Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033383a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          DO9xmAXXHNRINtsRWAUzK4fD3oPJd+wELucwX2yZz00=
Subject key identifier:   E3:97:01:3D:E6:02:85:05:41:80:FC:CF:F6:79:A1:D9:2A:2D:DB:0E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3FA59951DA91189AFEDE870D4A8AD7572A59D545
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033383a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:20 +0000
ROA not before:           Sun 23 Feb 2025 07:54:20 +0000
ROA not after:            Sun 22 Feb 2026 07:59:20 +0000
asID:                     16909
IP address blocks:        2a14:7584:6038::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a5:99:51:da:91:18:9a:fe:de:87:0d:4a:8a:d7:57:2a:59:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:20 2025 GMT
            Not After : Feb 22 07:59:20 2026 GMT
        Subject: CN=E397013DE60285054180FCCFF679A1D92A2DDB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:1e:f4:c0:27:0c:8b:8b:31:76:89:33:15:
                    11:ff:bc:ef:50:f2:a8:9b:37:bc:01:ba:57:08:df:
                    c4:f9:5b:f4:6b:0e:06:0a:6f:07:3e:98:83:ee:de:
                    77:7e:f9:de:20:ff:84:23:6c:17:35:d5:ba:13:53:
                    57:de:ca:84:e7:65:5c:95:d9:08:c2:2a:32:78:bb:
                    c0:cf:a7:9a:c6:f2:f3:5f:d6:de:a1:49:34:9e:1e:
                    e2:ac:af:16:57:08:51:4b:4a:db:c7:35:4b:12:8b:
                    d6:c6:5f:b5:9f:ba:32:34:f3:53:ed:04:47:7b:39:
                    af:65:2c:cc:38:1b:6c:3f:e0:31:1b:ef:df:b7:7d:
                    1b:84:41:7f:d4:68:ca:e6:be:9f:bc:67:b5:d0:6e:
                    4a:cb:4e:c0:88:17:7a:30:5f:1a:de:06:20:4d:39:
                    91:fb:6a:da:37:1d:0e:93:17:ec:a9:41:3d:d8:73:
                    ab:9b:89:40:bd:3e:e1:50:89:00:8c:ba:05:a3:49:
                    ec:76:4c:db:8d:f1:8b:4b:0b:de:54:0a:9f:da:8f:
                    ca:6d:e0:1b:76:2c:49:ab:9c:fb:c5:cb:1c:cc:0e:
                    a9:b7:19:da:4f:b6:4a:c0:36:1e:6f:c2:ee:13:b5:
                    55:61:5b:9c:4f:b9:bb:7f:38:9a:f1:4e:63:b5:5e:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:97:01:3D:E6:02:85:05:41:80:FC:CF:F6:79:A1:D9:2A:2D:DB:0E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033383a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6038::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:5e:c0:ff:05:25:66:66:5d:0b:71:06:c7:d3:c0:00:a6:
         ee:9e:24:40:a9:83:cd:59:36:46:65:f3:24:01:75:97:04:50:
         45:48:85:00:a7:58:c3:39:16:f0:5a:91:d4:b4:b9:29:68:6f:
         60:70:3e:b2:77:a2:ae:83:ba:f5:4c:c1:f1:7f:b7:31:e1:62:
         24:fd:80:a0:61:72:ef:cd:14:7e:96:b3:99:ba:ee:13:79:59:
         45:aa:23:1f:a4:0c:70:3f:b9:79:dd:ed:22:63:fd:f9:8f:a5:
         62:b1:c4:e0:87:9e:41:30:80:b3:78:cc:47:16:a4:26:d0:38:
         17:82:54:46:0f:57:d4:56:01:ad:31:28:b4:9a:a6:af:5e:b1:
         e1:9a:93:3c:a0:66:5e:57:62:d2:af:d7:cb:79:32:d8:6b:10:
         93:6a:8f:3a:dd:6b:aa:9c:b9:8d:5e:88:18:9a:88:6e:6f:db:
         16:97:11:55:41:e1:03:64:0c:c4:68:1a:66:26:b4:e0:d8:a9:
         15:ce:e3:03:9a:43:4d:05:90:96:f8:09:f4:e5:af:01:94:83:
         e6:33:67:f6:17:e5:48:b1:16:95:4a:b4:e7:24:5d:ee:1f:82:
         e5:db:5a:c9:75:62:81:c7:90:e3:68:ae:6f:e3:2c:4e:ce:9f:
         34:c7:58:f4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUP6WZUdqRGJr+3ocNSorXVypZ1UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzU0MjBaFw0yNjAyMjIwNzU5MjBaMDMxMTAvBgNV
BAMTKEUzOTcwMTNERTYwMjg1MDU0MTgwRkNDRkY2NzlBMUQ5MkEyRERCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ax70wCcMi4sxdokzFRH/vO9Q
8qibN7wBulcI38T5W/RrDgYKbwc+mIPu3nd++d4g/4QjbBc11boTU1feyoTnZVyV
2QjCKjJ4u8DPp5rG8vNf1t6hSTSeHuKsrxZXCFFLStvHNUsSi9bGX7WfujI081Pt
BEd7Oa9lLMw4G2w/4DEb79+3fRuEQX/UaMrmvp+8Z7XQbkrLTsCIF3owXxreBiBN
OZH7ato3HQ6TF+ypQT3Yc6ubiUC9PuFQiQCMugWjSex2TNuN8YtLC95UCp/aj8pt
4Bt2LEmrnPvFyxzMDqm3GdpPtkrANh5vwu4TtVVhW5xPubt/OJrxTmO1XqzbAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU45cBPeYChQVBgPzP9nmh2Sot2w4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMzM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgODAN
BgkqhkiG9w0BAQsFAAOCAQEAO3FewP8FJWZmXQtxBsfTwACm7p4kQKmDzVk2RmXz
JAF1lwRQRUiFAKdYwzkW8FqR1LS5KWhvYHA+sneiroO69UzB8X+3MeFiJP2AoGFy
780UfpazmbruE3lZRaojH6QMcD+5ed3tImP9+Y+lYrHE4IeeQTCAs3jMRxakJtA4
F4JURg9X1FYBrTEotJqmr16x4ZqTPKBmXldi0q/Xy3ky2GsQk2qPOt1rqpy5jV6I
GJqIbm/bFpcRVUHhA2QMxGgaZia04NipFc7jA5pDTQWQlvgJ9OWvAZSD5jNn9hfl
SLEWlUq05yRd7h+C5dtayXVigceQ42iub+MsTs6fNMdY9A==
-----END CERTIFICATE-----