Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363363303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          AvS2wmSo2WAP65JIVV9qYm6C89YdtVqDsJcWBm66RKo=
Subject key identifier:   79:B3:A8:AD:6E:A7:83:0C:E0:88:B2:8C:A5:68:5F:A7:2F:43:6D:90
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3614540BC96D6B820A80BB3071E95E7376242A11
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 21 Dec 2024 20:46:11 +0000
ROA not before:           Sat 21 Dec 2024 20:41:11 +0000
ROA not after:            Sat 20 Dec 2025 20:46:11 +0000
asID:                     16909
IP address blocks:        2a14:7584:63c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:14:54:0b:c9:6d:6b:82:0a:80:bb:30:71:e9:5e:73:76:24:2a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 21 20:41:11 2024 GMT
            Not After : Dec 20 20:46:11 2025 GMT
        Subject: CN=79B3A8AD6EA7830CE088B28CA5685FA72F436D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:c8:18:d2:60:fd:3a:b2:b1:8b:27:8e:9d:
                    99:97:5a:5f:72:b1:0e:63:c1:7e:df:9c:2e:6a:ee:
                    1d:b0:8e:8f:6f:d8:b6:89:77:eb:14:39:60:86:3b:
                    65:f6:3c:f4:3e:05:01:d8:41:c3:df:5b:f3:0b:30:
                    f9:28:e1:01:fe:5c:ed:f3:dd:f9:a6:33:a3:79:4e:
                    e0:3d:0f:93:32:a9:09:ed:08:d4:a4:33:c7:eb:ef:
                    b7:34:d2:c4:02:ce:51:6a:32:a4:4c:ff:12:f5:3b:
                    0b:e2:d5:17:66:7a:b8:ba:ef:b1:47:3c:2f:67:f2:
                    3a:69:41:8b:94:76:48:1b:ab:2a:30:8b:f4:e2:62:
                    d6:13:12:6c:d4:62:60:84:10:5e:4b:6c:1a:04:83:
                    9f:22:e4:16:e5:a5:62:d0:fb:b5:ef:9d:6f:98:74:
                    a6:cd:0f:e2:93:89:ea:20:d1:b6:49:44:66:dc:19:
                    5e:2b:b6:e7:3a:bb:97:b1:71:b1:d2:bd:05:9b:05:
                    7d:48:a4:7a:84:a4:8c:8a:61:32:36:fb:2c:53:55:
                    1e:01:32:1b:c3:06:10:e5:3d:a5:85:5b:d1:43:cf:
                    16:4f:61:22:4a:34:b4:41:eb:04:5d:dd:f3:89:71:
                    5a:04:e8:9e:c6:2f:5e:b4:b1:fc:33:15:fc:51:eb:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B3:A8:AD:6E:A7:83:0C:E0:88:B2:8C:A5:68:5F:A7:2F:43:6D:90
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:63c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:20:db:13:0b:f6:74:43:c8:92:0f:7f:f8:79:6a:0c:80:c9:
         d7:1e:60:06:85:fb:6a:aa:b7:49:df:48:64:e6:c8:2b:48:35:
         ec:7d:d5:4c:3e:81:a5:b3:7c:9e:e8:76:b0:93:60:c0:ac:24:
         c0:fa:b5:bb:19:4b:bf:37:76:1d:9c:8b:f4:1c:53:59:b5:d8:
         f0:5d:1c:a9:4a:6e:7e:bd:23:0f:1a:c7:2c:6f:91:cd:0a:4c:
         33:33:63:be:f0:67:2f:d1:1c:a9:60:fe:81:72:58:65:41:cf:
         90:10:1c:45:48:c8:d2:69:60:7f:71:c2:e2:b7:61:23:91:af:
         88:a5:7c:b8:e2:8c:d8:fe:61:f6:49:eb:b7:82:98:55:4d:59:
         2c:70:34:88:f8:b0:e9:26:26:94:f7:85:8c:14:2f:92:42:31:
         b4:e0:d6:16:0a:18:9c:48:73:45:ac:d1:cf:2b:9a:75:39:ed:
         a5:af:55:28:96:6f:ef:aa:f3:05:21:f6:8f:b0:9e:45:c1:26:
         eb:b1:fa:04:fc:60:5d:ee:9c:00:ab:91:07:10:d9:51:94:cc:
         bc:07:d8:7b:36:3c:1f:76:9e:b1:48:69:e1:b7:96:13:ec:c1:
         f3:80:1c:9d:0b:75:73:42:b7:0b:fa:82:03:a2:1f:06:ae:99:
         de:44:6c:47
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNhRUC8lta4IKgLswcelec3YkKhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjEyMDQxMTFaFw0yNTEyMjAyMDQ2MTFaMDMxMTAvBgNV
BAMTKDc5QjNBOEFENkVBNzgzMENFMDg4QjI4Q0E1Njg1RkE3MkY0MzZEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD46cgY0mD9OrKxiyeOnZmXWl9y
sQ5jwX7fnC5q7h2wjo9v2LaJd+sUOWCGO2X2PPQ+BQHYQcPfW/MLMPko4QH+XO3z
3fmmM6N5TuA9D5MyqQntCNSkM8fr77c00sQCzlFqMqRM/xL1Owvi1Rdmeri677FH
PC9n8jppQYuUdkgbqyowi/TiYtYTEmzUYmCEEF5LbBoEg58i5BblpWLQ+7XvnW+Y
dKbND+KTieog0bZJRGbcGV4rtuc6u5excbHSvQWbBX1IpHqEpIyKYTI2+yxTVR4B
MhvDBhDlPaWFW9FDzxZPYSJKNLRB6wRd3fOJcVoE6J7GL160sfwzFfxR69OLAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUebOorW6ngwzgiLKMpWhfpy9DbZAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzM2MzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjwDAN
BgkqhkiG9w0BAQsFAAOCAQEAWCDbEwv2dEPIkg9/+HlqDIDJ1x5gBoX7aqq3Sd9I
ZObIK0g17H3VTD6BpbN8nuh2sJNgwKwkwPq1uxlLvzd2HZyL9BxTWbXY8F0cqUpu
fr0jDxrHLG+RzQpMMzNjvvBnL9EcqWD+gXJYZUHPkBAcRUjI0mlgf3HC4rdhI5Gv
iKV8uOKM2P5h9knrt4KYVU1ZLHA0iPiw6SYmlPeFjBQvkkIxtODWFgoYnEhzRazR
zyuadTntpa9VKJZv76rzBSH2j7CeRcEm67H6BPxgXe6cAKuRBxDZUZTMvAfYezY8
H3aesUhp4beWE+zB84AcnQt1c0K3C/qCA6IfBq6Z3kRsRw==
-----END CERTIFICATE-----