Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366439303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          yjbrBmAGK7maZjeDNFfSNTeOtYgq/P3yYYEPl1o7hZQ=
Subject key identifier:   32:40:F9:17:F7:DA:C5:E6:B5:50:C4:5F:F9:73:CF:10:F5:82:76:0E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       586E45C68EC315BB7E637BB3E7481B43018C337A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:36 +0000
ROA not before:           Thu 06 Feb 2025 19:23:36 +0000
ROA not after:            Thu 05 Feb 2026 19:28:36 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d90::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6e:45:c6:8e:c3:15:bb:7e:63:7b:b3:e7:48:1b:43:01:8c:33:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:36 2025 GMT
            Not After : Feb  5 19:28:36 2026 GMT
        Subject: CN=3240F917F7DAC5E6B550C45FF973CF10F582760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:01:5a:f6:62:c8:bc:a0:31:30:76:f6:5c:
                    af:3f:20:ab:62:c6:b8:8e:f1:cd:aa:7e:91:f9:dd:
                    3b:d6:05:2b:86:40:8c:b3:bd:06:eb:af:a1:88:b5:
                    6b:41:1a:68:d9:dd:46:aa:48:33:1b:11:24:0c:cf:
                    d9:36:b0:a1:5f:9a:1f:d1:0f:6f:37:df:c3:8f:2f:
                    5c:77:cf:04:cc:bb:b7:b9:11:89:0d:8c:9a:33:b7:
                    7c:af:9c:36:70:fd:40:28:91:04:94:e5:5a:42:cc:
                    bf:8d:6e:d5:0f:d4:09:6d:ab:dc:22:0d:86:1a:d8:
                    88:7d:94:be:d3:dd:35:cc:85:92:23:f5:93:7e:5e:
                    8c:13:07:bd:2f:fa:25:84:70:41:00:33:02:33:4b:
                    14:8d:e1:ba:b6:8f:3d:78:0d:bd:ae:a5:88:d1:d6:
                    cf:41:e8:9f:15:18:69:8c:28:48:6a:aa:41:1a:a3:
                    b6:58:d3:68:48:74:7b:32:f2:17:38:a9:f9:72:75:
                    ed:c8:bf:4e:94:69:9f:11:6c:85:4c:74:94:5b:4c:
                    4e:3c:5e:a4:00:91:10:41:c6:0b:e7:95:90:bf:02:
                    4f:ab:a7:a8:60:56:b7:0f:2f:c5:f6:b2:43:49:7d:
                    7f:1a:8a:6a:50:a5:cc:36:93:37:2a:d1:b4:e9:ea:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:F9:17:F7:DA:C5:E6:B5:50:C4:5F:F9:73:CF:10:F5:82:76:0E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d90::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:83:ad:ad:a8:2b:98:64:3d:84:fa:34:21:00:1c:20:00:ed:
         48:af:7f:17:1b:aa:1c:17:35:fb:d7:3a:a1:d4:40:3d:bd:c3:
         e4:54:50:9a:3a:18:b4:b1:ff:e2:8c:13:3c:7a:cc:bf:53:d1:
         95:1f:b2:9c:8c:38:69:54:d7:82:9a:e0:1f:11:79:d3:51:49:
         69:b4:0c:ea:83:16:c6:7b:41:80:4b:9f:6f:38:97:4e:1e:61:
         2a:a1:89:01:d9:01:c9:30:a4:25:64:d0:e7:b9:8a:fa:e8:41:
         46:36:83:58:69:2e:48:a8:50:f5:29:be:6a:75:e0:aa:ca:5e:
         f6:f7:70:6a:91:c5:33:5a:9f:a9:6b:2b:21:99:29:51:06:53:
         43:ba:1f:dc:81:e6:c9:07:32:f8:9c:25:4d:f0:e0:1c:0c:c7:
         34:4f:ca:81:57:3d:e4:6d:c7:b6:f1:da:58:e4:1b:df:b6:b7:
         1f:f8:dd:14:ef:a0:65:39:77:45:20:df:d2:fa:e4:80:61:3f:
         8e:d5:5b:d4:03:04:dc:95:0a:9b:5b:2a:02:cf:83:e2:ba:71:
         10:17:e3:f8:73:f0:3c:06:75:be:fc:2e:c3:5f:1a:b6:27:fb:
         6c:78:7f:76:8e:6c:91:a0:34:c5:42:92:06:49:53:dc:d8:08:
         d8:bf:ac:52
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWG5Fxo7DFbt+Y3uz50gbQwGMM3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDYxOTIzMzZaFw0yNjAyMDUxOTI4MzZaMDMxMTAvBgNV
BAMTKDMyNDBGOTE3RjdEQUM1RTZCNTUwQzQ1RkY5NzNDRjEwRjU4Mjc2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrwFa9mLIvKAxMHb2XK8/IKti
xriO8c2qfpH53TvWBSuGQIyzvQbrr6GItWtBGmjZ3UaqSDMbESQMz9k2sKFfmh/R
D28338OPL1x3zwTMu7e5EYkNjJozt3yvnDZw/UAokQSU5VpCzL+NbtUP1Altq9wi
DYYa2Ih9lL7T3TXMhZIj9ZN+XowTB70v+iWEcEEAMwIzSxSN4bq2jz14Db2upYjR
1s9B6J8VGGmMKEhqqkEao7ZY02hIdHsy8hc4qflyde3Iv06UaZ8RbIVMdJRbTE48
XqQAkRBBxgvnlZC/Ak+rp6hgVrcPL8X2skNJfX8aimpQpcw2kzcq0bTp6h3jAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUMkD5F/faxea1UMRf+XPPEPWCdg4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQzOTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hG2Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAog62tqCuYZD2E+jQhABwgAO1Ir38XG6ocFzX7
1zqh1EA9vcPkVFCaOhi0sf/ijBM8esy/U9GVH7KcjDhpVNeCmuAfEXnTUUlptAzq
gxbGe0GAS59vOJdOHmEqoYkB2QHJMKQlZNDnuYr66EFGNoNYaS5IqFD1Kb5qdeCq
yl7293BqkcUzWp+payshmSlRBlNDuh/cgebJBzL4nCVN8OAcDMc0T8qBVz3kbce2
8dpY5Bvftrcf+N0U76BlOXdFIN/S+uSAYT+O1VvUAwTclQqbWyoCz4PiunEQF+P4
c/A8BnW+/C7DXxq2J/tseH92jmyRoDTFQpIGSVPc2AjYv6xS
-----END CERTIFICATE-----