3jIyduOBo9/ULBAqLACGdHgQnS4roZB8c7OCdAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUV7YpRMah+4hkL/b6NvcEX0hMyyowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMzMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgMTAN
BgkqhkiG9w0BAQsFAAOCAQEAc8w8iGASh2q7CUXpx849/xJk5hZLMlgYwNLS5WYk
/gaLF/REP2pRSnKlx1TtLD10ebV5FzrgVxkWilYP4jfIeUOaIXub58tYF5R207/s
QAIZhQeZ6410CM785LEMi1OEoJXEeJEVa40duGxfgakjB1abxSMqutL8qDHztNAr
J9sVOQ/a64TCQ1z3Hv04mF3/Z7Vktnmdqj3DB6qI3rbEq5RBQYqDbx/ATMPNxERW
tPMGq+G+kM+4ga4uBiwYrRKxuI254I+o8VcnnOI8nHGTP48fVqkURSGMiaBMC4CN
uFNz9yAEdkiCubxkP1agFSDjVs4nWY/zVnqEAC9mB+F9rA==
-----END CERTIFICATE-----