Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          NBNU+VRVaXwOH00UYpT4rUKsgg/PknK/E89Jbqommk4=
Subject key identifier:   AD:E6:DB:6A:4F:A6:EC:E9:25:14:8B:91:19:71:4F:3A:62:0E:E9:1B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4CB36EA7735C8E1E40BF336826D2EA179CCC0B82
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:52 +0000
ROA not before:           Sat 22 Mar 2025 15:17:52 +0000
ROA not after:            Sat 21 Mar 2026 15:22:52 +0000
asID:                     16909
IP address blocks:        2a14:7584:60d1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b3:6e:a7:73:5c:8e:1e:40:bf:33:68:26:d2:ea:17:9c:cc:0b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:52 2025 GMT
            Not After : Mar 21 15:22:52 2026 GMT
        Subject: CN=ADE6DB6A4FA6ECE925148B9119714F3A620EE91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:d8:94:13:53:bc:ee:1a:ad:64:97:36:57:
                    0f:f6:2b:1c:c6:34:70:68:c6:d7:47:7d:a8:72:22:
                    1f:5c:8f:7b:f3:ee:4a:f2:d9:48:8d:a7:e1:d4:06:
                    b2:67:31:b7:cf:8a:86:01:61:5d:5a:b7:7d:7d:06:
                    b2:17:34:51:5f:35:c2:3b:d7:91:77:8d:27:6d:e4:
                    13:35:71:ca:1d:47:14:5e:5e:94:31:9f:ee:7d:6d:
                    dc:d8:6c:f1:53:63:d0:76:9a:e7:54:b4:b5:89:ce:
                    5b:d1:78:84:f5:91:62:9d:04:de:21:ea:4f:b9:b9:
                    1d:5c:c2:6d:1a:69:a2:fa:77:b2:ac:98:41:d9:cc:
                    3f:fa:f7:81:c0:9d:bd:ed:69:c9:61:eb:6a:b9:32:
                    e3:34:23:7a:37:55:19:c1:2a:96:b4:c4:d0:88:42:
                    47:61:7d:02:dc:90:f9:e3:22:63:d4:ff:e2:29:45:
                    96:bf:c3:d8:c3:dc:95:2a:e0:45:d6:ec:6d:da:29:
                    a6:e7:64:e8:26:15:25:ad:e5:d8:50:e2:d4:22:3b:
                    5a:5d:b2:fc:e3:72:f4:fc:5d:dc:6d:f3:18:e9:c7:
                    27:bf:a3:db:19:38:33:d5:6e:b2:fb:cb:92:f4:96:
                    34:56:50:1a:a3:85:32:98:68:01:e7:ca:d6:c0:4b:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:DB:6A:4F:A6:EC:E9:25:14:8B:91:19:71:4F:3A:62:0E:E9:1B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:90:09:72:34:c2:0e:5c:5f:41:94:28:22:92:52:aa:3c:
         eb:52:0a:a6:f8:92:69:1d:a6:05:52:8f:48:57:20:14:13:19:
         53:6a:83:c9:e1:35:d9:e1:37:73:fa:96:d9:8e:78:b6:2f:df:
         33:4b:a6:0b:14:de:d2:e6:3a:1b:fe:70:77:d2:30:5b:cd:f5:
         74:f2:b8:8e:5a:cd:c8:da:46:a8:37:61:93:12:27:af:23:8c:
         53:24:04:3a:b6:8a:1b:ab:ee:0d:ac:02:ee:a9:99:1b:dd:07:
         98:2f:f5:2b:25:b0:cb:dc:bc:df:57:b8:db:fd:f9:09:5e:52:
         31:eb:ae:70:69:45:15:27:d6:41:92:3e:a6:74:0f:7b:05:2d:
         10:17:e8:4f:59:eb:f8:7e:09:12:88:20:0a:78:4c:43:0f:8e:
         e1:5d:62:fb:13:3a:5c:1b:eb:c2:43:83:e3:b4:0b:da:9d:2f:
         8d:2f:55:e1:af:70:c3:41:86:b8:aa:66:cd:84:d2:ce:7d:fb:
         c4:3f:81:b7:e7:27:9a:ad:67:cf:6b:57:82:69:26:78:aa:6a:
         01:0b:36:07:62:96:f6:4f:43:19:e6:40:75:46:df:c3:5e:16:
         a2:84:14:8e:1b:89:dd:b7:e7:9d:67:ee:bd:81:49:d6:88:ba:
         e6:2d:d4:50
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTLNup3Ncjh5AvzNoJtLqF5zMC4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjIxNTE3NTJaFw0yNjAzMjExNTIyNTJaMDMxMTAvBgNV
BAMTKEFERTZEQjZBNEZBNkVDRTkyNTE0OEI5MTE5NzE0RjNBNjIwRUU5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJB9iUE1O87hqtZJc2Vw/2KxzG
NHBoxtdHfahyIh9cj3vz7kry2UiNp+HUBrJnMbfPioYBYV1at319BrIXNFFfNcI7
15F3jSdt5BM1ccodRxReXpQxn+59bdzYbPFTY9B2mudUtLWJzlvReIT1kWKdBN4h
6k+5uR1cwm0aaaL6d7KsmEHZzD/694HAnb3taclh62q5MuM0I3o3VRnBKpa0xNCI
QkdhfQLckPnjImPU/+IpRZa/w9jD3JUq4EXW7G3aKabnZOgmFSWt5dhQ4tQiO1pd
svzjcvT8Xdxt8xjpxye/o9sZODPVbrL7y5L0ljRWUBqjhTKYaAHnytbAS7+bAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUrebbak+m7OklFIuRGXFPOmIO6RswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NDMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg0TAN
BgkqhkiG9w0BAQsFAAOCAQEAiiiQCXI0wg5cX0GUKCKSUqo861IKpviSaR2mBVKP
SFcgFBMZU2qDyeE12eE3c/qW2Y54ti/fM0umCxTe0uY6G/5wd9IwW831dPK4jlrN
yNpGqDdhkxInryOMUyQEOraKG6vuDawC7qmZG90HmC/1KyWwy9y831e42/35CV5S
MeuucGlFFSfWQZI+pnQPewUtEBfoT1nr+H4JEoggCnhMQw+O4V1i+xM6XBvrwkOD
47QL2p0vjS9V4a9ww0GGuKpmzYTSzn37xD+Bt+cnmq1nz2tXgmkmeKpqAQs2B2KW
9k9DGeZAdUbfw14WooQUjhuJ3bfnnWfuvYFJ1oi65i3UUA==
-----END CERTIFICATE-----