Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          QO1BrfKR+ZGAN1K5awi3B12U9S150ElvlxWfBe+hwaI=
Subject key identifier:   6A:40:01:95:16:E2:EF:E4:BD:F4:A2:2D:E3:8B:A0:E7:AD:E0:D0:7D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5860B8287B9805EF210D75B4FCBECCA97B77581A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:19 +0000
ROA not before:           Sat 15 Feb 2025 21:07:19 +0000
ROA not after:            Sat 14 Feb 2026 21:12:19 +0000
asID:                     16909
IP address blocks:        2a14:7584:6009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:b8:28:7b:98:05:ef:21:0d:75:b4:fc:be:cc:a9:7b:77:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:19 2025 GMT
            Not After : Feb 14 21:12:19 2026 GMT
        Subject: CN=6A40019516E2EFE4BDF4A22DE38BA0E7ADE0D07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:0c:3c:43:2e:90:80:6d:1f:30:ca:b3:cf:
                    eb:44:c1:76:4f:65:74:9d:16:1c:d5:c9:98:dc:e7:
                    cd:08:87:2e:3f:83:7c:fd:a5:c8:74:b0:30:35:1b:
                    7b:7a:17:52:27:74:1a:83:4b:87:fb:ab:08:65:62:
                    64:0a:2d:9a:37:0e:ac:ea:66:82:11:36:f7:c0:11:
                    a1:8a:f2:3b:02:f6:ca:2a:e3:95:a4:00:28:59:3e:
                    d6:7b:76:5b:77:18:a2:a8:a7:c6:c5:1c:6d:12:54:
                    d4:ea:22:47:f6:b2:83:88:b7:25:ac:33:86:c7:e4:
                    30:19:06:9c:9a:2a:cb:d3:24:a8:fd:f3:c9:06:6a:
                    55:52:5b:f0:4e:8d:40:ff:50:80:b5:46:de:de:c8:
                    a9:89:8b:81:b0:fe:67:e2:10:5d:a1:9e:ca:ea:8a:
                    74:e2:12:18:8a:40:91:06:ff:8f:b3:fc:6f:1d:69:
                    c5:fd:a9:6d:78:46:9c:65:d0:b3:f9:3b:63:d8:4d:
                    de:fd:df:c8:e8:a9:00:60:c8:88:1f:d7:7e:9c:dc:
                    97:87:af:73:77:bb:ab:2b:ef:49:c2:12:33:d6:c0:
                    35:1e:7f:27:be:9e:8f:9b:da:f0:8a:b0:72:50:f4:
                    f9:53:11:5f:d4:e0:68:2b:0e:5b:64:85:64:ec:27:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:01:95:16:E2:EF:E4:BD:F4:A2:2D:E3:8B:A0:E7:AD:E0:D0:7D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:b1:3a:34:af:ad:16:78:8c:4f:bd:bf:91:67:32:b8:fe:
         dc:aa:41:60:2d:2f:c7:28:50:75:c9:04:ee:94:69:e5:ab:42:
         d8:ac:59:2c:e5:58:3b:20:2e:e4:a5:d0:1d:2a:c4:a1:86:ad:
         87:54:d8:a5:95:0e:53:23:3e:27:34:f6:f6:cf:af:4e:4b:e8:
         1e:54:9f:d4:6b:32:2a:27:be:6d:4d:b8:88:7a:c0:62:6f:36:
         7e:1c:b4:be:60:a3:d0:89:1e:bf:e4:a0:63:9c:8b:3b:41:0a:
         5e:79:27:34:1b:2e:a7:6a:14:0f:b1:d9:dc:47:d0:c0:0e:22:
         6f:74:7e:08:0c:c7:10:4f:fa:b6:fa:45:00:e6:39:c8:e4:6f:
         67:53:ba:af:ec:cd:37:06:11:00:92:54:73:8f:90:33:e6:c5:
         e5:9e:bd:31:66:f3:7e:b0:9b:7f:8d:c2:ab:48:c1:ac:1b:f6:
         d9:60:73:3f:0d:25:27:7d:ac:19:41:98:93:4c:50:ed:82:86:
         19:ef:3c:9d:c1:76:27:18:01:ab:ca:86:7b:8e:ee:4f:e9:be:
         1e:c8:80:f2:0d:b9:e2:8e:f9:40:c6:5c:b5:11:19:9f:2b:42:
         42:8b:15:5a:ca:1d:d8:bf:88:8b:31:55:00:74:83:fc:0f:c4:
         23:ce:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----