Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          //NKrWYY2oFbh4imkX9oD079RRMMyfCYswMJW6Y4rFw=
Subject key identifier:   8C:06:BD:07:ED:61:D1:9C:8F:2F:D1:71:93:9F:0F:1D:7E:7B:A9:63
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       07B4A1D24F625CB7B708610F7492E0F9FE36E9FE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:53 +0000
ROA not before:           Sun 16 Mar 2025 15:45:53 +0000
ROA not after:            Sun 15 Mar 2026 15:50:53 +0000
asID:                     16909
IP address blocks:        2a14:7584:60b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:a1:d2:4f:62:5c:b7:b7:08:61:0f:74:92:e0:f9:fe:36:e9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:53 2025 GMT
            Not After : Mar 15 15:50:53 2026 GMT
        Subject: CN=8C06BD07ED61D19C8F2FD171939F0F1D7E7BA963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:6e:25:8b:7a:82:49:4b:b5:93:a2:96:7f:
                    d7:ea:3d:b1:1a:f8:0f:04:6e:f1:bf:7e:fb:4b:20:
                    6a:32:e2:f7:7b:d9:bf:bb:a3:a9:89:ea:7b:e0:d3:
                    35:b1:54:7f:3c:38:98:f3:05:1b:cb:23:14:9d:29:
                    f8:da:98:0c:04:90:98:49:5b:67:08:c5:3f:1a:25:
                    16:82:59:10:a5:3b:62:a6:26:9e:7a:c5:77:7d:95:
                    99:6a:29:ce:b5:63:78:a9:90:a1:a2:10:74:8e:5f:
                    aa:5a:0b:1d:65:c6:6a:c9:36:c0:b2:15:73:8e:6c:
                    6f:05:c2:59:04:9a:dd:28:79:13:02:06:f5:fb:9c:
                    95:5d:3e:ea:47:22:b8:e1:b5:c2:19:ab:ca:ee:d6:
                    34:0b:83:da:90:0b:63:3f:5f:12:c9:82:8c:ee:6d:
                    ed:d7:e5:33:d3:9c:ea:6e:1a:7e:06:ae:69:ca:87:
                    73:b0:13:6b:79:ac:b8:e1:7f:e7:c9:a2:a7:3f:0d:
                    ab:c1:0e:1e:11:d7:e0:c6:f6:00:08:b0:72:bb:af:
                    53:a9:fe:8c:f6:f5:35:95:1d:15:da:e3:a9:4c:2b:
                    91:b6:a2:d3:6e:21:6d:ac:a2:04:b6:e3:d5:16:17:
                    1f:2c:fd:05:17:20:a1:94:95:ef:4d:15:38:d2:59:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:BD:07:ED:61:D1:9C:8F:2F:D1:71:93:9F:0F:1D:7E:7B:A9:63
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:16:a2:53:79:bb:76:bd:e1:bb:2a:fa:f5:f0:94:93:fc:43:
         4f:e0:4b:1c:5c:25:7f:16:05:35:55:62:ab:65:05:50:0c:c5:
         1d:12:d4:0a:fe:cf:5d:b0:30:20:3b:db:e9:16:3c:fb:96:cf:
         58:0a:f4:fa:60:ed:39:a3:ff:f7:71:0c:1b:a5:2e:62:59:0d:
         ec:40:37:c9:c8:af:3f:5a:a8:05:80:6c:74:f0:95:46:d4:46:
         25:e8:e7:29:cb:5e:6d:e5:c1:ea:a7:04:ad:76:71:3a:bc:6b:
         b8:49:2c:43:96:86:d8:d7:3f:08:d2:b7:69:9f:3d:1a:4d:f2:
         18:3e:77:9b:36:7f:c9:c2:b7:14:fd:56:aa:3f:00:6d:60:e1:
         cc:b6:0c:46:6c:dc:af:2d:f5:b4:02:ba:16:e5:08:60:bc:93:
         5d:c2:84:f1:3d:64:37:f1:83:52:35:15:8d:0c:bc:be:a0:6e:
         48:fe:80:47:72:88:82:c4:18:45:18:c9:01:2b:ea:fa:11:7d:
         e1:11:ed:1c:8a:cf:36:2a:cf:5d:5f:6a:22:95:10:92:5b:7a:
         1e:7c:cc:85:29:b2:d7:a6:2f:4c:cd:ef:13:40:da:b6:e3:12:
         a8:d2:fc:55:7a:04:bb:97:98:9c:60:1d:a1:ed:8a:6e:78:c7:
         c2:4e:b1:86
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUB7Sh0k9iXLe3CGEPdJLg+f426f4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQ1NTNaFw0yNjAzMTUxNTUwNTNaMDMxMTAvBgNV
BAMTKDhDMDZCRDA3RUQ2MUQxOUM4RjJGRDE3MTkzOUYwRjFEN0U3QkE5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpG4li3qCSUu1k6KWf9fqPbEa
+A8EbvG/fvtLIGoy4vd72b+7o6mJ6nvg0zWxVH88OJjzBRvLIxSdKfjamAwEkJhJ
W2cIxT8aJRaCWRClO2KmJp56xXd9lZlqKc61Y3ipkKGiEHSOX6paCx1lxmrJNsCy
FXOObG8FwlkEmt0oeRMCBvX7nJVdPupHIrjhtcIZq8ru1jQLg9qQC2M/XxLJgozu
be3X5TPTnOpuGn4GrmnKh3OwE2t5rLjhf+fJoqc/DavBDh4R1+DG9gAIsHK7r1Op
/oz29TWVHRXa46lMK5G2otNuIW2sogS249UWFx8s/QUXIKGUle9NFTjSWbsRAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUjAa9B+1h0ZyPL9Fxk58PHX57qWMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MjM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgtDAN
BgkqhkiG9w0BAQsFAAOCAQEAFhaiU3m7dr3huyr69fCUk/xDT+BLHFwlfxYFNVVi
q2UFUAzFHRLUCv7PXbAwIDvb6RY8+5bPWAr0+mDtOaP/93EMG6UuYlkN7EA3yciv
P1qoBYBsdPCVRtRGJejnKctebeXB6qcErXZxOrxruEksQ5aG2Nc/CNK3aZ89Gk3y
GD53mzZ/ycK3FP1Wqj8AbWDhzLYMRmzcry31tAK6FuUIYLyTXcKE8T1kN/GDUjUV
jQy8vqBuSP6AR3KIgsQYRRjJASvq+hF94RHtHIrPNirPXV9qIpUQklt6HnzMhSmy
16YvTM3vE0DatuMSqNL8VXoEu5eYnGAdoe2KbnjHwk6xhg==
-----END CERTIFICATE-----