Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          1pQrCZONjkxxNov/mYdY9fJi6K4foBJEd8/Kaox2mN4=
Subject key identifier:   8A:95:9B:44:BD:6B:92:7F:4F:62:A5:D3:C7:D3:43:76:3D:17:3B:82
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3B5C478BE1BEDFC319DB2D7EF34E06763A1EC170
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:33 +0000
ROA not before:           Sun 16 Mar 2025 15:44:33 +0000
ROA not after:            Sun 15 Mar 2026 15:49:33 +0000
asID:                     16909
IP address blocks:        2a14:7584:60a3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5c:47:8b:e1:be:df:c3:19:db:2d:7e:f3:4e:06:76:3a:1e:c1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:33 2025 GMT
            Not After : Mar 15 15:49:33 2026 GMT
        Subject: CN=8A959B44BD6B927F4F62A5D3C7D343763D173B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:3e:16:1e:f2:e3:3d:29:15:f3:60:57:85:
                    79:63:cc:d7:4f:74:d1:ee:31:08:93:77:e4:87:8f:
                    67:90:7e:b6:18:2d:86:c2:0d:5c:78:be:b6:e2:89:
                    08:80:87:04:25:0b:87:1a:d8:35:c3:2d:41:9f:bf:
                    b9:38:b4:b9:f3:42:08:0f:41:41:a6:de:3f:c9:b1:
                    1d:43:fe:0b:e4:b2:18:96:c7:09:44:ba:4f:2f:8f:
                    a8:33:68:25:78:cc:b1:36:3c:b5:95:5f:6b:00:56:
                    51:7a:94:dc:04:73:be:24:30:34:04:63:6c:f8:f0:
                    4b:b0:75:b9:87:cd:c0:72:dc:2d:72:4a:81:7f:96:
                    7e:03:30:2b:5b:e6:c0:68:eb:87:1e:04:76:2b:2e:
                    f2:a6:5a:b2:f7:f4:cd:d5:29:ff:48:d4:a7:51:12:
                    ce:26:ff:b3:a3:3f:e1:f8:68:7c:51:35:58:c9:34:
                    33:88:87:9d:fb:16:42:04:df:55:9c:09:9d:89:f3:
                    d7:22:29:a5:1f:0a:2d:74:07:98:a2:39:b6:9f:3e:
                    0c:e0:18:f8:9f:47:9f:1d:ac:fb:79:8a:0c:a5:ea:
                    f3:a5:cf:2d:ae:83:fa:60:63:3c:94:1b:f5:f3:41:
                    72:e8:69:60:60:38:f8:a2:e6:2c:97:0a:32:3d:48:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:9B:44:BD:6B:92:7F:4F:62:A5:D3:C7:D3:43:76:3D:17:3B:82
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:be:f3:ae:4e:7b:0d:92:16:d7:a8:74:4c:10:f6:71:7e:f5:
         d2:94:85:36:ba:19:28:1e:27:d9:33:48:26:b3:49:60:95:b3:
         5f:c3:ac:d0:13:0e:86:88:a2:26:6c:6a:5e:d9:c9:31:9f:64:
         5d:81:7d:86:df:71:3f:68:bb:c3:99:98:a3:f2:5a:ac:cd:cd:
         d8:f5:11:eb:b1:72:c7:d5:13:92:4e:15:b8:59:bb:8a:97:07:
         3d:9a:26:ce:a6:1c:d5:e6:b9:ce:28:e7:1a:87:01:8c:bf:6e:
         8c:68:df:26:4c:13:49:ac:9a:59:4b:d6:4b:01:7a:48:a6:c2:
         20:d9:58:1d:b5:3f:5b:67:42:de:23:7f:ca:f6:8b:1e:9a:8c:
         8d:2a:75:5a:ee:39:18:b8:a7:1b:9b:4d:ac:d4:2a:62:87:84:
         68:7b:81:b9:6b:0f:c5:21:51:58:43:7e:cd:b5:cc:96:c4:c5:
         6c:d5:45:82:01:ef:61:ad:f0:0b:6b:f8:0d:73:aa:3d:0a:6b:
         92:57:aa:88:d1:44:47:8c:af:c6:74:37:60:46:d8:df:a8:f8:
         18:49:2e:f7:d3:82:22:a4:df:1b:52:16:15:5d:25:3f:8c:86:
         1d:e6:d0:7c:be:c7:c3:e5:5c:43:9b:9d:21:20:ef:f2:80:29:
         2c:12:86:1f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUO1xHi+G+38MZ2y1+804GdjoewXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQ0MzNaFw0yNjAzMTUxNTQ5MzNaMDMxMTAvBgNV
BAMTKDhBOTU5QjQ0QkQ2QjkyN0Y0RjYyQTVEM0M3RDM0Mzc2M0QxNzNCODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGD4WHvLjPSkV82BXhXljzNdP
dNHuMQiTd+SHj2eQfrYYLYbCDVx4vrbiiQiAhwQlC4ca2DXDLUGfv7k4tLnzQggP
QUGm3j/JsR1D/gvkshiWxwlEuk8vj6gzaCV4zLE2PLWVX2sAVlF6lNwEc74kMDQE
Y2z48EuwdbmHzcBy3C1ySoF/ln4DMCtb5sBo64ceBHYrLvKmWrL39M3VKf9I1KdR
Es4m/7OjP+H4aHxRNVjJNDOIh537FkIE31WcCZ2J89ciKaUfCi10B5iiObafPgzg
GPifR58drPt5igyl6vOlzy2ug/pgYzyUG/XzQXLoaWBgOPii5iyXCjI9SM6NAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUipWbRL1rkn9PYqXTx9NDdj0XO4IwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MTMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgozAN
BgkqhkiG9w0BAQsFAAOCAQEAY77zrk57DZIW16h0TBD2cX710pSFNroZKB4n2TNI
JrNJYJWzX8Os0BMOhoiiJmxqXtnJMZ9kXYF9ht9xP2i7w5mYo/JarM3N2PUR67Fy
x9UTkk4VuFm7ipcHPZomzqYc1ea5zijnGocBjL9ujGjfJkwTSayaWUvWSwF6SKbC
INlYHbU/W2dC3iN/yvaLHpqMjSp1Wu45GLinG5tNrNQqYoeEaHuBuWsPxSFRWEN+
zbXMlsTFbNVFggHvYa3wC2v4DXOqPQprkleqiNFER4yvxnQ3YEbY36j4GEku99OC
IqTfG1IWFV0lP4yGHebQfL7Hw+VcQ5udISDv8oApLBKGHw==
-----END CERTIFICATE-----