Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          u5uoRioR5Cqhk5T0c6RGfzmGo5yMXyoAqr3i6RhuSeA=
Subject key identifier:   63:70:EE:77:21:F9:68:CF:DC:54:F6:59:D4:9C:81:43:14:EC:EB:2A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5F6E994D39222A73DF4DE607DCA375A6D786E5E2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:44 +0000
ROA not before:           Fri 11 Apr 2025 18:27:44 +0000
ROA not after:            Fri 10 Apr 2026 18:32:44 +0000
asID:                     16909
IP address blocks:        2a14:7584:6127::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6e:99:4d:39:22:2a:73:df:4d:e6:07:dc:a3:75:a6:d7:86:e5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:44 2025 GMT
            Not After : Apr 10 18:32:44 2026 GMT
        Subject: CN=6370EE7721F968CFDC54F659D49C814314ECEB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:9e:19:92:df:00:9c:86:ed:13:97:ab:d5:
                    c4:1f:19:7e:8c:75:cf:4a:85:ae:e5:39:1e:1e:cd:
                    5f:4f:8c:3f:af:9d:84:2e:a4:e6:f7:92:0f:b5:2d:
                    c8:1b:4a:87:c2:94:52:7e:27:c6:55:0f:94:02:aa:
                    5d:83:fd:17:6e:42:0c:ad:2d:fa:5d:cf:4e:3e:aa:
                    a7:55:22:02:01:19:8e:a8:40:51:84:5f:ce:14:93:
                    1c:fc:29:ff:bf:1f:fe:c3:d7:f1:80:ca:5c:e5:5c:
                    b6:d6:02:35:a3:68:87:02:eb:68:29:0a:a9:d5:bc:
                    50:67:92:dc:bf:75:4c:8c:97:67:7f:b6:41:34:ea:
                    64:af:62:84:8c:28:a0:6d:d8:b3:a9:49:64:ae:ee:
                    0e:e5:13:cb:32:63:1a:99:9b:5e:f1:e7:66:cc:8f:
                    da:42:9e:9a:a5:c3:f5:f7:18:57:2e:42:79:64:77:
                    9a:12:7c:24:00:68:15:68:b9:f6:a4:d5:d9:ab:63:
                    ff:d2:42:4f:43:6b:3a:33:5c:6c:c9:12:38:ce:d9:
                    6a:cf:fa:fe:80:e7:49:54:94:95:0d:5a:9f:28:b0:
                    f2:74:60:8f:a3:25:b3:31:8b:1b:aa:92:c7:b2:a7:
                    cb:46:fd:f8:4b:58:f8:42:5e:ba:8d:a7:0b:b9:6f:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:EE:77:21:F9:68:CF:DC:54:F6:59:D4:9C:81:43:14:EC:EB:2A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6127::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:2c:96:6c:a4:d6:01:5f:f2:c1:d4:41:e8:68:72:8f:7e:
         80:24:fe:b7:14:32:25:89:07:0a:7b:e1:91:56:a0:ea:04:db:
         43:93:df:6a:bd:54:01:58:94:7a:89:38:6d:cf:ae:bc:a8:3c:
         ae:1b:68:55:dc:bf:31:86:68:9f:37:98:21:45:75:d2:a3:9a:
         86:25:68:2e:0e:b1:6f:25:42:35:8c:81:0a:28:0d:14:6c:f3:
         7d:92:0f:ad:a2:4c:63:c6:16:ca:bb:5f:2f:53:a5:fd:bb:46:
         48:c0:86:e1:a0:01:f7:cd:97:8a:7c:66:b4:35:04:6b:68:f7:
         27:38:e9:0e:41:a1:2d:2f:b0:ae:b3:a9:6b:b9:7f:22:7e:48:
         57:b3:52:d0:45:7e:26:b7:51:e4:71:f3:86:26:ca:af:1b:ff:
         b3:b7:bd:37:64:b1:92:c4:1e:cc:64:35:3c:6d:9d:22:ae:82:
         ae:55:97:cd:b8:1d:27:fb:b8:1c:54:4c:25:df:7e:9f:74:64:
         d4:b3:44:31:d9:d7:2a:db:bd:f1:f6:22:d8:e0:8a:17:79:2d:
         73:cf:c7:9b:9e:49:39:92:f6:55:15:de:80:10:05:47:bc:05:
         e2:f0:57:6c:3d:78:d9:21:07:f2:d5:f6:e2:f7:39:7a:a5:3f:
         f1:c7:36:27
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUX26ZTTkiKnPfTeYH3KN1pteG5eIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MTExODI3NDRaFw0yNjA0MTAxODMyNDRaMDMxMTAvBgNV
BAMTKDYzNzBFRTc3MjFGOTY4Q0ZEQzU0RjY1OUQ0OUM4MTQzMTRFQ0VCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYk54Zkt8AnIbtE5er1cQfGX6M
dc9Kha7lOR4ezV9PjD+vnYQupOb3kg+1LcgbSofClFJ+J8ZVD5QCql2D/RduQgyt
Lfpdz04+qqdVIgIBGY6oQFGEX84Ukxz8Kf+/H/7D1/GAylzlXLbWAjWjaIcC62gp
CqnVvFBnkty/dUyMl2d/tkE06mSvYoSMKKBt2LOpSWSu7g7lE8syYxqZm17x52bM
j9pCnpqlw/X3GFcuQnlkd5oSfCQAaBVoufak1dmrY//SQk9DazozXGzJEjjO2WrP
+v6A50lUlJUNWp8osPJ0YI+jJbMxixuqkseyp8tG/fhLWPhCXrqNpwu5bzmlAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUY3DudyH5aM/cVPZZ1JyBQxTs6yowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzMjM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhJzAN
BgkqhkiG9w0BAQsFAAOCAQEAG1gslmyk1gFf8sHUQehoco9+gCT+txQyJYkHCnvh
kVag6gTbQ5Pfar1UAViUeok4bc+uvKg8rhtoVdy/MYZonzeYIUV10qOahiVoLg6x
byVCNYyBCigNFGzzfZIPraJMY8YWyrtfL1Ol/btGSMCG4aAB982XinxmtDUEa2j3
JzjpDkGhLS+wrrOpa7l/In5IV7NS0EV+JrdR5HHzhibKrxv/s7e9N2SxksQezGQ1
PG2dIq6CrlWXzbgdJ/u4HFRMJd9+n3Rk1LNEMdnXKtu98fYi2OCKF3ktc8/Hm55J
OZL2VRXegBAFR7wF4vBXbD142SEH8tX24vc5eqU/8cc2Jw==
-----END CERTIFICATE-----