Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065383a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          iDCHyMgCPyz4HkYALL7Q6UMpxS18+oyg5cFSfQWE8Ts=
Subject key identifier:   3E:7D:E9:2F:39:CF:81:88:44:4B:9D:10:FA:E5:08:5C:1D:AF:4A:7E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       37D6ED049F8B9EF5AA80D893F7E2B6C02B9E084E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065383a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:22:06 +0000
ROA not before:           Wed 26 Mar 2025 14:17:06 +0000
ROA not after:            Wed 25 Mar 2026 14:22:06 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:ed:04:9f:8b:9e:f5:aa:80:d8:93:f7:e2:b6:c0:2b:9e:08:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:17:06 2025 GMT
            Not After : Mar 25 14:22:06 2026 GMT
        Subject: CN=3E7DE92F39CF8188444B9D10FAE5085C1DAF4A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:24:b7:a8:ca:77:c6:36:1d:ec:d9:29:eb:
                    82:69:b9:09:51:f6:1c:5c:fa:5a:da:dd:38:74:34:
                    d3:70:26:81:52:a2:46:c8:be:06:d0:2e:e9:85:b9:
                    94:a8:c6:62:2a:f5:7f:00:5c:1e:a0:49:74:84:c2:
                    56:3e:e9:0e:05:d4:76:59:f7:49:b4:43:f3:71:f4:
                    ea:29:5e:31:33:9c:d1:fb:d4:57:5d:e8:c5:e1:c3:
                    69:09:8f:08:06:d9:3f:da:11:e4:3f:5c:0c:09:a4:
                    70:59:07:f3:7b:5e:b0:45:f2:58:11:d9:89:4f:41:
                    18:af:3f:28:23:60:1a:ab:45:1b:21:82:94:bd:37:
                    20:65:98:d8:67:b7:44:3d:4c:99:3d:3f:59:fd:16:
                    ef:d9:ad:8d:cf:cf:9e:36:71:56:2b:3a:0d:59:0a:
                    b7:a6:0b:01:6b:01:70:b3:97:9f:51:bc:ce:d0:db:
                    fb:3d:4c:f2:97:fc:13:fd:8d:fd:40:00:dd:87:63:
                    a1:c0:2d:d3:7d:f7:42:84:b3:fe:62:d3:79:9b:5b:
                    fb:f4:48:dd:8e:2c:73:b2:19:ff:ff:93:ad:46:0e:
                    69:4c:89:3b:51:54:4d:9a:5a:ab:3b:69:6f:76:ec:
                    81:59:7a:e0:58:67:64:10:98:59:18:e3:e8:74:a6:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:E9:2F:39:CF:81:88:44:4B:9D:10:FA:E5:08:5C:1D:AF:4A:7E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065383a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:9c:ff:8c:00:63:35:e7:40:cd:73:2c:15:fc:ec:17:87:
         4b:e3:68:f8:3f:48:db:7c:5f:7d:82:9b:c5:5c:41:90:bf:e0:
         d2:74:68:db:b5:08:46:c6:e7:15:9a:9f:fe:d2:8a:a2:6b:4f:
         fa:46:75:e7:97:e7:3f:38:d6:55:6c:84:f8:65:08:f8:6d:d0:
         1e:9c:f3:21:e0:8d:47:03:2c:03:a2:11:99:c6:8c:74:a9:ca:
         a1:fb:35:58:b0:a0:88:21:ae:28:db:74:ee:e3:db:59:aa:17:
         3f:30:ab:52:93:05:35:d6:43:9b:68:ce:9a:94:16:eb:25:23:
         05:31:df:65:cc:de:42:e8:e3:ec:2b:f2:f1:57:5d:b8:6c:5e:
         04:c6:bd:50:6d:d8:a8:7a:85:8e:0a:52:5e:9f:69:4b:7a:e4:
         42:04:ea:b4:53:61:88:eb:69:6c:18:7f:4f:12:72:62:5c:24:
         de:04:5b:98:82:3e:36:c2:46:8a:ce:98:af:af:93:18:3d:62:
         08:04:85:03:48:bb:1b:f0:85:da:58:37:ae:d1:1a:5a:47:96:
         1f:19:dc:93:75:ff:52:e0:ef:78:cc:71:28:8f:ec:56:b3:71:
         4e:eb:cc:2f:f1:ec:55:da:d0:77:2a:77:ff:b5:5a:23:2c:b1:
         68:84:43:64
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUN9btBJ+LnvWqgNiT9+K2wCueCE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjYxNDE3MDZaFw0yNjAzMjUxNDIyMDZaMDMxMTAvBgNV
BAMTKDNFN0RFOTJGMzlDRjgxODg0NDRCOUQxMEZBRTUwODVDMURBRjRBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYCS3qMp3xjYd7Nkp64JpuQlR
9hxc+lra3Th0NNNwJoFSokbIvgbQLumFuZSoxmIq9X8AXB6gSXSEwlY+6Q4F1HZZ
90m0Q/Nx9OopXjEznNH71Fdd6MXhw2kJjwgG2T/aEeQ/XAwJpHBZB/N7XrBF8lgR
2YlPQRivPygjYBqrRRshgpS9NyBlmNhnt0Q9TJk9P1n9Fu/ZrY3Pz542cVYrOg1Z
CremCwFrAXCzl59RvM7Q2/s9TPKX/BP9jf1AAN2HY6HALdN990KEs/5i03mbW/v0
SN2OLHOyGf//k61GDmlMiTtRVE2aWqs7aW927IFZeuBYZ2QQmFkY4+h0pvgHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUPn3pLznPgYhES50Q+uUIXB2vSn4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2NTM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRg6DAN
BgkqhkiG9w0BAQsFAAOCAQEACZ6c/4wAYzXnQM1zLBX87BeHS+No+D9I23xffYKb
xVxBkL/g0nRo27UIRsbnFZqf/tKKomtP+kZ155fnPzjWVWyE+GUI+G3QHpzzIeCN
RwMsA6IRmcaMdKnKofs1WLCgiCGuKNt07uPbWaoXPzCrUpMFNdZDm2jOmpQW6yUj
BTHfZczeQujj7Cvy8VdduGxeBMa9UG3YqHqFjgpSXp9pS3rkQgTqtFNhiOtpbBh/
TxJyYlwk3gRbmII+NsJGis6Yr6+TGD1iCASFA0i7G/CF2lg3rtEaWkeWHxnck3X/
UuDveMxxKI/sVrNxTuvML/HsVdrQdyp3/7VaIyyxaIRDZA==
-----END CERTIFICATE-----