Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383a3a2f34362d3436203d3e20323134303232.roa
File:                     326130623a346530373a383a3a2f34362d3436203d3e20323134303232.roa (raw, json)
Hash identifier:          sNq1yh5BcI5afNo89FeovS/HvRDevKv/d4GFi4p/gdU=
Subject key identifier:   65:7B:C3:49:73:A0:68:98:6E:99:36:1F:4E:CA:A7:04:BE:A2:F8:E5
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       34F59C2A46DAF91F5D225356C21B0378454B6E60
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383a3a2f34362d3436203d3e20323134303232.roa
Signing time:             Fri 11 Apr 2025 14:28:36 +0000
ROA not before:           Fri 11 Apr 2025 14:23:36 +0000
ROA not after:            Fri 10 Apr 2026 14:28:36 +0000
asID:                     214022
IP address blocks:        2a0b:4e07:8::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f5:9c:2a:46:da:f9:1f:5d:22:53:56:c2:1b:03:78:45:4b:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:23:36 2025 GMT
            Not After : Apr 10 14:28:36 2026 GMT
        Subject: CN=657BC34973A068986E99361F4ECAA704BEA2F8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a9:32:ff:8e:9e:50:3e:0f:dd:29:b1:92:e7:
                    e6:0a:6a:1e:d2:56:5a:50:50:7f:51:db:f9:f4:2e:
                    71:75:6f:25:16:19:c5:3c:b3:ca:b2:b6:08:72:e7:
                    1f:da:07:4a:b4:19:ff:4f:eb:6e:fa:77:5b:74:a5:
                    99:ff:4d:b7:fc:3a:f9:d8:7d:e8:6e:e3:ea:31:15:
                    72:77:5f:77:4e:e0:e9:9d:df:b9:33:38:a2:ea:d2:
                    a3:41:d7:87:25:fe:24:a1:4e:dc:59:b6:36:7f:24:
                    c0:50:d1:41:29:e9:c6:b9:c1:2c:a3:bd:79:2f:f6:
                    ec:51:6b:04:d2:0b:de:87:34:2b:d9:b0:5d:8f:fe:
                    a1:67:82:c3:c2:82:79:87:63:67:38:2a:7b:04:0e:
                    31:98:dc:de:24:79:7a:0a:75:9c:f4:c9:5d:bf:5c:
                    cb:f5:8b:ad:9b:74:3a:70:ba:06:90:52:f6:28:bb:
                    a5:21:27:80:0b:94:ca:45:a0:bb:e4:0a:de:b8:b5:
                    ea:dc:b2:4b:a6:d6:c2:14:38:3d:5c:71:ca:94:1f:
                    b9:e0:ed:4a:19:7a:23:bb:00:16:5b:5d:4c:c4:18:
                    70:3d:40:2e:5d:10:eb:eb:cc:b1:6b:25:1c:0c:0d:
                    7f:ff:1e:15:fc:4b:01:33:15:4c:bb:70:21:95:08:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:C3:49:73:A0:68:98:6E:99:36:1F:4E:CA:A7:04:BE:A2:F8:E5
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383a3a2f34362d3436203d3e20323134303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         16:54:8e:76:1c:ea:34:70:12:0b:91:b5:76:14:ef:f1:d2:bf:
         d8:dd:b6:11:68:64:84:ce:d8:0d:61:90:80:fa:2a:b2:0b:13:
         d1:0d:6f:fe:83:d7:e7:eb:dc:c0:ea:66:a6:ae:f7:5f:45:49:
         15:3c:16:1b:9c:5c:eb:16:08:40:da:07:81:40:15:9c:34:a6:
         89:77:5c:8b:1e:98:12:89:7d:a1:7b:97:89:07:ef:35:47:5b:
         2b:e6:5d:43:eb:bd:03:9f:bb:95:24:09:3c:ac:f9:84:91:48:
         7c:6f:8f:c4:83:78:0d:dd:46:bc:8c:76:f4:55:7d:2b:67:82:
         d6:60:8a:ba:38:92:50:ef:42:ac:49:14:24:80:7b:f3:73:56:
         a9:2f:9d:96:e6:21:dc:ea:b7:16:0a:9f:9e:16:ef:ea:36:bb:
         78:ee:9d:20:66:eb:d8:ba:a5:af:1e:a0:10:7e:cf:13:65:60:
         38:54:99:55:a0:d2:f8:ef:a0:58:6d:62:8f:d3:e7:3c:2f:3b:
         d1:ad:96:84:d2:03:70:f8:82:1c:95:b8:09:9c:c9:ac:df:a9:
         fd:dc:11:d2:c9:56:62:8c:45:a0:b7:ea:87:48:90:3e:67:03:
         56:b9:79:6a:e0:48:95:fd:52:ec:d6:b1:32:75:87:7f:a0:87:
         f2:e2:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----