Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363963303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          rdbQdo+bQb9DTMF/15Xhqun7tgI3f3Y5mOzkIKueMnA=
Subject key identifier:   94:72:DF:30:3C:D2:9C:B2:F2:11:3F:99:6A:63:55:F0:9D:35:12:01
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       45D1D37DED2D1D5C112C1D30A23EC25834276B05
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 24 Jan 2025 11:28:34 +0000
ROA not before:           Fri 24 Jan 2025 11:23:34 +0000
ROA not after:            Fri 23 Jan 2026 11:28:34 +0000
asID:                     16909
IP address blocks:        2a14:7584:69c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d1:d3:7d:ed:2d:1d:5c:11:2c:1d:30:a2:3e:c2:58:34:27:6b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 24 11:23:34 2025 GMT
            Not After : Jan 23 11:28:34 2026 GMT
        Subject: CN=9472DF303CD29CB2F2113F996A6355F09D351201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:1b:70:68:e1:a1:43:5e:c2:fa:e4:c8:2d:
                    7b:3f:bf:dc:c5:c4:a6:04:63:93:4e:37:c9:0d:58:
                    da:fd:ed:7a:18:ec:16:4b:9c:06:2b:64:03:73:3d:
                    f2:32:32:a2:71:63:92:4d:c0:1e:6d:b6:21:4f:9f:
                    cc:01:9e:d7:e4:11:0b:55:f7:e8:7d:e8:e5:0e:65:
                    6a:8e:8f:94:d4:54:f9:9a:46:85:39:22:61:80:ed:
                    fe:78:99:7e:17:2f:60:da:52:60:bb:50:1b:b2:ca:
                    8a:9d:8e:10:16:18:4d:bb:57:cb:d6:8c:a7:6f:0c:
                    0e:db:4b:2f:0c:60:62:bc:e9:dc:f8:89:d4:ea:93:
                    c9:46:e6:d0:e0:e4:da:c5:57:43:cb:e6:50:6e:95:
                    64:0b:40:8b:1b:f9:a8:01:44:26:8e:d5:f7:5c:0c:
                    87:0c:e7:d3:bc:53:c7:25:06:cc:a4:f4:73:53:ce:
                    7b:54:fb:77:4a:af:40:23:9a:a6:c9:48:7a:90:7d:
                    f8:69:52:ee:bf:03:a6:9a:8a:fb:2c:b9:be:27:5a:
                    19:49:0f:bb:ed:fe:c5:f3:8f:e9:64:b4:bb:b1:cc:
                    46:67:ce:a9:bf:07:36:91:a4:94:57:3a:b0:5f:35:
                    a5:c0:dc:a6:7e:64:22:cf:d3:ce:5c:31:a6:d1:04:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:72:DF:30:3C:D2:9C:B2:F2:11:3F:99:6A:63:55:F0:9D:35:12:01
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363963303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:69c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:aa:93:fb:3d:59:97:93:d4:4a:34:90:bb:58:6f:63:01:
         64:02:7b:8c:6a:ff:6a:5b:3a:24:7f:59:74:c2:c7:cf:72:e7:
         c1:a7:64:68:87:67:00:ff:2d:af:7c:ab:10:13:9b:92:4e:53:
         0e:85:39:44:14:f6:fa:10:94:a4:3d:a8:27:b1:85:09:d3:68:
         d5:43:88:3c:c2:e9:56:4b:cc:bc:28:df:35:b2:7d:fe:6c:8a:
         c4:d1:ec:23:fa:ac:94:bf:1e:12:a0:ab:2c:a6:d7:73:14:73:
         f0:2e:13:db:ee:33:7e:81:eb:d0:42:b8:08:d8:f9:85:63:19:
         e1:1c:5c:40:94:ec:2b:ba:8d:8a:75:f9:7d:eb:c9:d6:6f:07:
         15:86:4e:68:0e:36:f2:e5:be:ff:93:85:d2:d1:c4:e0:0d:5d:
         ea:bd:0f:a2:55:c3:00:96:91:d3:bb:18:43:49:42:13:5b:82:
         3a:54:37:f0:08:d7:72:b2:89:3b:fd:70:f5:73:c5:05:8e:ce:
         7e:32:d5:08:48:a3:ca:df:f6:8f:9e:09:44:ac:7f:ca:b8:74:
         a7:e3:56:85:f9:4a:b3:6a:1a:29:81:63:22:79:13:35:b4:9f:
         1b:f7:79:a6:39:dd:a4:64:d3:ea:56:0d:e7:bd:d4:72:03:9e:
         8f:8d:c8:e5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURdHTfe0tHVwRLB0woj7CWDQnawUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIzMzRaFw0yNjAxMjMxMTI4MzRaMDMxMTAvBgNV
BAMTKDk0NzJERjMwM0NEMjlDQjJGMjExM0Y5OTZBNjM1NUYwOUQzNTEyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPxtwaOGhQ17C+uTILXs/v9zF
xKYEY5NON8kNWNr97XoY7BZLnAYrZANzPfIyMqJxY5JNwB5ttiFPn8wBntfkEQtV
9+h96OUOZWqOj5TUVPmaRoU5ImGA7f54mX4XL2DaUmC7UBuyyoqdjhAWGE27V8vW
jKdvDA7bSy8MYGK86dz4idTqk8lG5tDg5NrFV0PL5lBulWQLQIsb+agBRCaO1fdc
DIcM59O8U8clBsyk9HNTzntU+3dKr0AjmqbJSHqQffhpUu6/A6aaivssub4nWhlJ
D7vt/sXzj+lktLuxzEZnzqm/BzaRpJRXOrBfNaXA3KZ+ZCLP085cMabRBCWnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUlHLfMDzSnLLyET+ZamNV8J01EgEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzk2MzMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpwDAN
BgkqhkiG9w0BAQsFAAOCAQEAGxWqk/s9WZeT1Eo0kLtYb2MBZAJ7jGr/als6JH9Z
dMLHz3LnwadkaIdnAP8tr3yrEBObkk5TDoU5RBT2+hCUpD2oJ7GFCdNo1UOIPMLp
VkvMvCjfNbJ9/myKxNHsI/qslL8eEqCrLKbXcxRz8C4T2+4zfoHr0EK4CNj5hWMZ
4RxcQJTsK7qNinX5fevJ1m8HFYZOaA428uW+/5OF0tHE4A1d6r0PolXDAJaR07sY
Q0lCE1uCOlQ38AjXcrKJO/1w9XPFBY7OfjLVCEijyt/2j54JRKx/yrh0p+NWhflK
s2oaKYFjInkTNbSfG/d5pjndpGTT6lYN573UcgOej43I5Q==
-----END CERTIFICATE-----