Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363063633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          A/8CKy9fKK3t0DgYKZAGjuDK47x7ektK7pVrXAS2Xz4=
Subject key identifier:   A8:00:D5:CB:7C:B3:D9:48:1F:D2:B3:36:BA:7A:DD:5E:26:F8:CF:3F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2ACB23C6B1B914E58D22185DE312C072103D42E4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:48 +0000
ROA not before:           Sat 22 Mar 2025 15:17:48 +0000
ROA not after:            Sat 21 Mar 2026 15:22:48 +0000
asID:                     16909
IP address blocks:        2a14:7584:60cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:23:c6:b1:b9:14:e5:8d:22:18:5d:e3:12:c0:72:10:3d:42:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:48 2025 GMT
            Not After : Mar 21 15:22:48 2026 GMT
        Subject: CN=A800D5CB7CB3D9481FD2B336BA7ADD5E26F8CF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4a:b7:26:d3:2a:2d:16:32:ae:e5:d9:9d:aa:
                    b0:c0:07:ec:84:fe:84:d2:1e:be:53:50:91:a9:8a:
                    7a:0f:e4:f5:89:a8:1a:43:a9:72:c1:6e:b9:5d:24:
                    46:7c:0e:74:93:7d:91:b5:9f:9c:49:03:20:eb:bd:
                    c1:05:f5:79:61:dc:40:a3:90:eb:f5:44:f8:db:1d:
                    56:9e:82:61:e6:94:30:48:34:92:dd:a9:ea:91:a9:
                    d0:50:64:02:05:43:76:4b:5e:48:85:e6:6a:70:0d:
                    8d:d7:04:b8:64:e2:49:d8:3d:bf:fe:2b:6b:af:35:
                    07:e0:9f:b2:40:f1:53:13:7b:10:d1:a6:08:23:ef:
                    56:ae:c4:e8:bf:b9:f5:8e:fb:28:ad:dc:b3:bc:18:
                    1c:ee:89:25:2d:0b:71:75:56:e2:05:f7:5b:51:89:
                    d3:02:df:27:3b:de:27:f0:b4:f2:77:0e:63:ef:30:
                    68:97:9c:ca:66:30:5e:b4:85:33:4d:74:ba:28:dc:
                    f4:0e:c2:3b:fe:88:8a:b9:8b:20:97:0f:05:73:0f:
                    7b:fa:d3:45:b7:eb:42:88:11:80:1e:ee:6a:2c:20:
                    23:9e:d1:6e:5b:cc:ec:53:27:41:cd:d0:df:2b:ee:
                    f9:6b:17:59:18:7d:6b:50:f0:30:40:53:6b:bc:2b:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:D5:CB:7C:B3:D9:48:1F:D2:B3:36:BA:7A:DD:5E:26:F8:CF:3F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:ec:ad:2e:26:e8:8b:0c:06:a8:c1:9b:53:56:4b:71:38:
         45:91:bf:49:1c:87:c0:10:34:05:df:9b:d9:00:80:ee:5c:9c:
         b9:d0:d7:26:65:67:b5:b9:c0:9e:f9:59:da:a0:ca:8e:34:29:
         1c:ed:9b:32:38:c2:7e:73:90:03:ce:d3:89:ae:86:90:05:ff:
         b7:82:91:27:3c:a4:3e:48:9b:c0:78:7a:a6:e8:52:bf:a9:bb:
         bc:b4:7d:72:84:0a:db:70:f8:8a:d5:35:09:43:ff:1e:b7:ab:
         64:26:bb:68:2a:17:36:c9:9d:57:e5:5e:b2:39:55:c5:4a:3f:
         bb:3b:18:ae:6d:12:28:e7:68:10:e9:97:0f:af:41:9d:c5:6b:
         14:e9:93:14:3d:fb:b9:4e:ef:06:ad:d7:89:65:dd:01:86:19:
         31:ae:64:30:91:70:8d:0a:1a:04:73:f5:b1:d1:cd:d3:5d:50:
         21:89:d9:bf:f9:90:cf:0e:0d:c5:2f:6a:49:8a:c4:9d:2c:c9:
         3a:0d:89:55:c6:73:cf:20:dc:82:d5:23:b6:f2:c0:4b:00:d6:
         03:ba:15:2a:4b:78:53:d5:32:2f:59:d3:ae:12:79:5b:96:aa:
         0e:df:24:5d:ee:85:18:2f:ea:c7:f8:d1:87:e1:df:e3:3f:c7:
         84:a4:9e:95
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKssjxrG5FOWNIhhd4xLAchA9QuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjIxNTE3NDhaFw0yNjAzMjExNTIyNDhaMDMxMTAvBgNV
BAMTKEE4MDBENUNCN0NCM0Q5NDgxRkQyQjMzNkJBN0FERDVFMjZGOENGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSrcm0yotFjKu5dmdqrDAB+yE
/oTSHr5TUJGpinoP5PWJqBpDqXLBbrldJEZ8DnSTfZG1n5xJAyDrvcEF9Xlh3ECj
kOv1RPjbHVaegmHmlDBINJLdqeqRqdBQZAIFQ3ZLXkiF5mpwDY3XBLhk4knYPb/+
K2uvNQfgn7JA8VMTexDRpggj71auxOi/ufWO+yit3LO8GBzuiSUtC3F1VuIF91tR
idMC3yc73ifwtPJ3DmPvMGiXnMpmMF60hTNNdLoo3PQOwjv+iIq5iyCXDwVzD3v6
00W360KIEYAe7mosICOe0W5bzOxTJ0HN0N8r7vlrF1kYfWtQ8DBAU2u8K9MlAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqADVy3yz2Ugf0rM2unrdXib4zz8wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgzDAN
BgkqhkiG9w0BAQsFAAOCAQEAPh/srS4m6IsMBqjBm1NWS3E4RZG/SRyHwBA0Bd+b
2QCA7lycudDXJmVntbnAnvlZ2qDKjjQpHO2bMjjCfnOQA87Tia6GkAX/t4KRJzyk
PkibwHh6puhSv6m7vLR9coQK23D4itU1CUP/HrerZCa7aCoXNsmdV+VesjlVxUo/
uzsYrm0SKOdoEOmXD69BncVrFOmTFD37uU7vBq3XiWXdAYYZMa5kMJFwjQoaBHP1
sdHN011QIYnZv/mQzw4NxS9qSYrEnSzJOg2JVcZzzyDcgtUjtvLASwDWA7oVKkt4
U9UyL1nTrhJ5W5aqDt8kXe6FGC/qx/jRh+Hf4z/HhKSelQ==
-----END CERTIFICATE-----