Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5s+92tWz2YCkHVR4XVxxxhw2Zn/2fATR/F+6jH/jF68=
Subject key identifier:   13:08:D3:64:9C:4C:C5:2B:36:8D:E5:FA:63:AA:86:22:6B:E6:3D:7C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       71E1615062BD23B2F43348240AEB23B269A403D6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:50 +0000
ROA not before:           Sat 15 Feb 2025 21:06:50 +0000
ROA not after:            Sat 14 Feb 2026 21:11:50 +0000
asID:                     16909
IP address blocks:        2a14:7584:6003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e1:61:50:62:bd:23:b2:f4:33:48:24:0a:eb:23:b2:69:a4:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:50 2025 GMT
            Not After : Feb 14 21:11:50 2026 GMT
        Subject: CN=1308D3649C4CC52B368DE5FA63AA86226BE63D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:5c:26:78:64:99:16:39:af:a0:56:7f:e3:
                    57:b3:00:a4:38:b0:1f:ac:1b:4d:c6:6b:ed:1b:0e:
                    ed:c6:e6:61:8f:93:62:81:de:b4:48:88:f2:f1:4a:
                    ff:63:4d:83:15:24:2a:03:cf:a0:1f:a6:4a:dd:71:
                    e7:f0:04:59:aa:73:57:f2:78:21:02:22:66:91:dc:
                    59:1d:37:16:76:d8:f5:4d:e8:92:ae:91:35:8c:86:
                    66:af:3f:96:79:5b:a7:38:59:ba:a5:96:0b:6f:ac:
                    ce:21:c1:40:31:1c:0d:4e:83:53:12:1b:c6:bd:98:
                    20:6a:23:ba:46:04:49:61:2c:ff:0a:79:bd:7f:98:
                    cf:76:7d:db:a2:69:b2:c5:0f:56:6d:24:62:f2:c2:
                    ea:c1:9f:89:9f:f7:7f:6e:41:2b:ea:d5:8d:37:86:
                    7c:3e:fd:8c:f1:fb:f9:5c:d8:ce:79:bf:92:16:2c:
                    ee:17:3b:1e:e3:f0:5a:db:13:1a:8d:63:0f:a9:b1:
                    05:14:8e:c5:de:67:32:3c:ea:58:c5:fc:d6:aa:3c:
                    9f:d7:21:fc:b9:a9:4a:3d:eb:e7:39:de:65:45:8c:
                    be:d7:1c:9a:0b:4f:b5:d8:d5:e6:68:5d:a6:b8:3c:
                    03:6d:c3:9e:5f:ae:b7:df:34:c1:2f:2e:10:5e:f1:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:D3:64:9C:4C:C5:2B:36:8D:E5:FA:63:AA:86:22:6B:E6:3D:7C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:65:44:b1:4d:6b:34:12:35:4e:ab:26:10:88:3d:70:e0:
         e7:d3:34:b4:6c:8e:2b:41:a5:4a:80:c0:0f:ea:40:32:2f:8a:
         91:ae:7c:bb:68:ea:5e:47:28:63:d0:fc:65:30:3d:92:1a:d5:
         71:9c:d6:be:58:2b:a2:85:6e:19:5a:81:ab:b2:b0:73:9c:0b:
         0d:a0:11:c3:67:ac:80:20:00:54:ae:7d:87:36:33:96:ae:7e:
         a8:4b:e8:d2:1c:c9:86:26:e3:41:63:fd:c8:22:75:e0:0c:07:
         c2:a1:8c:9f:20:0a:e7:63:20:91:f8:de:ca:23:32:49:e5:08:
         e9:08:8e:ea:83:d3:90:25:2f:7a:1d:4c:6b:43:6e:a5:64:cc:
         99:fc:53:a9:06:1b:54:41:28:5e:b7:61:de:c2:33:92:e0:0b:
         1e:3d:9d:be:ad:03:fc:b4:37:b2:56:da:95:0e:8e:21:a9:45:
         4e:60:b8:a2:4d:13:35:9e:51:1e:68:56:a0:55:fd:fa:4a:10:
         8a:8d:f9:e3:ae:f4:c6:db:fc:1f:d9:9b:9c:dc:df:e8:3d:1b:
         d8:10:02:6e:1c:af:b1:4e:a4:7f:95:e9:5f:19:19:91:22:59:
         45:a6:b2:c9:87:f0:18:4e:a1:23:7f:12:c3:c3:79:e3:83:3e:
         df:e7:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----