Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa
File:                     326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa (raw, json)
Hash identifier:          90Z0Er53Pkvnex4NHNPjJE68ibxHSB+NPB1TWxanm38=
Subject key identifier:   19:A2:59:A7:6E:67:5E:92:04:2C:CA:83:A6:92:41:A2:87:67:14:63
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       7030D399F6799DB75858138A941311022FBBDF59
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa
Signing time:             Fri 11 Apr 2025 14:28:56 +0000
ROA not before:           Fri 11 Apr 2025 14:23:56 +0000
ROA not after:            Fri 10 Apr 2026 14:28:56 +0000
asID:                     214372
IP address blocks:        2a0b:4e07:c25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:d3:99:f6:79:9d:b7:58:58:13:8a:94:13:11:02:2f:bb:df:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:23:56 2025 GMT
            Not After : Apr 10 14:28:56 2026 GMT
        Subject: CN=19A259A76E675E92042CCA83A69241A287671463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:6d:bb:e5:f3:c9:b7:2a:8e:30:2e:08:0e:
                    1a:e6:a4:45:80:9b:82:26:06:40:34:f0:4a:b3:a7:
                    34:6d:60:e2:35:f8:be:1d:38:a8:02:e3:77:28:9e:
                    ae:a6:73:3b:5d:28:6f:63:70:78:35:7b:90:cf:82:
                    23:1b:a1:dc:5d:c0:ae:a8:b3:39:be:b1:ef:62:76:
                    71:e6:09:05:12:c0:63:0e:6c:aa:ac:f5:42:7c:1d:
                    d8:51:b7:a2:03:82:89:b1:60:98:a9:20:4f:71:90:
                    95:5c:35:d0:c4:b0:f0:33:57:b4:15:80:ae:66:ce:
                    98:1c:46:85:d2:d7:1d:d5:17:f7:a6:85:5b:7e:54:
                    bd:47:cc:46:a8:a4:25:ae:ee:2b:ee:67:ce:c7:8c:
                    87:28:c9:28:71:67:eb:f6:d7:fe:df:58:2e:10:74:
                    98:ae:3c:ad:10:a6:0a:a7:f3:72:51:f0:9c:57:9f:
                    59:af:ee:49:0b:8c:aa:3c:66:41:02:14:92:2b:f3:
                    5c:23:0f:1f:81:cb:34:c1:21:9a:3f:fb:81:e7:3f:
                    26:b7:1f:ad:fd:44:cd:1f:65:c6:39:d9:6a:ff:5e:
                    18:ea:d9:32:d8:5d:08:4f:91:74:ff:c6:3a:14:ad:
                    9c:bd:fe:d5:ea:15:6c:e6:c9:73:3b:cc:a8:c8:68:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:59:A7:6E:67:5E:92:04:2C:CA:83:A6:92:41:A2:87:67:14:63
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c25::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:d6:e9:7a:08:7e:f1:d2:98:51:21:58:31:d3:f5:f8:ad:
         73:05:5d:3c:c2:3d:df:9c:53:01:b2:45:18:05:23:b7:4c:15:
         6a:bc:c1:51:54:e0:04:24:67:4c:14:80:65:9f:57:12:0b:3c:
         b7:ff:05:61:18:6a:eb:6f:ef:80:70:28:08:21:7e:0b:30:57:
         02:e9:33:7d:42:10:fe:06:07:18:ea:ec:d2:6a:3b:ff:22:75:
         59:24:ee:95:4e:40:f6:96:89:d6:58:27:f0:b8:78:93:8e:40:
         ac:f1:09:f4:2a:61:25:fe:8d:ff:9c:dd:12:b2:a2:05:e3:bc:
         ea:0e:b4:40:7d:02:84:45:2d:0d:59:b1:2f:4c:c3:62:43:69:
         97:06:f6:b0:7d:47:66:69:4b:c5:51:63:83:9c:48:94:49:bb:
         ba:50:07:e3:79:66:32:a2:3c:5c:e1:8b:c4:b4:ee:01:71:ef:
         0b:73:28:04:67:ca:a3:27:ab:e6:b7:ed:73:5a:89:ff:d9:2e:
         f3:fe:26:11:5d:c7:a7:f6:aa:0f:1b:4a:cf:9f:b3:6d:3f:5f:
         fd:a5:85:77:99:92:d9:a0:1b:bc:90:da:ba:9f:b0:7f:d7:3c:
         fd:0f:c8:22:a5:92:5f:25:0e:e4:33:20:24:93:8d:44:f1:b1:
         3f:46:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----