Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363636303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          a85TIbip8tm/DTtdXTlpEZVutBw4eoUpRkZC5R+6E4Q=
Subject key identifier:   BB:80:67:54:1D:E2:EE:A5:8A:75:1D:01:04:DC:65:EC:B6:68:6A:9B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2953438B1A4E77B5185E19F9E337DAD6DC56AF85
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 23:09:48 +0000
ROA not before:           Thu 19 Dec 2024 23:04:48 +0000
ROA not after:            Thu 18 Dec 2025 23:09:48 +0000
asID:                     16909
IP address blocks:        2a14:7584:6660::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:53:43:8b:1a:4e:77:b5:18:5e:19:f9:e3:37:da:d6:dc:56:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 23:04:48 2024 GMT
            Not After : Dec 18 23:09:48 2025 GMT
        Subject: CN=BB8067541DE2EEA58A751D0104DC65ECB6686A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:37:a8:08:ab:c2:b7:25:8a:22:1e:58:b7:
                    84:f1:98:29:94:8c:16:0c:2d:14:fe:ab:74:b5:e0:
                    e5:8a:0c:90:52:cd:96:96:30:8d:e5:a7:50:1a:2d:
                    de:41:92:e4:d9:10:59:b5:30:85:a2:fe:58:3f:cc:
                    21:03:c3:7b:77:06:4c:14:db:38:f2:9e:22:3c:58:
                    b5:7f:81:88:62:c8:a0:38:77:23:8e:ce:e3:64:3b:
                    bb:5c:70:3c:5a:62:f0:61:91:2f:0e:e1:a4:ca:9b:
                    01:ac:71:56:3c:6b:d5:ea:dd:77:e6:fe:bb:f4:e2:
                    5f:42:32:8a:b0:a9:31:22:cd:5b:7a:fc:ca:7d:1a:
                    29:87:87:62:49:db:7d:b2:59:ea:67:4a:8b:79:d4:
                    41:9e:e2:b0:cc:97:28:a4:96:30:37:71:13:db:f6:
                    67:cc:95:a9:c2:7d:1f:8e:c1:92:78:b1:82:1f:18:
                    eb:17:54:40:d1:10:47:4f:0f:5a:2e:e6:0b:c3:07:
                    30:36:fa:e5:b8:84:ac:86:a1:4a:b0:1e:f3:da:6c:
                    f8:98:f1:9c:aa:b8:bb:86:18:a0:50:fa:89:65:63:
                    14:b2:5a:0e:53:11:6d:4f:c8:b4:61:93:a3:e1:40:
                    14:e8:99:f6:f2:59:c6:e5:b2:92:27:11:31:89:7a:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:67:54:1D:E2:EE:A5:8A:75:1D:01:04:DC:65:EC:B6:68:6A:9B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6660::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:8f:29:8d:bc:bb:d0:8a:c7:33:6e:2c:e1:88:c4:e7:a3:
         4b:2c:26:7b:ff:54:25:33:dc:00:b3:5e:36:2e:0d:1c:9f:d0:
         b2:f0:b6:9f:54:c2:5d:10:4c:43:1c:44:5e:df:40:ec:07:ff:
         6a:fa:3d:d1:2e:a3:e2:4d:ea:21:e6:b1:ef:6d:1b:61:51:40:
         bf:a1:13:30:69:c8:15:85:3f:4c:ca:82:57:2c:d0:78:8e:d0:
         98:a4:06:c5:ae:ba:13:79:ab:c3:e2:52:da:69:1d:55:f7:2c:
         ea:17:56:d1:98:3d:a7:60:07:0c:73:57:d9:63:61:ac:1e:5e:
         62:b1:0e:93:aa:18:4d:5b:7d:e4:91:34:c1:c3:af:d3:ac:64:
         0b:40:50:8b:f9:5f:18:8e:20:5f:32:0c:ea:99:5d:34:12:b3:
         3e:3e:a6:6b:0f:71:5d:06:16:03:8e:2b:cc:7e:57:31:6d:07:
         9e:e1:9a:59:71:7e:82:29:a8:f8:8b:62:d8:90:98:f2:b2:ea:
         e6:60:a1:de:10:7d:59:d9:13:b9:7c:ea:2d:b7:4a:09:f7:f2:
         ab:3b:52:5b:ac:1a:c6:d4:27:14:4d:d3:63:61:ed:9e:9f:48:
         d8:84:6f:a0:37:d5:46:f5:44:98:d4:0c:a2:54:8d:aa:3e:fd:
         8b:ab:15:a8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKVNDixpOd7UYXhn54zfa1txWr4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMTkyMzA0NDhaFw0yNTEyMTgyMzA5NDhaMDMxMTAvBgNV
BAMTKEJCODA2NzU0MURFMkVFQTU4QTc1MUQwMTA0REM2NUVDQjY2ODZBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaTeoCKvCtyWKIh5Yt4TxmCmU
jBYMLRT+q3S14OWKDJBSzZaWMI3lp1AaLd5BkuTZEFm1MIWi/lg/zCEDw3t3BkwU
2zjyniI8WLV/gYhiyKA4dyOOzuNkO7tccDxaYvBhkS8O4aTKmwGscVY8a9Xq3Xfm
/rv04l9CMoqwqTEizVt6/Mp9GimHh2JJ232yWepnSot51EGe4rDMlyikljA3cRPb
9mfMlanCfR+OwZJ4sYIfGOsXVEDREEdPD1ou5gvDBzA2+uW4hKyGoUqwHvPabPiY
8ZyquLuGGKBQ+ollYxSyWg5TEW1PyLRhk6PhQBTomfbyWcblspInETGJeim/AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUu4BnVB3i7qWKdR0BBNxl7LZoapswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzYzNjMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRmYDAN
BgkqhkiG9w0BAQsFAAOCAQEAjeqPKY28u9CKxzNuLOGIxOejSywme/9UJTPcALNe
Ni4NHJ/QsvC2n1TCXRBMQxxEXt9A7Af/avo90S6j4k3qIeax720bYVFAv6ETMGnI
FYU/TMqCVyzQeI7QmKQGxa66E3mrw+JS2mkdVfcs6hdW0Zg9p2AHDHNX2WNhrB5e
YrEOk6oYTVt95JE0wcOv06xkC0BQi/lfGI4gXzIM6pldNBKzPj6maw9xXQYWA44r
zH5XMW0HnuGaWXF+gimo+Iti2JCY8rLq5mCh3hB9WdkTuXzqLbdKCffyqztSW6wa
xtQnFE3TY2Htnp9I2IRvoDfVRvVEmNQMolSNqj79i6sVqA==
-----END CERTIFICATE-----