Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          BBmnGhdr9/MQXADH52YsW0KtOrhNECA8OLCeMTwdGA8=
Subject key identifier:   0F:F5:3B:74:9C:E7:EA:C4:F2:A3:ED:7E:89:A7:DD:44:0A:D8:37:BD
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5744FC419B7004FC2DF1F7B51AE97BF483FA737A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:49 +0000
ROA not before:           Sat 15 Feb 2025 21:06:49 +0000
ROA not after:            Sat 14 Feb 2026 21:11:49 +0000
asID:                     16909
IP address blocks:        2a14:7584:6002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:fc:41:9b:70:04:fc:2d:f1:f7:b5:1a:e9:7b:f4:83:fa:73:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:49 2025 GMT
            Not After : Feb 14 21:11:49 2026 GMT
        Subject: CN=0FF53B749CE7EAC4F2A3ED7E89A7DD440AD837BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:d4:21:32:21:b3:5a:b6:a4:4d:df:6a:7a:
                    ce:83:78:d2:18:f5:d9:34:03:cd:6c:9a:4a:d7:d6:
                    92:94:ae:3d:c6:fe:de:56:c8:81:a9:35:57:66:ed:
                    4e:95:a1:a4:6a:97:4a:f5:d7:41:24:1b:df:5b:58:
                    87:58:d3:94:ad:b5:33:5b:e6:86:0f:7c:97:05:30:
                    57:ef:26:17:2b:f7:bc:50:75:8d:58:ce:6b:0c:5e:
                    75:7f:88:f2:71:2b:f7:32:cd:77:87:53:18:41:99:
                    88:ae:97:bc:75:87:ec:0b:c0:85:ae:9f:5a:8d:e4:
                    ee:d5:45:a9:65:37:ae:a4:32:99:90:e7:9d:f5:13:
                    59:c6:21:0e:13:75:b7:96:7b:87:3e:46:49:72:62:
                    2c:20:51:7e:d1:c3:1f:0e:e8:4d:9b:95:80:c2:25:
                    20:b1:9b:89:4e:23:ef:92:ac:31:57:a1:69:7a:48:
                    2d:0c:ce:45:40:05:c3:02:e7:79:12:19:ba:96:79:
                    ed:07:84:5b:6c:8b:40:89:3a:54:a6:1c:e7:c8:72:
                    d2:4e:29:2f:6e:04:22:aa:9e:30:26:a6:52:c5:8b:
                    97:ef:c4:e8:c0:67:26:bc:85:68:07:cf:2b:6f:b2:
                    be:8e:de:fd:be:a7:d8:76:55:e6:c4:f3:4b:f4:69:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:3B:74:9C:E7:EA:C4:F2:A3:ED:7E:89:A7:DD:44:0A:D8:37:BD
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:ce:f8:eb:1b:6a:c0:14:66:f8:e5:c3:2f:36:18:8c:65:
         71:d0:7b:49:53:21:ca:ac:a6:bd:5c:1d:6f:a9:6d:06:bd:fc:
         24:6e:25:98:75:85:49:e6:34:93:6a:b4:da:fb:29:d5:12:23:
         52:7e:56:1e:57:45:8d:d9:db:3a:1e:d6:ea:72:cd:66:47:03:
         55:b3:8c:ed:3d:90:6f:b5:68:e8:5a:80:38:53:4f:5b:e1:3b:
         8d:00:31:7e:3e:d5:6b:30:c3:00:93:92:33:a1:7d:c0:0e:e6:
         ef:47:0d:87:d2:d0:39:c7:a2:87:4a:b7:ce:0b:9e:1e:82:9f:
         71:e3:98:b0:3f:f3:90:72:4f:0a:ab:09:8b:94:ed:f1:44:71:
         25:cd:c1:49:7d:d4:22:53:bc:3b:98:a8:46:0f:27:a0:21:64:
         ed:b5:28:30:5e:45:17:41:74:47:f6:a6:1c:20:fe:9a:53:b2:
         97:91:58:d0:cd:ce:11:ce:c0:a1:38:c0:93:6c:f7:a9:1d:a8:
         96:87:cf:59:de:99:96:41:b5:7e:71:18:dd:39:63:87:dd:20:
         7c:38:a6:e1:88:52:76:c5:54:e0:3b:d1:9d:5a:58:48:3b:05:
         1d:6e:37:0a:8f:2e:0d:04:09:4a:b2:92:4a:04:f2:80:8a:7c:
         2c:6f:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----