Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363339303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363339303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          YqeEPZxYxvOqrKk4KDfUQbAax9dLwvcsO8O2zuyIe9Q=
Subject key identifier:   A9:1D:47:E9:3A:2D:3D:16:E0:6B:87:CD:55:32:55:1C:7F:50:DE:CE
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       140A2B453429FFBC2413928500819F6049C0F17E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363339303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 21:04:15 +0000
ROA not before:           Thu 19 Dec 2024 20:59:15 +0000
ROA not after:            Thu 18 Dec 2025 21:04:15 +0000
asID:                     16909
IP address blocks:        2a14:7584:6390::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0a:2b:45:34:29:ff:bc:24:13:92:85:00:81:9f:60:49:c0:f1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:59:15 2024 GMT
            Not After : Dec 18 21:04:15 2025 GMT
        Subject: CN=A91D47E93A2D3D16E06B87CD5532551C7F50DECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:17:8a:cb:31:b3:92:85:36:68:df:47:ac:
                    ee:d1:e2:71:07:9d:f6:44:b9:38:d0:43:09:5e:28:
                    35:ec:db:0a:04:f0:af:87:26:db:9c:fa:85:bb:e1:
                    59:df:88:0f:77:43:44:ca:9d:cb:a6:ad:ef:3b:44:
                    f6:20:eb:d5:2e:9a:c3:ac:8d:36:22:5c:d1:fc:97:
                    85:2b:57:6b:84:e2:09:1d:92:80:9e:5a:41:ee:02:
                    6a:97:81:9d:b4:c2:63:62:4f:d7:29:a2:a5:0b:6b:
                    7d:52:b5:27:ae:e0:25:df:ec:02:a0:a8:6d:cf:f4:
                    40:d0:2c:95:28:38:9c:53:e4:63:f9:ec:1d:2c:f5:
                    4c:5e:3b:d9:76:75:9e:08:a5:ed:c4:ff:66:21:35:
                    a9:98:f5:0f:6d:fe:e6:a1:a0:3a:c1:df:fc:a6:a4:
                    29:d2:61:59:e7:0f:f7:54:3e:3a:a0:13:cb:53:ce:
                    80:b1:71:06:6c:56:cc:b0:49:13:88:b7:bc:77:e2:
                    66:76:f2:71:49:57:3d:44:82:b9:72:22:c1:f7:aa:
                    64:00:30:f4:2e:f0:ec:c7:f6:bc:29:51:a6:8d:08:
                    70:cb:4b:d8:01:6e:81:68:ab:83:34:34:09:ce:6b:
                    83:53:12:e5:59:f0:43:56:30:ae:54:7d:f6:83:87:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1D:47:E9:3A:2D:3D:16:E0:6B:87:CD:55:32:55:1C:7F:50:DE:CE
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363339303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6390::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:06:7a:10:c5:80:af:ac:46:3e:36:01:1e:33:32:ab:a1:b0:
         7f:9a:20:1c:6d:76:c1:c6:9b:f6:96:c5:25:c4:4b:aa:4e:1c:
         d5:ab:86:83:4c:90:dd:a2:a8:2d:39:dc:1f:a5:6d:7f:39:56:
         3b:4c:c0:25:65:59:82:d5:46:fe:df:d6:3c:b4:48:7e:c7:6c:
         8b:e9:6b:25:be:85:be:61:22:e8:5e:7f:b6:1e:0b:f3:90:0f:
         d8:6b:b9:b0:2c:27:36:ad:ef:fc:36:5f:d8:73:3c:89:af:61:
         28:4a:30:f9:7a:a2:25:84:f0:23:6e:7e:41:5e:d5:bc:04:3a:
         e6:93:32:9b:fd:78:b2:08:50:bb:f6:fe:4c:e1:a2:13:23:4f:
         60:d2:2f:e2:69:82:95:f7:bd:21:6c:16:a4:f1:c8:1c:9a:b5:
         d8:2f:5c:36:e8:20:94:91:a2:a2:8e:55:2e:d0:68:8e:55:53:
         a0:8f:7d:ff:22:2f:00:25:93:5b:17:de:3f:c1:59:8c:14:88:
         ae:ed:2b:4b:76:36:a6:1a:24:cd:5b:81:5b:2b:82:1c:60:41:
         d1:2a:8d:b5:7a:82:7e:4f:f4:ca:da:64:d2:5e:80:ff:28:08:
         7a:45:e2:b2:0e:36:ed:6e:d9:8c:2c:f8:cb:d5:c0:44:58:f9:
         0d:e8:c0:be
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFAorRTQp/7wkE5KFAIGfYEnA8X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMTkyMDU5MTVaFw0yNTEyMTgyMTA0MTVaMDMxMTAvBgNV
BAMTKEE5MUQ0N0U5M0EyRDNEMTZFMDZCODdDRDU1MzI1NTFDN0Y1MERFQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcBeKyzGzkoU2aN9HrO7R4nEH
nfZEuTjQQwleKDXs2woE8K+HJtuc+oW74VnfiA93Q0TKncumre87RPYg69UumsOs
jTYiXNH8l4UrV2uE4gkdkoCeWkHuAmqXgZ20wmNiT9cpoqULa31StSeu4CXf7AKg
qG3P9EDQLJUoOJxT5GP57B0s9UxeO9l2dZ4Ipe3E/2YhNamY9Q9t/uahoDrB3/ym
pCnSYVnnD/dUPjqgE8tTzoCxcQZsVsywSROIt7x34mZ28nFJVz1EgrlyIsH3qmQA
MPQu8OzH9rwpUaaNCHDLS9gBboFoq4M0NAnOa4NTEuVZ8ENWMK5UffaDhxFNAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqR1H6TotPRbga4fNVTJVHH9Q3s4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzOTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjkDAN
BgkqhkiG9w0BAQsFAAOCAQEAggZ6EMWAr6xGPjYBHjMyq6Gwf5ogHG12wcab9pbF
JcRLqk4c1auGg0yQ3aKoLTncH6VtfzlWO0zAJWVZgtVG/t/WPLRIfsdsi+lrJb6F
vmEi6F5/th4L85AP2Gu5sCwnNq3v/DZf2HM8ia9hKEow+XqiJYTwI25+QV7VvAQ6
5pMym/14sghQu/b+TOGiEyNPYNIv4mmClfe9IWwWpPHIHJq12C9cNugglJGioo5V
LtBojlVToI99/yIvACWTWxfeP8FZjBSIru0rS3Y2phokzVuBWyuCHGBB0SqNtXqC
fk/0ytpk0l6A/ygIekXisg427W7ZjCz4y9XARFj5DejAvg==
-----END CERTIFICATE-----