Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Za212R8+xZp52xPWoaCGuIBQG9rf7GJZMYfXgaa/5VE=
Subject key identifier:   EA:17:88:76:6B:28:CF:33:ED:D1:83:09:05:35:41:74:81:91:EA:15
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       43CFCD50B6CF7AD10F409B279DBDA195E500C56F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:08 +0000
ROA not before:           Fri 11 Apr 2025 18:29:08 +0000
ROA not after:            Fri 10 Apr 2026 18:34:08 +0000
asID:                     16909
IP address blocks:        2a14:7584:613b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cf:cd:50:b6:cf:7a:d1:0f:40:9b:27:9d:bd:a1:95:e5:00:c5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:08 2025 GMT
            Not After : Apr 10 18:34:08 2026 GMT
        Subject: CN=EA1788766B28CF33EDD18309053541748191EA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:fa:11:d2:c8:f5:1f:66:ff:bc:48:f9:07:
                    fa:92:dd:01:c3:02:17:59:ba:2d:7c:c3:52:ba:c2:
                    7c:c1:a1:2c:96:81:6b:8a:8f:31:3f:91:ca:fd:1f:
                    3d:cd:3c:45:9b:ad:95:31:da:2d:7b:24:6b:b7:6b:
                    87:51:a0:ed:ac:28:cd:ed:db:45:d7:2b:e0:f2:e4:
                    60:19:fb:ae:3a:43:e8:6f:5c:b8:8b:57:07:c5:56:
                    c0:61:95:41:9c:24:3e:9d:03:f4:e9:6f:b7:22:03:
                    ba:61:0b:7e:7b:93:83:de:c8:1c:ba:60:33:8f:6c:
                    74:2e:73:06:5d:ae:d1:e0:14:42:8b:ff:f0:b7:d0:
                    7b:d8:00:ce:92:8f:c9:cb:c6:91:2f:32:f0:d6:2f:
                    97:15:01:5e:df:5d:3e:48:0c:1a:c3:3f:75:36:58:
                    e5:68:9b:3a:b8:72:8d:f4:dd:0e:32:2e:45:cd:34:
                    cb:3f:8f:17:f7:f8:15:71:65:9c:56:c1:a8:29:9a:
                    f4:0a:31:5c:76:80:57:c2:a3:af:14:88:93:2a:e0:
                    77:1b:c9:3b:53:52:53:d5:11:94:21:0d:75:d7:c1:
                    e6:67:7b:2c:1d:5a:20:7a:cf:1c:5a:3d:a7:7f:38:
                    df:3d:2b:b1:95:a4:c6:87:bc:e2:8f:45:85:51:5b:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:88:76:6B:28:CF:33:ED:D1:83:09:05:35:41:74:81:91:EA:15
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:613b::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:09:db:77:8e:f0:93:ed:6d:7e:bc:71:2d:a4:e7:c9:12:
         b3:c9:66:61:31:f2:7c:44:6d:06:ea:0f:60:3a:a2:26:f4:f4:
         13:6a:7b:10:44:35:2e:c5:7b:51:0e:5a:e7:20:35:59:0f:40:
         6b:a6:0a:b0:95:81:19:3c:f4:5a:1f:52:94:7b:ea:4f:6a:49:
         74:d2:eb:37:5e:fd:93:64:06:5c:e3:5b:49:e1:2f:7b:7c:ca:
         24:6e:36:2a:ac:b1:26:84:7a:9c:26:49:19:f0:9f:90:09:e2:
         d6:57:5c:13:21:a0:50:87:d6:87:e8:e8:bb:09:b4:e9:21:f4:
         e9:ad:c1:4b:a3:c7:24:fd:70:f5:f6:28:c0:22:81:6f:17:75:
         5f:4c:4b:53:45:8d:cf:4e:1a:89:9c:6d:dc:c3:d6:33:2a:f2:
         f5:69:8a:b3:9a:2c:67:92:9d:72:0d:82:d0:57:83:21:27:00:
         f5:2c:f0:07:ed:35:d8:04:e5:70:ad:5c:6c:64:74:98:1b:86:
         16:46:ea:09:f9:cb:72:cd:71:4b:62:a2:ff:49:f8:cf:df:0b:
         40:a4:fa:bf:38:cc:79:f5:d7:07:f4:72:a2:34:5f:35:28:5b:
         5c:a8:2d:40:a7:14:e2:84:a0:fe:62:26:0b:75:ca:6d:1f:97:
         51:fe:6e:cf
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQ8/NULbPetEPQJsnnb2hleUAxW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MTExODI5MDhaFw0yNjA0MTAxODM0MDhaMDMxMTAvBgNV
BAMTKEVBMTc4ODc2NkIyOENGMzNFREQxODMwOTA1MzU0MTc0ODE5MUVBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTfoR0sj1H2b/vEj5B/qS3QHD
AhdZui18w1K6wnzBoSyWgWuKjzE/kcr9Hz3NPEWbrZUx2i17JGu3a4dRoO2sKM3t
20XXK+Dy5GAZ+646Q+hvXLiLVwfFVsBhlUGcJD6dA/Tpb7ciA7phC357k4PeyBy6
YDOPbHQucwZdrtHgFEKL//C30HvYAM6Sj8nLxpEvMvDWL5cVAV7fXT5IDBrDP3U2
WOVomzq4co303Q4yLkXNNMs/jxf3+BVxZZxWwagpmvQKMVx2gFfCo68UiJMq4Hcb
yTtTUlPVEZQhDXXXweZneywdWiB6zxxaPad/ON89K7GVpMaHvOKPRYVRW3KtAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU6heIdmsozzPt0YMJBTVBdIGR6hUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzMzYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhOzAN
BgkqhkiG9w0BAQsFAAOCAQEAY8kJ23eO8JPtbX68cS2k58kSs8lmYTHyfERtBuoP
YDqiJvT0E2p7EEQ1LsV7UQ5a5yA1WQ9Aa6YKsJWBGTz0Wh9SlHvqT2pJdNLrN179
k2QGXONbSeEve3zKJG42KqyxJoR6nCZJGfCfkAni1ldcEyGgUIfWh+jouwm06SH0
6a3BS6PHJP1w9fYowCKBbxd1X0xLU0WNz04aiZxt3MPWMyry9WmKs5osZ5Kdcg2C
0FeDIScA9SzwB+012ATlcK1cbGR0mBuGFkbqCfnLcs1xS2Ki/0n4z98LQKT6vzjM
efXXB/RyojRfNShbXKgtQKcU4oSg/mImC3XKbR+XUf5uzw==
-----END CERTIFICATE-----