Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ztGqkJ+9McJZy9O+x1wd8RT5E+0xWd++5yHAyWRDZeA=
Subject key identifier:   76:B9:DB:59:BE:AC:FD:49:12:6F:2C:FC:F2:F9:F6:B4:9A:5E:45:DD
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       247D38EEDFF109D0E4A30E5B432A8F63D1EDF263
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:23 +0000
ROA not before:           Sun 16 Mar 2025 15:43:23 +0000
ROA not after:            Sun 15 Mar 2026 15:48:23 +0000
asID:                     16909
IP address blocks:        2a14:7584:6097::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:38:ee:df:f1:09:d0:e4:a3:0e:5b:43:2a:8f:63:d1:ed:f2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:23 2025 GMT
            Not After : Mar 15 15:48:23 2026 GMT
        Subject: CN=76B9DB59BEACFD49126F2CFCF2F9F6B49A5E45DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:65:75:ae:81:79:38:e5:b1:02:4d:82:d3:
                    d7:ec:b1:81:be:0c:e2:08:22:40:50:40:bf:60:ef:
                    85:ec:a9:2a:db:6a:0e:8a:4f:3d:bb:e3:d7:e4:51:
                    11:80:bb:a9:2c:71:ab:cb:9e:dd:f7:ca:28:15:62:
                    2d:68:68:57:fd:d8:b2:b3:eb:a9:1f:ca:51:ee:5e:
                    b0:3c:9b:d2:34:94:b5:21:6b:82:cb:43:b4:b8:5e:
                    a3:aa:25:04:29:1f:d7:e7:60:86:4d:d8:08:3f:6e:
                    e0:d4:c4:a7:64:ec:13:62:73:2a:1d:87:6d:c7:ab:
                    6e:83:87:2f:b0:6e:d8:bf:1e:82:c2:ca:86:a3:d7:
                    1d:39:7a:ee:4d:79:56:ff:0a:cf:0c:01:68:47:08:
                    f5:f3:4a:53:36:b5:b6:d8:cd:db:73:5e:0e:fc:77:
                    cb:a2:4d:8d:fa:23:1e:87:11:62:61:1e:d8:2d:f8:
                    02:24:d2:d2:68:06:31:0a:da:66:75:f9:f1:a9:78:
                    b8:45:66:06:b1:d8:a7:2c:a1:84:ed:a6:9d:ae:61:
                    48:98:47:3e:ef:e8:86:79:50:54:56:1e:83:5c:9e:
                    93:cc:68:3e:56:51:48:ab:bd:05:ae:ae:ee:f1:2e:
                    3b:e8:32:bc:df:13:d0:dd:53:b0:7b:3a:48:90:fb:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:DB:59:BE:AC:FD:49:12:6F:2C:FC:F2:F9:F6:B4:9A:5E:45:DD
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6097::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:76:68:7a:d9:ac:41:ba:ed:b7:41:85:11:4a:75:89:6d:
         63:8d:77:98:fa:39:92:1d:a0:ba:86:2a:f0:dc:f9:d3:2e:a2:
         4d:39:37:83:03:d7:07:03:9f:a1:b0:9f:c2:1a:24:f0:8a:05:
         bc:ab:eb:62:a2:0b:bd:0b:96:5d:2a:de:83:84:f2:64:31:4e:
         b2:e1:96:d6:94:ee:0b:f9:64:bf:80:28:36:78:df:12:ab:a1:
         97:1d:c7:f7:9d:21:81:96:bc:98:88:f2:c6:2a:95:a1:b1:2a:
         09:d4:89:7b:56:49:72:51:1a:c6:cf:9f:2e:c3:3e:bb:2f:04:
         04:88:54:71:0a:0d:2d:68:18:02:34:f8:02:12:4e:8f:ef:1e:
         53:79:d4:f0:5b:15:53:55:d2:7e:d8:de:f9:83:7f:46:d0:7f:
         88:64:66:bd:ed:5e:c8:2e:7b:42:8b:29:3c:7d:8e:7b:03:2d:
         09:66:71:f1:cf:d6:7a:a5:3a:a0:b4:89:a8:79:7c:48:30:37:
         70:1d:57:0f:19:08:dd:3b:22:7e:f4:8f:46:9e:cd:c1:ef:83:
         c6:04:30:41:53:cf:40:1c:e9:15:15:e4:1e:86:97:2d:43:ab:
         42:90:29:94:40:2f:17:03:ad:a3:9e:50:15:35:d9:e6:c0:6d:
         21:96:9e:ed
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUJH047t/xCdDkow5bQyqPY9Ht8mMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQzMjNaFw0yNjAzMTUxNTQ4MjNaMDMxMTAvBgNV
BAMTKDc2QjlEQjU5QkVBQ0ZENDkxMjZGMkNGQ0YyRjlGNkI0OUE1RTQ1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAGV1roF5OOWxAk2C09fssYG+
DOIIIkBQQL9g74XsqSrbag6KTz2749fkURGAu6kscavLnt33yigVYi1oaFf92LKz
66kfylHuXrA8m9I0lLUha4LLQ7S4XqOqJQQpH9fnYIZN2Ag/buDUxKdk7BNicyod
h23Hq26Dhy+wbti/HoLCyoaj1x05eu5NeVb/Cs8MAWhHCPXzSlM2tbbYzdtzXg78
d8uiTY36Ix6HEWJhHtgt+AIk0tJoBjEK2mZ1+fGpeLhFZgax2KcsoYTtpp2uYUiY
Rz7v6IZ5UFRWHoNcnpPMaD5WUUirvQWuru7xLjvoMrzfE9DdU7B7OkiQ+xo5AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUdrnbWb6s/UkSbyz88vn2tJpeRd0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzOTM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRglzAN
BgkqhkiG9w0BAQsFAAOCAQEAJth2aHrZrEG67bdBhRFKdYltY413mPo5kh2guoYq
8Nz50y6iTTk3gwPXBwOfobCfwhok8IoFvKvrYqILvQuWXSreg4TyZDFOsuGW1pTu
C/lkv4AoNnjfEquhlx3H950hgZa8mIjyxiqVobEqCdSJe1ZJclEaxs+fLsM+uy8E
BIhUcQoNLWgYAjT4AhJOj+8eU3nU8FsVU1XSftje+YN/RtB/iGRmve1eyC57Qosp
PH2OewMtCWZx8c/WeqU6oLSJqHl8SDA3cB1XDxkI3TsifvSPRp7Nwe+DxgQwQVPP
QBzpFRXkHoaXLUOrQpAplEAvFwOto55QFTXZ5sBtIZae7Q==
-----END CERTIFICATE-----