Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          R0qMAZbwCwzaD0QZfUT0ar1Wp6yHy2mlElPL5ojkkxw=
Subject key identifier:   56:F9:65:85:4B:17:2F:03:2A:A1:89:21:DF:70:37:B6:30:F0:8B:03
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       64C052A5B17B98B4456DB3C0C91E874CBECB3507
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:11:51 +0000
ROA not before:           Sat 15 Feb 2025 21:06:51 +0000
ROA not after:            Sat 14 Feb 2026 21:11:51 +0000
asID:                     16909
IP address blocks:        2a14:7584:6004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c0:52:a5:b1:7b:98:b4:45:6d:b3:c0:c9:1e:87:4c:be:cb:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:06:51 2025 GMT
            Not After : Feb 14 21:11:51 2026 GMT
        Subject: CN=56F965854B172F032AA18921DF7037B630F08B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:9c:6d:d5:ec:5a:28:4b:42:28:25:be:45:
                    86:f7:96:e4:c5:89:49:72:a6:4d:7d:e1:89:81:e5:
                    6b:53:01:e9:6f:d9:e7:36:7c:1d:e5:92:07:c3:5d:
                    b9:e7:5e:05:9d:d8:fe:d4:b6:b1:0c:d8:22:6d:2e:
                    2d:06:2f:58:88:18:98:69:c0:0f:b6:b0:e0:95:95:
                    bd:73:8b:e5:d7:39:96:f0:78:59:74:e3:b9:22:7e:
                    a1:94:e3:3e:8a:a9:09:0a:d4:46:f3:45:0c:79:20:
                    82:55:71:3d:52:7b:bc:04:1e:28:6f:5b:1c:4a:b4:
                    eb:ff:87:65:0f:aa:20:4b:8b:ac:19:08:2b:1d:b3:
                    31:a7:cb:2f:53:d9:79:51:22:3e:29:93:b8:cc:54:
                    36:a3:f8:7d:a2:2a:20:3a:e4:57:e4:18:41:a0:5e:
                    0a:07:07:2f:b5:5d:c1:4a:2b:eb:09:50:d1:dd:96:
                    f4:88:4b:fa:f8:c0:f7:4a:9f:c9:0e:2e:46:19:6c:
                    b8:b7:d6:f7:37:3f:92:9f:63:fe:30:42:a8:0a:7a:
                    94:06:d4:2f:1f:db:71:55:e0:ba:05:49:21:70:78:
                    3e:03:48:51:19:13:7d:d3:ab:2f:5e:6c:b2:4c:f4:
                    c4:bf:f5:27:20:dc:5c:a2:cc:4e:a9:71:88:f1:2b:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:65:85:4B:17:2F:03:2A:A1:89:21:DF:70:37:B6:30:F0:8B:03
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:f3:97:0e:4b:59:00:f8:e5:07:49:87:4d:9f:49:a5:c8:
         0e:25:e0:57:5b:7e:fa:c6:8d:23:d5:fb:de:46:e2:bb:85:09:
         6a:e2:89:80:e7:88:21:bb:dd:9d:88:af:90:83:ab:a9:64:30:
         f6:43:63:f8:9a:62:d1:c0:1b:d0:c7:f1:19:87:e2:ce:f9:f6:
         37:71:5a:48:e2:e4:a1:73:c7:a1:db:5a:cd:89:2e:7a:5b:11:
         3c:76:df:ac:2a:cf:00:1e:56:42:f7:92:3f:02:48:b5:d3:e9:
         07:a2:de:0b:06:b7:66:fb:37:3d:90:09:9a:7b:db:16:c0:ef:
         2f:6c:b0:92:86:13:f8:07:9d:d9:d8:e9:6e:76:27:52:de:ca:
         f7:02:03:d3:59:ac:7c:3c:c2:81:79:93:5b:8b:6b:dd:02:ea:
         e0:97:85:f6:51:87:c6:ef:21:18:d5:57:9d:2c:9c:7a:c2:34:
         64:1b:bc:33:d0:5d:23:f2:c8:5d:aa:87:12:af:11:1d:b5:78:
         d8:bb:81:ad:09:f4:f3:d4:a3:10:83:ec:1f:59:6a:e6:c3:c8:
         3f:05:84:dc:9b:27:58:39:45:49:8f:a0:23:bb:3d:b9:19:18:
         5d:31:37:92:cd:ef:3c:ef:6d:40:27:cd:83:a7:4a:6d:44:12:
         d5:47:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----