Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363835303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363835303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          g9MuA6nNTCGTHXYw8NeYPI4qi2g6PR1dhek47DmNoZ0=
Subject key identifier:   B2:CF:D5:4C:39:D8:DF:31:AA:9D:AE:FD:51:90:65:12:8A:77:AE:17
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4865E27D03F1342A0DEBA54760F516B675FC1269
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363835303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 21 Dec 2024 20:33:17 +0000
ROA not before:           Sat 21 Dec 2024 20:28:17 +0000
ROA not after:            Sat 20 Dec 2025 20:33:17 +0000
asID:                     16909
IP address blocks:        2a14:7584:6850::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:e2:7d:03:f1:34:2a:0d:eb:a5:47:60:f5:16:b6:75:fc:12:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 21 20:28:17 2024 GMT
            Not After : Dec 20 20:33:17 2025 GMT
        Subject: CN=B2CFD54C39D8DF31AA9DAEFD519065128A77AE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:4b:4b:fe:82:80:f6:66:fb:21:fd:7c:d0:
                    5b:0e:b0:97:e7:2e:e6:ef:87:27:f9:42:9d:14:c3:
                    be:19:e6:2c:7c:f8:60:58:e7:0a:39:f6:0d:1c:9e:
                    07:8d:28:53:1c:29:24:fe:7e:c8:4a:0b:ea:67:b1:
                    9f:30:fa:da:5f:09:c5:f7:f3:49:5f:c8:0c:aa:1a:
                    d4:f1:ba:cc:3c:ab:99:44:6a:ca:3b:07:31:aa:c6:
                    93:c3:36:19:c4:45:0e:cb:cc:9f:6f:21:cd:3e:b7:
                    39:45:71:1f:58:09:47:7d:b7:3a:86:c1:a7:f8:41:
                    7b:20:c2:05:c2:1d:ed:97:5d:69:8d:aa:c5:3a:f9:
                    6c:3c:4c:f1:75:da:80:b4:89:ec:19:a5:b2:79:7a:
                    ae:69:e3:01:cc:86:fe:04:b7:38:dd:3d:f9:90:ce:
                    2b:bb:66:9d:8a:ab:fd:f7:61:72:c7:17:cc:93:c1:
                    17:ff:e0:f6:7d:90:2d:fd:f4:78:02:6b:30:6d:e0:
                    c9:a6:41:c3:98:b9:5d:47:53:39:cd:af:c9:79:56:
                    d1:ac:76:7b:71:60:41:10:24:28:9c:3b:e9:e3:3d:
                    1e:21:ba:a9:13:f2:0a:0d:bc:93:7d:f6:12:ef:e1:
                    81:02:fd:35:95:29:89:48:41:f3:bb:fb:c1:25:e4:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CF:D5:4C:39:D8:DF:31:AA:9D:AE:FD:51:90:65:12:8A:77:AE:17
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363835303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6850::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:34:b7:14:42:2a:a7:7a:5b:8b:da:b2:b8:d5:09:43:46:
         6b:4e:32:0a:03:aa:c0:e2:cb:91:86:be:14:95:a8:20:69:3b:
         54:16:14:70:0e:cb:87:41:10:5a:11:03:69:5d:cf:26:6d:0c:
         20:3e:21:58:66:f1:ed:cb:7e:fd:1b:f4:ea:1e:f1:0f:bd:48:
         d8:09:6b:6f:c7:4b:14:e0:e6:f5:e4:e6:7b:55:65:0b:4c:54:
         d4:7c:fa:1f:84:3d:96:93:43:b3:cc:ac:f2:b6:38:83:7b:6c:
         e2:f6:cf:2b:1b:01:53:d5:43:1c:8f:a5:8c:85:b0:f1:29:27:
         24:d8:93:9e:b3:40:ea:73:16:c8:21:14:68:ca:5a:01:ed:68:
         41:3b:89:11:3f:fe:e9:e9:16:65:4a:3b:db:ea:7b:60:0a:25:
         a3:11:c0:dd:f6:df:ca:4c:a5:b2:23:fa:27:f3:9f:7c:d7:c1:
         e2:bf:04:2d:65:bc:3d:2e:9f:5a:e7:f9:b3:1d:13:35:1a:55:
         5c:f5:ac:2c:a8:af:b9:c0:9d:06:92:43:98:6d:34:7a:b0:8b:
         61:ce:89:60:15:0b:78:0c:d0:3f:fc:55:d8:b3:b8:c3:f8:43:
         30:aa:40:64:64:cc:a3:93:f3:8c:6e:59:30:d8:05:99:70:65:
         a5:f1:08:e1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSGXifQPxNCoN66VHYPUWtnX8EmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNDEyMjEyMDI4MTdaFw0yNTEyMjAyMDMzMTdaMDMxMTAvBgNV
BAMTKEIyQ0ZENTRDMzlEOERGMzFBQTlEQUVGRDUxOTA2NTEyOEE3N0FFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY0tL/oKA9mb7If180FsOsJfn
Lubvhyf5Qp0Uw74Z5ix8+GBY5wo59g0cngeNKFMcKST+fshKC+pnsZ8w+tpfCcX3
80lfyAyqGtTxusw8q5lEaso7BzGqxpPDNhnERQ7LzJ9vIc0+tzlFcR9YCUd9tzqG
waf4QXsgwgXCHe2XXWmNqsU6+Ww8TPF12oC0iewZpbJ5eq5p4wHMhv4EtzjdPfmQ
ziu7Zp2Kq/33YXLHF8yTwRf/4PZ9kC399HgCazBt4MmmQcOYuV1HUznNr8l5VtGs
dntxYEEQJCicO+njPR4huqkT8goNvJN99hLv4YEC/TWVKYlIQfO7+8El5BjnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUss/VTDnY3zGqna79UZBlEop3rhcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzgzNTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRoUDAN
BgkqhkiG9w0BAQsFAAOCAQEAcLM0txRCKqd6W4vasrjVCUNGa04yCgOqwOLLkYa+
FJWoIGk7VBYUcA7Lh0EQWhEDaV3PJm0MID4hWGbx7ct+/Rv06h7xD71I2Alrb8dL
FODm9eTme1VlC0xU1Hz6H4Q9lpNDs8ys8rY4g3ts4vbPKxsBU9VDHI+ljIWw8Skn
JNiTnrNA6nMWyCEUaMpaAe1oQTuJET/+6ekWZUo72+p7YAoloxHA3fbfykylsiP6
J/OffNfB4r8ELWW8PS6fWuf5sx0TNRpVXPWsLKivucCdBpJDmG00erCLYc6JYBUL
eAzQP/xV2LO4w/hDMKpAZGTMo5PzjG5ZMNgFmXBlpfEI4Q==
-----END CERTIFICATE-----