Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Wwni7/gQrcEZQVeNX1KzZmcgWoG+/EF0OvfavZxb8qA=
Subject key identifier:   84:13:18:41:34:CC:D5:87:4E:69:F9:0B:88:5A:EF:BA:D5:0D:82:83
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4CDE4018743E0E39DC0443093BFB44BD39669411
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:41 +0000
ROA not before:           Fri 11 Apr 2025 18:27:41 +0000
ROA not after:            Fri 10 Apr 2026 18:32:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:6124::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:de:40:18:74:3e:0e:39:dc:04:43:09:3b:fb:44:bd:39:66:94:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:41 2025 GMT
            Not After : Apr 10 18:32:41 2026 GMT
        Subject: CN=8413184134CCD5874E69F90B885AEFBAD50D8283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:af:69:e0:b9:bb:57:64:8c:11:e5:56:93:
                    fb:d8:cb:2e:12:38:2b:ba:9f:3b:b9:d4:5e:0d:aa:
                    91:09:bd:00:b5:5e:80:b3:40:3c:90:a8:3a:a9:af:
                    75:fa:6e:0f:32:b7:7c:5c:78:34:5f:d6:a0:a7:45:
                    4a:4c:a8:d2:09:67:48:06:61:8c:cc:6b:2b:d0:62:
                    20:76:7e:53:0b:81:f3:ac:f3:aa:bb:00:64:a0:bb:
                    ab:4f:60:56:bd:f0:dd:e7:8b:7b:cc:3e:62:3d:3a:
                    76:d7:2f:0e:ba:3d:62:02:b9:aa:09:aa:a3:a8:d1:
                    2d:b1:53:81:c9:07:7f:5f:37:7b:1c:30:bd:05:5a:
                    fb:44:a4:9f:43:85:e9:2f:88:eb:24:60:0e:45:b0:
                    2e:79:37:5a:7f:e6:9c:58:8c:95:35:07:1f:25:dc:
                    d5:f9:fb:ce:2d:6c:6e:99:f3:31:be:50:d3:bd:93:
                    e6:5f:44:23:41:a1:29:4c:f3:b1:73:9d:00:64:77:
                    f5:39:43:07:81:22:82:fd:7f:bd:8f:e7:39:1f:ad:
                    58:d3:55:04:7e:cf:33:3d:98:7e:a8:8d:c6:a2:1f:
                    77:de:74:cb:fb:2d:f3:94:dd:65:61:28:c1:9a:3e:
                    f9:de:86:52:de:00:1e:02:74:ed:bc:6c:c2:f0:f0:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:18:41:34:CC:D5:87:4E:69:F9:0B:88:5A:EF:BA:D5:0D:82:83
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6124::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:93:d8:f8:04:d1:5a:b5:c3:76:2e:71:8b:97:e5:82:9d:
         d4:1d:d9:3b:7f:98:16:ef:19:47:b6:70:7a:37:6d:05:db:e3:
         1d:a1:56:f0:d2:3e:b3:69:77:0e:f2:62:fa:7f:91:2c:09:c3:
         84:55:6a:81:33:3b:5d:4a:3e:65:05:bc:37:a2:5d:1e:50:db:
         65:bb:fe:e8:72:55:b0:3d:f8:4c:e6:07:7c:db:05:51:a1:2d:
         3e:08:24:82:7a:e5:e1:f7:a2:ad:2a:5b:e5:5a:86:bb:b6:6c:
         d7:ba:19:25:1f:8a:cd:ed:35:ef:8d:ed:13:1e:f4:3f:e6:80:
         52:9b:8e:ef:44:d4:2c:0b:00:1e:6a:5b:b6:78:95:50:1d:5d:
         ef:ee:a3:5d:27:e4:62:80:f6:2d:bf:fc:59:77:c8:a4:33:ee:
         bd:9a:03:ae:58:98:cf:64:63:bd:83:37:38:81:25:b1:07:74:
         38:a9:62:b8:36:b8:bb:fa:2b:c1:6a:ff:dc:04:2c:f6:f6:32:
         c4:15:c5:ad:b8:b1:fa:19:31:ce:09:ac:58:8c:01:6a:31:9e:
         a7:7e:ba:96:55:6b:c3:8a:b2:20:02:67:95:9c:90:a0:df:4d:
         7c:c0:13:21:54:c8:2d:99:75:d2:60:53:ca:79:45:a2:58:eb:
         ef:5d:16:7e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTN5AGHQ+DjncBEMJO/tEvTlmlBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MTExODI3NDFaFw0yNjA0MTAxODMyNDFaMDMxMTAvBgNV
BAMTKDg0MTMxODQxMzRDQ0Q1ODc0RTY5RjkwQjg4NUFFRkJBRDUwRDgyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI769p4Lm7V2SMEeVWk/vYyy4S
OCu6nzu51F4NqpEJvQC1XoCzQDyQqDqpr3X6bg8yt3xceDRf1qCnRUpMqNIJZ0gG
YYzMayvQYiB2flMLgfOs86q7AGSgu6tPYFa98N3ni3vMPmI9OnbXLw66PWICuaoJ
qqOo0S2xU4HJB39fN3scML0FWvtEpJ9DhekviOskYA5FsC55N1p/5pxYjJU1Bx8l
3NX5+84tbG6Z8zG+UNO9k+ZfRCNBoSlM87FznQBkd/U5QweBIoL9f72P5zkfrVjT
VQR+zzM9mH6ojcaiH3fedMv7LfOU3WVhKMGaPvnehlLeAB4CdO28bMLw8NypAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUhBMYQTTM1YdOafkLiFrvutUNgoMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzMjM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhJDAN
BgkqhkiG9w0BAQsFAAOCAQEAoZmT2PgE0Vq1w3YucYuX5YKd1B3ZO3+YFu8ZR7Zw
ejdtBdvjHaFW8NI+s2l3DvJi+n+RLAnDhFVqgTM7XUo+ZQW8N6JdHlDbZbv+6HJV
sD34TOYHfNsFUaEtPggkgnrl4feirSpb5VqGu7Zs17oZJR+Kze01743tEx70P+aA
UpuO70TULAsAHmpbtniVUB1d7+6jXSfkYoD2Lb/8WXfIpDPuvZoDrliYz2RjvYM3
OIElsQd0OKliuDa4u/orwWr/3AQs9vYyxBXFrbix+hkxzgmsWIwBajGep366llVr
w4qyIAJnlZyQoN9NfMATIVTILZl10mBTynlFoljr710Wfg==
-----END CERTIFICATE-----