Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366434303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          M+AZ66ePRbm5l/E1up/MXPMJbc16/wec63+ya9IV7wc=
Subject key identifier:   9D:A2:92:54:E0:33:24:0B:E3:0E:B8:29:F6:1F:3F:CB:4B:36:5B:F9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6B103B09048E70877D774C85C0D74C055B292991
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:27:41 +0000
ROA not before:           Thu 06 Feb 2025 19:22:41 +0000
ROA not after:            Thu 05 Feb 2026 19:27:41 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:3b:09:04:8e:70:87:7d:77:4c:85:c0:d7:4c:05:5b:29:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:22:41 2025 GMT
            Not After : Feb  5 19:27:41 2026 GMT
        Subject: CN=9DA29254E033240BE30EB829F61F3FCB4B365BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:9e:82:bf:97:ec:ac:ae:cf:37:38:9e:c7:
                    63:3f:e1:90:3f:d2:3e:ff:d0:09:d7:51:47:18:bd:
                    a7:ff:97:96:a1:c0:73:46:0b:29:09:9f:14:52:0d:
                    19:68:15:5f:51:cf:ec:03:01:13:a5:58:20:67:a2:
                    90:c8:22:d5:a1:9a:5d:ed:db:0d:60:64:42:51:72:
                    33:30:67:ca:c5:36:dd:96:5e:56:20:08:b1:cd:fd:
                    bf:3e:ba:4e:cf:92:cc:60:76:82:23:62:b3:9a:b2:
                    1d:9b:bc:f7:f4:c8:97:17:52:4e:86:45:eb:df:ea:
                    c8:90:ef:d6:3a:28:54:3d:40:c4:74:16:a4:b3:13:
                    f7:7e:fd:b6:eb:46:ee:99:04:9c:8d:a2:ea:52:24:
                    ac:ea:86:97:22:54:ff:7a:8d:00:79:d4:e8:25:e9:
                    2b:2c:f3:ff:3e:0e:83:61:77:0e:06:e3:3c:55:a5:
                    40:27:ec:43:73:f3:d3:3a:31:09:12:bb:14:35:f4:
                    96:29:45:17:81:c9:68:a6:16:55:9d:23:a5:8b:ce:
                    9a:9e:68:9b:d7:6a:e1:fd:16:04:99:77:ce:fe:69:
                    e1:fa:48:13:6c:a6:ba:06:68:b9:45:7c:e9:76:31:
                    ed:c9:94:57:51:9a:71:08:08:4a:81:98:04:3d:8f:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A2:92:54:E0:33:24:0B:E3:0E:B8:29:F6:1F:3F:CB:4B:36:5B:F9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:a4:fc:ab:f2:9a:3a:5b:b5:ef:4e:df:a7:e2:52:e1:2e:
         93:fb:72:5a:5c:24:9a:9a:40:e2:44:c1:1f:5c:83:c0:b9:b9:
         90:b7:81:2f:49:a2:65:b6:47:97:18:e6:cd:f1:0a:c6:e2:57:
         f7:e2:8a:4c:1e:52:b2:e9:37:e2:ea:d1:d5:08:cc:b3:de:43:
         00:c0:4c:db:1a:06:28:1a:12:ca:1c:c9:2d:32:b1:0d:54:6a:
         ff:5a:df:1b:4c:03:0b:ee:92:57:ce:40:9d:d9:df:3a:15:8a:
         b4:c6:8e:76:ac:0b:fa:d7:f1:b3:b4:20:f0:76:30:7b:90:d5:
         76:d5:68:c1:50:89:b8:20:f6:fa:d6:6f:48:65:94:a4:a2:13:
         0d:8e:89:22:c4:3a:aa:b6:05:9f:be:b6:34:fc:e1:04:99:f2:
         34:37:2b:38:26:95:3e:25:d6:27:eb:69:32:4d:9d:cb:7a:8b:
         4d:dd:0e:a3:8a:d5:c5:9c:d3:7c:9d:16:c0:e4:5c:b0:99:c3:
         c1:3b:4e:fd:03:c0:40:22:6d:a1:33:e2:51:0f:9a:d2:78:f8:
         d5:a2:46:ae:1f:21:e3:f7:3a:0d:5a:64:03:fa:b7:f7:cc:91:
         36:14:28:35:8e:39:50:11:ee:ae:9c:28:00:b3:8a:94:62:30:
         8f:f5:de:9e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaxA7CQSOcId9d0yFwNdMBVspKZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDYxOTIyNDFaFw0yNjAyMDUxOTI3NDFaMDMxMTAvBgNV
BAMTKDlEQTI5MjU0RTAzMzI0MEJFMzBFQjgyOUY2MUYzRkNCNEIzNjVCRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacJ6Cv5fsrK7PNziex2M/4ZA/
0j7/0AnXUUcYvaf/l5ahwHNGCykJnxRSDRloFV9Rz+wDAROlWCBnopDIItWhml3t
2w1gZEJRcjMwZ8rFNt2WXlYgCLHN/b8+uk7PksxgdoIjYrOash2bvPf0yJcXUk6G
Revf6siQ79Y6KFQ9QMR0FqSzE/d+/bbrRu6ZBJyNoupSJKzqhpciVP96jQB51Ogl
6Sss8/8+DoNhdw4G4zxVpUAn7ENz89M6MQkSuxQ19JYpRReByWimFlWdI6WLzpqe
aJvXauH9FgSZd87+aeH6SBNsproGaLlFfOl2Me3JlFdRmnEICEqBmAQ9j3DBAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUnaKSVOAzJAvjDrgp9h8/y0s2W/kwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQzNDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hG1A
MA0GCSqGSIb3DQEBCwUAA4IBAQAhDKT8q/KaOlu1707fp+JS4S6T+3JaXCSamkDi
RMEfXIPAubmQt4EvSaJltkeXGObN8QrG4lf34opMHlKy6Tfi6tHVCMyz3kMAwEzb
GgYoGhLKHMktMrENVGr/Wt8bTAML7pJXzkCd2d86FYq0xo52rAv61/GztCDwdjB7
kNV21WjBUIm4IPb61m9IZZSkohMNjokixDqqtgWfvrY0/OEEmfI0Nys4JpU+JdYn
62kyTZ3LeotN3Q6jitXFnNN8nRbA5FywmcPBO079A8BAIm2hM+JRD5rSePjVokau
HyHj9zoNWmQD+rf3zJE2FCg1jjlQEe6unCgAs4qUYjCP9d6e
-----END CERTIFICATE-----