Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366463303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366463303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          N/4m65BC+Ad1g0MWFLClNRmVy1plC3IlJLduM37VFkE=
Subject key identifier:   CD:85:35:06:54:7F:BD:7A:64:36:01:4A:50:C8:6D:AF:AF:1E:F1:A5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5D6FF209233E501C6F5120D4E88519E80A8DE710
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366463303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 06 Feb 2025 19:28:39 +0000
ROA not before:           Thu 06 Feb 2025 19:23:39 +0000
ROA not after:            Thu 05 Feb 2026 19:28:39 +0000
asID:                     401507
IP address blocks:        2a14:7584:6dc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:f2:09:23:3e:50:1c:6f:51:20:d4:e8:85:19:e8:0a:8d:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  6 19:23:39 2025 GMT
            Not After : Feb  5 19:28:39 2026 GMT
        Subject: CN=CD853506547FBD7A6436014A50C86DAFAF1EF1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:b0:7b:ae:ba:cf:72:f1:0e:c5:5e:98:8d:
                    4c:16:80:de:a2:9a:13:9d:2f:82:73:df:27:6f:b3:
                    e7:d9:28:99:c7:50:97:79:c8:45:b3:57:06:a4:ba:
                    2c:bf:11:4a:c9:64:f0:6c:75:ea:4d:4c:e6:30:79:
                    72:67:63:e8:7a:1c:d2:5e:eb:dd:f8:2d:ad:73:de:
                    89:5f:c1:de:52:1f:a7:e8:12:8b:be:77:db:b1:63:
                    c8:bb:54:4a:32:db:1c:af:1d:0f:64:16:9d:bc:44:
                    cd:38:67:a6:fa:64:2c:1c:14:b1:a0:c0:66:94:e4:
                    20:6b:cd:ed:8a:9c:88:0b:05:9e:03:96:4b:73:e2:
                    ac:23:b9:2a:5c:d1:1e:e6:01:18:bd:fb:b7:af:72:
                    99:79:24:ec:bd:7d:11:d8:4b:43:9d:7f:33:d9:4b:
                    84:78:4f:2a:66:57:c4:c7:1e:1e:61:42:5e:a8:d8:
                    ee:e3:df:30:f9:b7:02:9b:00:75:c4:44:be:50:97:
                    7c:1e:5f:0b:f1:93:da:ce:8d:96:66:cb:66:c6:60:
                    1b:bd:aa:dc:a7:32:ff:a3:2b:ca:10:a7:50:6e:45:
                    81:f1:cd:c8:db:80:68:b6:d3:c3:76:5f:a7:1a:98:
                    55:4e:a2:37:00:7b:3e:06:5e:ac:f4:1d:43:28:d7:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:35:06:54:7F:BD:7A:64:36:01:4A:50:C8:6D:AF:AF:1E:F1:A5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366463303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:9a:e1:6d:8b:ef:33:44:e2:68:05:08:67:c8:8e:6c:77:
         e9:32:22:8d:61:a6:42:11:cf:29:37:9a:8b:63:bb:8e:24:9f:
         41:0e:94:8b:8e:91:0a:f3:df:bc:cf:29:1d:54:2f:c3:b0:46:
         c7:9f:b5:2e:4e:81:f8:a8:ab:2d:49:bb:59:ce:38:bd:25:6f:
         0b:6e:64:38:49:36:89:03:a8:44:d7:dc:6e:a1:55:34:d4:36:
         93:2a:3f:70:87:1b:da:00:9a:99:d6:fe:96:1f:c8:ce:3d:ae:
         57:4d:63:3f:8e:e0:e2:2a:c5:d1:0b:02:a0:1a:87:2d:ba:1e:
         8c:2b:5b:b4:5b:50:b0:85:dc:fb:f0:37:fb:f2:3b:8d:a9:11:
         72:ef:19:05:2f:7b:16:9f:4e:6b:b1:14:f1:ed:b5:d2:d3:a5:
         13:9f:5f:1e:a3:61:77:0c:05:2a:c1:ce:f5:e0:4a:e0:e1:c6:
         4c:ab:11:cb:f2:e9:ca:88:73:24:74:a2:2f:cf:6d:53:6e:e7:
         37:3a:a8:a6:83:da:60:5d:ff:e5:ba:09:f9:1b:30:e0:d1:08:
         d9:b0:28:24:d9:5d:d2:14:d9:33:ab:2c:1e:fe:cb:45:0d:4e:
         5e:cc:93:4b:13:9c:14:e0:23:a4:5d:22:59:12:3d:8a:3a:06:
         7d:18:78:ad
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXW/yCSM+UBxvUSDU6IUZ6AqN5xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDYxOTIzMzlaFw0yNjAyMDUxOTI4MzlaMDMxMTAvBgNV
BAMTKENEODUzNTA2NTQ3RkJEN0E2NDM2MDE0QTUwQzg2REFGQUYxRUYxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DLB7rrrPcvEOxV6YjUwWgN6i
mhOdL4Jz3ydvs+fZKJnHUJd5yEWzVwakuiy/EUrJZPBsdepNTOYweXJnY+h6HNJe
6934La1z3olfwd5SH6foEou+d9uxY8i7VEoy2xyvHQ9kFp28RM04Z6b6ZCwcFLGg
wGaU5CBrze2KnIgLBZ4Dlktz4qwjuSpc0R7mARi9+7evcpl5JOy9fRHYS0OdfzPZ
S4R4TypmV8THHh5hQl6o2O7j3zD5twKbAHXERL5Ql3weXwvxk9rOjZZmy2bGYBu9
qtynMv+jK8oQp1BuRYHxzcjbgGi208N2X6camFVOojcAez4GXqz0HUMo10QDAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUzYU1BlR/vXpkNgFKUMhtr68e8aUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjQ2MzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hG3A
MA0GCSqGSIb3DQEBCwUAA4IBAQBb0prhbYvvM0TiaAUIZ8iObHfpMiKNYaZCEc8p
N5qLY7uOJJ9BDpSLjpEK89+8zykdVC/DsEbHn7UuToH4qKstSbtZzji9JW8LbmQ4
STaJA6hE19xuoVU01DaTKj9whxvaAJqZ1v6WH8jOPa5XTWM/juDiKsXRCwKgGoct
uh6MK1u0W1Cwhdz78Df78juNqRFy7xkFL3sWn05rsRTx7bXS06UTn18eo2F3DAUq
wc714Erg4cZMqxHL8unKiHMkdKIvz21Tbuc3Oqimg9pgXf/lugn5GzDg0QjZsCgk
2V3SFNkzqywe/stFDU5ezJNLE5wU4COkXSJZEj2KOgZ9GHit
-----END CERTIFICATE-----