Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Aogepeg/7Kfq0RE+yEkLvK5pM/fys/KYW2WMfCL5qRc=
Subject key identifier:   D4:46:CC:56:B1:5E:5A:95:F8:34:93:F0:AF:D5:E7:3F:BF:87:31:E9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6BB229C84EA34BF51A70E6B516E5AD141B40C6CE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:23 +0000
ROA not before:           Sun 16 Mar 2025 15:43:23 +0000
ROA not after:            Sun 15 Mar 2026 15:48:23 +0000
asID:                     16909
IP address blocks:        2a14:7584:6096::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:29:c8:4e:a3:4b:f5:1a:70:e6:b5:16:e5:ad:14:1b:40:c6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:23 2025 GMT
            Not After : Mar 15 15:48:23 2026 GMT
        Subject: CN=D446CC56B15E5A95F83493F0AFD5E73FBF8731E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:9f:22:b6:68:41:40:84:7c:52:61:3c:36:
                    17:ab:74:11:6f:49:6c:4f:4a:8d:f9:f0:9a:35:40:
                    f2:13:40:3b:b9:02:47:36:b4:8d:7c:c3:b3:60:58:
                    15:96:48:4d:b5:95:69:5c:b7:79:de:8d:32:6a:67:
                    b9:00:97:f5:dd:50:47:d7:32:4b:62:02:64:86:02:
                    42:52:dd:cd:1a:70:f9:fc:30:74:19:8e:14:73:2b:
                    60:16:02:f7:5e:49:d7:13:a2:72:38:f7:49:7a:0b:
                    76:1d:19:a8:9e:2b:f3:99:83:7a:c7:53:f1:33:17:
                    6f:73:8a:9a:a3:b2:f5:7b:4a:ee:8d:ae:fa:4a:a2:
                    72:6f:27:ab:2d:c9:08:f5:16:e5:1b:39:7c:c7:27:
                    fb:10:eb:d1:0d:65:c3:77:4c:c9:8b:c5:ec:a9:44:
                    40:02:5f:8b:bb:17:82:8d:27:fb:76:2b:37:22:91:
                    6c:d2:10:58:d7:55:43:30:17:3d:e6:a5:3d:20:7f:
                    95:68:41:1f:7e:01:a4:5d:d8:4c:b6:11:3c:ce:e4:
                    bf:a6:80:5c:50:ee:f9:38:24:ca:4d:be:1e:cb:26:
                    89:92:7f:fd:8f:3d:8b:16:a3:95:e3:c7:a2:24:bc:
                    b2:44:4c:62:31:c5:8f:02:eb:f1:73:f9:08:47:a9:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:CC:56:B1:5E:5A:95:F8:34:93:F0:AF:D5:E7:3F:BF:87:31:E9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6096::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:a1:73:b0:42:d1:40:24:45:65:e1:9a:a3:58:ac:1f:7b:
         51:9c:4a:6a:0f:42:5c:fc:b6:96:6e:4f:b8:de:a5:bd:89:30:
         c2:59:77:05:73:d6:5e:e0:df:4c:fd:63:cc:35:63:12:2f:c8:
         d2:52:7a:6c:88:24:60:30:ca:4e:cc:be:c1:2c:ea:67:b7:68:
         fa:89:13:5b:25:a1:0d:0c:83:20:c6:a0:14:2d:6b:49:4c:b5:
         bc:2a:fc:3c:b3:4c:fe:f0:81:11:4e:fe:c2:c8:4c:40:7c:2e:
         02:28:98:ef:b2:5e:c1:c6:ed:65:8a:6d:cd:03:3d:6a:a8:89:
         03:e9:3f:b0:90:50:f5:4c:af:75:db:11:93:97:9f:67:ea:61:
         dc:9a:a7:82:98:d4:f4:7f:28:ee:91:a9:91:5f:36:6e:f4:26:
         f9:c6:dd:57:1a:4d:02:0b:81:d1:8c:f4:e1:33:9b:dc:27:d0:
         a9:ea:7c:cd:ab:5b:52:3a:cd:d0:0b:72:84:6a:d4:0e:88:f2:
         e4:0d:94:6b:ac:5f:fb:25:ac:de:c2:92:d0:ad:05:d0:10:59:
         b1:16:62:c1:f6:41:d3:80:cb:e8:bd:b2:83:04:e9:8f:24:4e:
         7a:0d:18:a6:79:c5:05:56:d2:b2:95:1a:e5:b4:e3:0c:8e:50:
         a4:23:52:cf
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUa7IpyE6jS/UacOa1FuWtFBtAxs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQzMjNaFw0yNjAzMTUxNTQ4MjNaMDMxMTAvBgNV
BAMTKEQ0NDZDQzU2QjE1RTVBOTVGODM0OTNGMEFGRDVFNzNGQkY4NzMxRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDssJ8itmhBQIR8UmE8NherdBFv
SWxPSo358Jo1QPITQDu5Akc2tI18w7NgWBWWSE21lWlct3nejTJqZ7kAl/XdUEfX
MktiAmSGAkJS3c0acPn8MHQZjhRzK2AWAvdeSdcTonI490l6C3YdGaieK/OZg3rH
U/EzF29zipqjsvV7Su6NrvpKonJvJ6styQj1FuUbOXzHJ/sQ69ENZcN3TMmLxeyp
REACX4u7F4KNJ/t2KzcikWzSEFjXVUMwFz3mpT0gf5VoQR9+AaRd2Ey2ETzO5L+m
gFxQ7vk4JMpNvh7LJomSf/2PPYsWo5Xjx6IkvLJETGIxxY8C6/Fz+QhHqf0HAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU1EbMVrFeWpX4NJPwr9XnP7+HMekwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzOTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgljAN
BgkqhkiG9w0BAQsFAAOCAQEAK+uhc7BC0UAkRWXhmqNYrB97UZxKag9CXPy2lm5P
uN6lvYkwwll3BXPWXuDfTP1jzDVjEi/I0lJ6bIgkYDDKTsy+wSzqZ7do+okTWyWh
DQyDIMagFC1rSUy1vCr8PLNM/vCBEU7+wshMQHwuAiiY77JewcbtZYptzQM9aqiJ
A+k/sJBQ9UyvddsRk5efZ+ph3JqngpjU9H8o7pGpkV82bvQm+cbdVxpNAguB0Yz0
4TOb3CfQqep8zatbUjrN0AtyhGrUDojy5A2Ua6xf+yWs3sKS0K0F0BBZsRZiwfZB
04DL6L2ygwTpjyROeg0YpnnFBVbSspUa5bTjDI5QpCNSzw==
-----END CERTIFICATE-----