Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          hFL9NaV9IlQw9Yt3ZwSnsYebiuR0VbWjEcWVFS/j5AI=
Subject key identifier:   5C:63:68:A8:05:E6:91:FE:8E:46:30:76:12:88:CC:B0:24:62:11:DE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0A716920FB94F13D7C406F3BD42DC260C5D4E698
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:19 +0000
ROA not before:           Wed 26 Mar 2025 14:16:19 +0000
ROA not after:            Wed 25 Mar 2026 14:21:19 +0000
asID:                     16909
IP address blocks:        2a14:7584:60de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:69:20:fb:94:f1:3d:7c:40:6f:3b:d4:2d:c2:60:c5:d4:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:19 2025 GMT
            Not After : Mar 25 14:21:19 2026 GMT
        Subject: CN=5C6368A805E691FE8E4630761288CCB0246211DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:5a:ef:df:7c:4e:1c:a4:5e:f4:4d:b1:e5:
                    55:04:de:ae:2d:36:f0:15:6a:da:a9:a6:d6:d8:72:
                    29:0d:ec:db:3b:15:6b:a5:96:8a:d0:24:17:9b:1c:
                    2c:4f:3f:08:d5:6f:56:95:3f:0f:26:dc:ca:17:be:
                    91:54:28:96:58:14:08:1b:e8:1a:8e:fc:a5:9d:03:
                    69:c8:bf:14:e9:90:2b:5d:9c:6a:93:43:7c:fe:d4:
                    32:cd:c5:e7:93:16:f1:46:80:22:52:4a:27:a6:5f:
                    41:9b:0d:8b:0b:03:38:c3:04:7f:fd:92:05:28:cc:
                    ba:ce:e1:67:bf:38:64:37:65:fc:4d:cc:82:5d:0c:
                    ed:fb:dd:19:bc:9e:fc:31:0b:b0:15:39:bb:78:c6:
                    3b:3f:fb:04:86:18:15:0d:77:cd:a8:18:c2:f4:b4:
                    d1:44:87:48:e8:a6:0f:f1:50:d0:35:22:b4:14:30:
                    5f:20:65:a0:9a:56:37:2e:f8:00:69:86:c6:30:08:
                    e0:2a:75:9d:e3:83:90:cb:a1:84:3b:2c:df:cf:96:
                    d8:0b:11:4d:c5:15:f9:65:57:eb:f9:a3:60:1f:d8:
                    9d:9f:6b:a8:fb:55:eb:3c:9a:e8:0c:ef:24:71:74:
                    0f:46:20:e9:9c:d5:ca:b8:5b:c2:60:0a:e2:33:db:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:68:A8:05:E6:91:FE:8E:46:30:76:12:88:CC:B0:24:62:11:DE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60de::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:35:25:51:32:66:da:c9:2f:5a:85:71:67:00:ba:96:02:
         6d:03:4d:28:bc:50:bf:f9:90:c0:67:e4:19:f0:8d:4b:3c:fd:
         7b:4c:75:e4:dd:58:a0:04:7f:5d:01:07:e6:e4:98:71:f3:a2:
         49:b7:ca:c7:0c:44:69:d5:0c:62:0c:0d:55:1a:f7:d7:98:1f:
         d4:10:d1:f9:79:7d:7b:de:44:2f:21:f7:97:fa:04:8c:79:d8:
         78:34:18:09:e8:d3:2e:1e:2d:ad:3e:f7:49:5a:eb:66:90:fb:
         1f:3e:ef:c1:b2:c2:5f:96:f8:fa:ff:5d:83:76:54:5a:1b:d1:
         c7:d9:b9:cd:21:7f:cf:6d:df:17:cf:a0:7b:14:43:8a:40:31:
         90:1f:60:34:55:e6:13:da:32:36:de:4a:40:84:aa:d2:eb:5c:
         63:b3:65:70:45:48:6b:0e:7a:03:5f:ab:c0:77:98:cc:4f:1d:
         57:02:d3:17:3c:5a:d3:9e:cd:af:c8:cb:ee:9b:43:4d:cc:8a:
         c5:f5:f9:2e:82:8b:7f:74:9d:a0:95:03:cb:56:cd:12:f6:80:
         ea:22:62:f5:86:90:36:ad:90:81:fb:2e:9b:8f:fe:ed:c6:a0:
         92:64:b7:41:81:3f:da:2d:5b:e8:c8:a8:5e:06:bd:ae:50:68:
         4d:bb:65:14
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCnFpIPuU8T18QG871C3CYMXU5pgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjYxNDE2MTlaFw0yNjAzMjUxNDIxMTlaMDMxMTAvBgNV
BAMTKDVDNjM2OEE4MDVFNjkxRkU4RTQ2MzA3NjEyODhDQ0IwMjQ2MjExREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2S1rv33xOHKRe9E2x5VUE3q4t
NvAVatqpptbYcikN7Ns7FWullorQJBebHCxPPwjVb1aVPw8m3MoXvpFUKJZYFAgb
6BqO/KWdA2nIvxTpkCtdnGqTQ3z+1DLNxeeTFvFGgCJSSiemX0GbDYsLAzjDBH/9
kgUozLrO4We/OGQ3ZfxNzIJdDO373Rm8nvwxC7AVObt4xjs/+wSGGBUNd82oGML0
tNFEh0jopg/xUNA1IrQUMF8gZaCaVjcu+ABphsYwCOAqdZ3jg5DLoYQ7LN/PltgL
EU3FFfllV+v5o2Af2J2fa6j7Ves8mugM7yRxdA9GIOmc1cq4W8JgCuIz22WlAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUXGNoqAXmkf6ORjB2EojMsCRiEd4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NDY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg3jAN
BgkqhkiG9w0BAQsFAAOCAQEASmM1JVEyZtrJL1qFcWcAupYCbQNNKLxQv/mQwGfk
GfCNSzz9e0x15N1YoAR/XQEH5uSYcfOiSbfKxwxEadUMYgwNVRr315gf1BDR+Xl9
e95ELyH3l/oEjHnYeDQYCejTLh4trT73SVrrZpD7Hz7vwbLCX5b4+v9dg3ZUWhvR
x9m5zSF/z23fF8+gexRDikAxkB9gNFXmE9oyNt5KQISq0utcY7NlcEVIaw56A1+r
wHeYzE8dVwLTFzxa057Nr8jL7ptDTcyKxfX5LoKLf3SdoJUDy1bNEvaA6iJi9YaQ
Nq2Qgfsum4/+7cagkmS3QYE/2i1b6MioXga9rlBoTbtlFA==
-----END CERTIFICATE-----