Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          x3FUURYqrPcVK4KzsFKdJE3I+aW6UFwx736Eba3K+us=
Subject key identifier:   68:ED:FA:AD:63:BD:E1:48:88:10:FD:3F:06:46:B1:A7:5A:31:3D:5D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0803C961BA5D81BE3982740926C9B0D049729E70
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:07 +0000
ROA not before:           Sun 16 Mar 2025 15:45:07 +0000
ROA not after:            Sun 15 Mar 2026 15:50:07 +0000
asID:                     16909
IP address blocks:        2a14:7584:60af::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:03:c9:61:ba:5d:81:be:39:82:74:09:26:c9:b0:d0:49:72:9e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:07 2025 GMT
            Not After : Mar 15 15:50:07 2026 GMT
        Subject: CN=68EDFAAD63BDE1488810FD3F0646B1A75A313D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:53:73:d6:19:e3:49:29:31:c0:a1:45:22:
                    3a:b1:b5:b6:d3:10:56:83:4b:1e:a2:2b:c4:eb:2f:
                    8a:d3:20:4d:ae:92:66:7a:63:58:de:da:f0:67:55:
                    59:44:9e:10:4e:91:c0:d0:77:c7:92:13:04:d2:b2:
                    e8:22:0d:3e:ed:71:ee:f0:73:b1:89:ba:72:c1:c4:
                    2b:27:26:77:3a:5f:13:1e:aa:de:ff:17:77:e7:74:
                    8c:0d:73:fc:46:9b:5b:1e:e3:d3:d1:71:89:60:02:
                    6e:fc:66:ac:e8:2b:d8:b5:25:fd:11:ca:34:ba:dd:
                    ae:39:cd:0d:a2:51:4c:21:f7:56:27:b4:ed:08:3b:
                    61:a5:d5:e4:ca:04:29:51:b6:5d:bf:6f:9d:6b:7d:
                    a4:ef:b7:10:01:fb:74:e3:d5:d6:ab:00:27:52:cf:
                    43:e6:a1:1f:6d:0b:44:58:3b:bd:71:24:c2:19:da:
                    27:21:d7:23:b1:82:0f:b5:06:01:3a:5d:0b:a7:0b:
                    9d:f8:e4:0a:fb:5e:15:f8:45:45:74:d4:05:43:08:
                    e4:69:01:6c:24:49:2f:fc:2a:90:d7:73:f6:7e:0c:
                    ad:c9:09:2f:cd:0a:7b:94:8a:fd:46:ad:86:07:cc:
                    ba:a6:dd:5f:7a:5e:f3:9c:76:ef:52:63:c0:28:00:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:ED:FA:AD:63:BD:E1:48:88:10:FD:3F:06:46:B1:A7:5A:31:3D:5D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60af::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:7f:58:2d:dc:70:e3:da:4e:57:94:c1:e7:b8:91:12:06:
         c0:5f:7e:85:7f:ab:44:b5:0c:ed:3d:3f:f7:71:c5:8a:26:e6:
         cf:d8:e4:cd:6c:43:d0:47:c7:c9:54:8d:6c:e2:ed:bd:fc:91:
         72:b2:56:c5:9d:10:39:d4:ae:7e:4f:53:a5:e6:c5:d0:80:d8:
         cd:8f:46:69:88:39:d5:8b:8c:58:2c:fd:6f:36:8f:42:e3:4f:
         c4:94:51:4c:47:35:7b:a9:cd:2f:e4:66:b6:52:6e:43:0b:6e:
         15:44:20:46:9f:38:39:ea:c9:9b:4b:de:f1:43:70:1f:a8:1e:
         c4:a7:77:9b:51:16:2b:1d:db:e7:bb:2d:f1:5c:4f:9e:ef:5f:
         47:01:20:60:c9:02:ec:15:1c:46:51:94:18:e6:2a:47:ba:d0:
         fa:66:15:9f:b2:6c:d1:07:3e:83:97:55:52:d9:67:68:9f:37:
         64:64:fa:e2:c8:ed:08:9b:52:5d:d1:d3:e1:0f:8c:ca:a6:f1:
         a4:5a:5d:45:f2:5a:58:5d:4b:64:16:70:c5:b8:86:4f:5e:97:
         8a:ee:96:87:29:06:17:b6:da:12:96:bc:72:e6:70:dc:c8:a5:
         d0:29:f0:fa:d2:ba:31:b6:4f:c5:35:f6:d6:c2:cf:c9:56:50:
         c5:8b:e7:54
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCAPJYbpdgb45gnQJJsmw0ElynnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQ1MDdaFw0yNjAzMTUxNTUwMDdaMDMxMTAvBgNV
BAMTKDY4RURGQUFENjNCREUxNDg4ODEwRkQzRjA2NDZCMUE3NUEzMTNENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC1Nz1hnjSSkxwKFFIjqxtbbT
EFaDSx6iK8TrL4rTIE2ukmZ6Y1je2vBnVVlEnhBOkcDQd8eSEwTSsugiDT7tce7w
c7GJunLBxCsnJnc6XxMeqt7/F3fndIwNc/xGm1se49PRcYlgAm78ZqzoK9i1Jf0R
yjS63a45zQ2iUUwh91YntO0IO2Gl1eTKBClRtl2/b51rfaTvtxAB+3Tj1darACdS
z0PmoR9tC0RYO71xJMIZ2ich1yOxgg+1BgE6XQunC5345Ar7XhX4RUV01AVDCORp
AWwkSS/8KpDXc/Z+DK3JCS/NCnuUiv1GrYYHzLqm3V96XvOcdu9SY8AoAH3VAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUaO36rWO94UiIEP0/Bkaxp1oxPV0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MTY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgrzAN
BgkqhkiG9w0BAQsFAAOCAQEAP49/WC3ccOPaTleUwee4kRIGwF9+hX+rRLUM7T0/
93HFiibmz9jkzWxD0EfHyVSNbOLtvfyRcrJWxZ0QOdSufk9TpebF0IDYzY9GaYg5
1YuMWCz9bzaPQuNPxJRRTEc1e6nNL+RmtlJuQwtuFUQgRp84OerJm0ve8UNwH6ge
xKd3m1EWKx3b57st8VxPnu9fRwEgYMkC7BUcRlGUGOYqR7rQ+mYVn7Js0Qc+g5dV
UtlnaJ83ZGT64sjtCJtSXdHT4Q+MyqbxpFpdRfJaWF1LZBZwxbiGT16Xiu6WhykG
F7baEpa8cuZw3Mil0Cnw+tK6MbZPxTX21sLPyVZQxYvnVA==
-----END CERTIFICATE-----