Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          mY8nxcEjX6DYPQPwA8QyzTOZm+3CQxn3l/SlnHDsZQo=
Subject key identifier:   63:A3:0C:E0:AE:FF:7F:D0:C7:88:90:04:D1:66:34:76:E9:AB:E3:C7
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       734677E47874CA1E1F37A0E44ECBAA6AF36905BA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:26 +0000
ROA not before:           Sun 16 Mar 2025 15:43:26 +0000
ROA not after:            Sun 15 Mar 2026 15:48:26 +0000
asID:                     16909
IP address blocks:        2a14:7584:609a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:77:e4:78:74:ca:1e:1f:37:a0:e4:4e:cb:aa:6a:f3:69:05:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:26 2025 GMT
            Not After : Mar 15 15:48:26 2026 GMT
        Subject: CN=63A30CE0AEFF7FD0C7889004D1663476E9ABE3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:05:0d:00:84:1d:e0:80:2c:66:b5:dc:b8:
                    23:90:c2:d1:0d:a9:21:7b:94:6f:74:7e:e2:81:dc:
                    9b:fc:b6:d8:d6:8e:89:7c:42:5b:83:6b:a7:75:24:
                    b4:1d:3c:7b:79:64:de:9c:94:49:3b:ec:32:49:9b:
                    7f:97:60:24:06:20:86:b3:de:ab:a7:a1:60:2b:65:
                    07:ad:08:3a:d4:9f:69:fe:74:93:b4:a9:11:d4:b9:
                    a6:f3:ee:e7:49:46:4a:a2:9e:7d:e2:8a:7a:94:ef:
                    3b:72:6f:ed:1a:2c:bf:ec:f2:48:63:6a:fd:87:0b:
                    af:1c:5b:a9:1b:e6:0c:e0:47:a2:51:69:28:05:43:
                    82:08:89:de:20:d2:0d:08:8f:ae:2a:b1:c0:a7:c0:
                    4a:ae:e7:e5:65:1e:4d:4b:33:3d:aa:68:0b:df:95:
                    59:bd:5e:94:28:f9:f6:6a:69:f0:28:98:ea:6f:f1:
                    59:b6:87:05:c4:36:7c:f8:5f:cf:85:ad:98:22:ab:
                    4b:a8:8a:ae:72:17:7c:27:81:6a:82:b4:79:17:83:
                    56:4c:76:2f:4e:8b:ae:bb:29:6c:8b:26:19:ac:2a:
                    bf:d3:8b:3f:24:30:d0:05:10:16:28:67:46:d3:e9:
                    49:07:c5:a6:2a:c0:c9:b6:d9:ca:dc:86:ca:ea:22:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:0C:E0:AE:FF:7F:D0:C7:88:90:04:D1:66:34:76:E9:AB:E3:C7
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:609a::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:99:48:a1:e5:2f:c8:5d:5c:f8:90:40:54:c6:8b:98:48:25:
         29:50:00:e5:80:5a:50:a5:73:52:24:6e:82:6e:2a:5a:51:ec:
         fd:63:ac:7c:a4:c8:1a:d1:e3:97:ea:6f:56:7d:93:09:3a:b0:
         56:0b:7d:0c:bb:ba:76:d3:f1:47:06:24:70:77:8b:df:39:93:
         ff:91:6e:c8:fa:4f:d6:5c:87:92:35:64:cf:f6:8f:30:31:16:
         1c:b6:53:84:fe:ea:e5:a5:ca:04:91:f7:78:99:64:36:64:5b:
         97:6c:8a:ba:10:3a:2b:96:19:61:4d:e2:7b:45:31:ce:93:bb:
         15:23:7d:03:90:17:75:61:7e:60:e9:8f:2c:2c:f4:30:9d:7e:
         83:f2:6f:6e:ba:0a:fd:3e:b5:cf:3a:f9:3a:ab:3b:01:4b:bc:
         a8:a4:d8:df:1b:57:ea:71:04:bd:45:26:51:06:1b:39:19:03:
         30:d4:53:fe:99:1c:28:15:f4:42:64:5f:90:af:d5:4c:5a:ba:
         b5:a6:a0:80:f3:84:60:50:8c:54:35:bb:b0:60:48:a9:44:11:
         0e:d1:8f:01:87:88:a0:da:06:ad:f1:cb:90:2b:99:d3:af:3b:
         42:33:2d:24:05:d1:d7:81:5d:10:3d:53:31:dd:ba:2c:1a:0b:
         b1:78:75:ba
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUc0Z35Hh0yh4fN6DkTsuqavNpBbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQzMjZaFw0yNjAzMTUxNTQ4MjZaMDMxMTAvBgNV
BAMTKDYzQTMwQ0UwQUVGRjdGRDBDNzg4OTAwNEQxNjYzNDc2RTlBQkUzQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9QUNAIQd4IAsZrXcuCOQwtEN
qSF7lG90fuKB3Jv8ttjWjol8QluDa6d1JLQdPHt5ZN6clEk77DJJm3+XYCQGIIaz
3qunoWArZQetCDrUn2n+dJO0qRHUuabz7udJRkqinn3iinqU7ztyb+0aLL/s8khj
av2HC68cW6kb5gzgR6JRaSgFQ4IIid4g0g0Ij64qscCnwEqu5+VlHk1LMz2qaAvf
lVm9XpQo+fZqafAomOpv8Vm2hwXENnz4X8+FrZgiq0uoiq5yF3wngWqCtHkXg1ZM
di9Oi667KWyLJhmsKr/Tiz8kMNAFEBYoZ0bT6UkHxaYqwMm22crchsrqIqBHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUY6MM4K7/f9DHiJAE0WY0dumr48cwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzOTYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgmjAN
BgkqhkiG9w0BAQsFAAOCAQEAEZlIoeUvyF1c+JBAVMaLmEglKVAA5YBaUKVzUiRu
gm4qWlHs/WOsfKTIGtHjl+pvVn2TCTqwVgt9DLu6dtPxRwYkcHeL3zmT/5FuyPpP
1lyHkjVkz/aPMDEWHLZThP7q5aXKBJH3eJlkNmRbl2yKuhA6K5YZYU3ie0UxzpO7
FSN9A5AXdWF+YOmPLCz0MJ1+g/JvbroK/T61zzr5Oqs7AUu8qKTY3xtX6nEEvUUm
UQYbORkDMNRT/pkcKBX0QmRfkK/VTFq6taaggPOEYFCMVDW7sGBIqUQRDtGPAYeI
oNoGrfHLkCuZ0687QjMtJAXR14FdED1TMd26LBoLsXh1ug==
-----END CERTIFICATE-----