Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          cTiFWyR/9aGzV9X+daOXUO8jHXbzGIgQi595hIVBsZU=
Subject key identifier:   EC:22:B5:DE:47:85:BB:82:89:BC:1F:BB:8E:D4:AA:B5:FC:02:D4:3C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       43D7A57AD4231310669026540AA0F842E3B0EDFF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:33 +0000
ROA not before:           Sun 16 Mar 2025 15:44:33 +0000
ROA not after:            Sun 15 Mar 2026 15:49:33 +0000
asID:                     16909
IP address blocks:        2a14:7584:60a4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d7:a5:7a:d4:23:13:10:66:90:26:54:0a:a0:f8:42:e3:b0:ed:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:33 2025 GMT
            Not After : Mar 15 15:49:33 2026 GMT
        Subject: CN=EC22B5DE4785BB8289BC1FBB8ED4AAB5FC02D43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:ae:43:38:f9:10:15:b9:84:05:da:87:3d:
                    65:7b:ba:b0:ae:6c:40:cc:a2:b4:90:92:2f:d1:44:
                    f6:73:4f:bf:1f:a2:bd:7d:7b:65:d7:f7:3f:85:30:
                    3d:66:e2:3d:2c:23:0f:b4:d1:49:22:f0:31:32:6f:
                    34:15:14:9c:b1:30:c7:00:6d:5e:f1:8b:08:d3:8c:
                    4f:18:ee:d7:68:b0:54:c8:aa:86:ed:9f:11:a7:df:
                    94:2b:c1:c8:78:51:7d:86:5a:9f:79:08:62:1f:f6:
                    b8:45:c9:73:c3:f4:08:47:34:3d:8e:7a:ca:7b:40:
                    99:fa:11:14:dd:08:5c:eb:e2:82:44:03:59:e1:0e:
                    de:c9:99:39:2e:f3:e4:73:f3:68:e6:9f:6e:e3:f5:
                    0b:50:e4:82:24:f6:3f:d6:5e:f7:2b:10:26:24:a6:
                    13:95:c2:7c:fb:c8:89:e2:d6:f6:cc:de:ce:93:00:
                    0d:f0:d6:3b:a6:21:7b:ef:7e:24:88:bb:db:50:3f:
                    58:2b:ac:b2:e7:2b:47:87:6d:0b:1f:35:f2:d8:1c:
                    bd:05:b2:72:db:be:89:a1:c4:2a:d1:45:f2:a3:b7:
                    2f:42:48:e5:c8:9e:ea:ed:ac:8a:f9:7d:df:6a:7d:
                    01:58:17:03:a9:a3:ae:1f:0a:16:c0:49:60:52:f8:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:B5:DE:47:85:BB:82:89:BC:1F:BB:8E:D4:AA:B5:FC:02:D4:3C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:7f:a7:2a:31:fb:8a:cb:13:82:ba:1a:4d:85:8d:51:59:
         cb:a0:9d:ae:71:89:6e:8d:96:98:bc:49:6a:76:72:be:20:96:
         3b:79:7c:6c:ae:11:3c:26:dc:35:88:26:28:2e:e3:c2:21:74:
         d4:af:d7:e9:d3:fd:27:c8:13:88:f1:1d:70:54:4f:77:c8:94:
         6c:ca:44:97:32:11:d8:65:80:51:c7:95:b3:a3:20:5f:77:98:
         00:46:17:76:07:bf:d0:47:84:f8:4a:a9:37:ac:31:b6:dd:7b:
         83:b6:4c:7b:a5:88:ff:f2:aa:9c:98:bb:77:cf:29:9d:92:d2:
         c9:52:5e:bc:7d:d1:a1:a9:de:cc:5a:73:21:4f:87:bc:81:7f:
         55:4e:cd:80:64:00:d9:34:f6:dc:15:6e:ba:6a:0e:2f:2f:3f:
         5e:47:a3:da:cf:45:f1:98:12:2a:a9:2d:f2:38:df:7e:04:1b:
         80:3b:cd:90:a6:88:db:80:a0:ac:d6:fd:37:18:de:18:c0:be:
         de:76:91:90:ed:2f:2b:4f:4b:b8:40:b5:0a:41:bf:25:5c:a4:
         6a:93:46:e0:1c:cb:52:36:84:1a:87:88:ed:66:de:44:b7:8a:
         01:fc:bc:6e:40:1f:a3:8b:a4:62:43:44:49:2e:a6:b2:45:e2:
         5a:3a:cc:20
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQ9eletQjExBmkCZUCqD4QuOw7f8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQ0MzNaFw0yNjAzMTUxNTQ5MzNaMDMxMTAvBgNV
BAMTKEVDMjJCNURFNDc4NUJCODI4OUJDMUZCQjhFRDRBQUI1RkMwMkQ0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcn65DOPkQFbmEBdqHPWV7urCu
bEDMorSQki/RRPZzT78for19e2XX9z+FMD1m4j0sIw+00Uki8DEybzQVFJyxMMcA
bV7xiwjTjE8Y7tdosFTIqobtnxGn35Qrwch4UX2GWp95CGIf9rhFyXPD9AhHND2O
esp7QJn6ERTdCFzr4oJEA1nhDt7JmTku8+Rz82jmn27j9QtQ5IIk9j/WXvcrECYk
phOVwnz7yIni1vbM3s6TAA3w1jumIXvvfiSIu9tQP1grrLLnK0eHbQsfNfLYHL0F
snLbvomhxCrRRfKjty9CSOXInurtrIr5fd9qfQFYFwOpo64fChbASWBS+Lx1AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7CK13keFu4KJvB+7jtSqtfwC1DwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MTM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgpDAN
BgkqhkiG9w0BAQsFAAOCAQEAEtV/pyox+4rLE4K6Gk2FjVFZy6CdrnGJbo2WmLxJ
anZyviCWO3l8bK4RPCbcNYgmKC7jwiF01K/X6dP9J8gTiPEdcFRPd8iUbMpElzIR
2GWAUceVs6MgX3eYAEYXdge/0EeE+EqpN6wxtt17g7ZMe6WI//KqnJi7d88pnZLS
yVJevH3RoanezFpzIU+HvIF/VU7NgGQA2TT23BVuumoOLy8/Xkej2s9F8ZgSKqkt
8jjffgQbgDvNkKaI24CgrNb9NxjeGMC+3naRkO0vK09LuEC1CkG/JVykapNG4BzL
UjaEGoeI7WbeRLeKAfy8bkAfo4ukYkNESS6mskXiWjrMIA==
-----END CERTIFICATE-----