Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          2Xt5xzmW4b/1LmYxRCHclsze1ZgJiCIgG+MDszSB+Eo=
Subject key identifier:   B5:F9:18:42:32:C3:9D:68:A0:4D:A1:D0:30:0B:AF:52:71:A1:FB:5F
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       31407421B494AF6FAE3B45260C8AE4E32C9BF4C1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:20 +0000
ROA not before:           Sat 15 Feb 2025 21:07:20 +0000
ROA not after:            Sat 14 Feb 2026 21:12:20 +0000
asID:                     16909
IP address blocks:        2a14:7584:600a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:40:74:21:b4:94:af:6f:ae:3b:45:26:0c:8a:e4:e3:2c:9b:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:20 2025 GMT
            Not After : Feb 14 21:12:20 2026 GMT
        Subject: CN=B5F9184232C39D68A04DA1D0300BAF5271A1FB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:75:74:b9:75:d3:7d:29:f5:fb:27:0d:8c:
                    e3:86:6f:91:7b:b3:89:2e:40:6e:2c:5c:d2:87:93:
                    37:bd:ec:cc:06:97:a2:b5:3e:d0:3e:72:9a:e2:18:
                    f1:71:a1:fc:c1:17:8e:a3:cf:0c:9a:94:9e:09:e0:
                    7e:a9:d2:c0:61:6d:89:f7:19:4d:5d:42:74:e2:71:
                    f8:ed:fe:2c:6c:e5:d5:ae:82:f9:32:15:af:16:15:
                    d0:81:e4:00:22:ac:d1:f3:13:5d:49:e9:cd:5c:9c:
                    4a:14:64:2d:2e:18:8a:25:1c:e1:5a:d8:ad:8d:18:
                    5d:c2:d4:25:06:aa:e2:57:f7:d7:58:92:ec:8e:30:
                    5a:62:0b:dd:5c:55:e6:1b:6e:e0:4e:ec:ea:fb:47:
                    87:12:f9:7c:ee:e6:ad:ed:0d:ae:89:94:46:ef:46:
                    44:78:5c:7b:51:22:7d:4a:eb:93:44:fd:82:f1:c6:
                    5f:7e:4c:69:b6:28:af:47:0d:c8:b7:93:ce:fb:1c:
                    b2:34:0f:80:e3:01:19:b3:0e:3e:f6:78:84:21:93:
                    93:cc:9e:17:6d:95:79:64:aa:c1:99:ff:72:7e:73:
                    0a:24:77:c8:01:00:7e:53:6c:95:53:98:49:dc:0c:
                    38:df:5d:71:0d:62:85:70:5b:f2:af:e4:74:95:b3:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:18:42:32:C3:9D:68:A0:4D:A1:D0:30:0B:AF:52:71:A1:FB:5F
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:f3:06:a3:a2:2d:bd:e2:2c:b5:3c:c7:e5:c4:01:6a:b6:86:
         73:f6:6a:4d:91:62:eb:2c:d2:68:6f:8f:ec:1f:9c:0a:ce:2a:
         4a:49:66:cd:77:e7:dd:32:23:68:d8:96:d6:c5:6c:26:28:f1:
         92:0e:cc:1a:a3:bd:72:9e:e4:96:54:17:6a:d9:47:6f:85:0a:
         2e:b6:57:ee:9d:18:ab:c0:e2:12:04:96:e4:8a:d1:c9:6f:15:
         eb:c4:91:a5:03:a6:be:ca:00:d8:9c:cf:c1:d3:76:77:77:be:
         e1:5f:29:aa:94:1e:df:f1:a3:fc:d9:72:40:28:6c:be:1c:79:
         20:44:d0:a0:6f:c2:c8:66:87:eb:6a:36:86:2a:5f:cc:dc:0d:
         c2:66:01:2d:3e:0e:1f:f1:ad:d7:94:52:0a:8a:d6:55:a7:11:
         5e:43:3c:db:f6:3b:de:84:be:de:30:16:99:e2:68:da:53:eb:
         02:1a:7c:cf:0b:84:c2:50:04:d3:5d:70:7e:b9:0c:de:e7:22:
         f4:b2:ea:07:b1:57:84:5d:18:6c:7c:f7:ec:de:9a:ab:2c:f8:
         b5:2c:af:02:63:5d:c9:d0:87:d4:94:2e:b1:b7:5b:8e:44:fd:
         2f:99:16:28:66:1b:e7:49:cb:d2:96:5e:e3:17:5e:e4:57:f5:
         81:e2:b2:48
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMUB0IbSUr2+uO0UmDIrk4yyb9MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMTUyMTA3MjBaFw0yNjAyMTQyMTEyMjBaMDMxMTAvBgNV
BAMTKEI1RjkxODQyMzJDMzlENjhBMDREQTFEMDMwMEJBRjUyNzFBMUZCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCODHV0uXXTfSn1+ycNjOOGb5F7
s4kuQG4sXNKHkze97MwGl6K1PtA+cpriGPFxofzBF46jzwyalJ4J4H6p0sBhbYn3
GU1dQnTicfjt/ixs5dWugvkyFa8WFdCB5AAirNHzE11J6c1cnEoUZC0uGIolHOFa
2K2NGF3C1CUGquJX99dYkuyOMFpiC91cVeYbbuBO7Or7R4cS+Xzu5q3tDa6JlEbv
RkR4XHtRIn1K65NE/YLxxl9+TGm2KK9HDci3k877HLI0D4DjARmzDj72eIQhk5PM
nhdtlXlkqsGZ/3J+cwokd8gBAH5TbJVTmEncDDjfXXENYoVwW/Kv5HSVs1F9AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUtfkYQjLDnWigTaHQMAuvUnGh+18wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMDYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgCjAN
BgkqhkiG9w0BAQsFAAOCAQEAn/MGo6ItveIstTzH5cQBaraGc/ZqTZFi6yzSaG+P
7B+cCs4qSklmzXfn3TIjaNiW1sVsJijxkg7MGqO9cp7kllQXatlHb4UKLrZX7p0Y
q8DiEgSW5IrRyW8V68SRpQOmvsoA2JzPwdN2d3e+4V8pqpQe3/Gj/NlyQChsvhx5
IETQoG/CyGaH62o2hipfzNwNwmYBLT4OH/Gt15RSCorWVacRXkM82/Y73oS+3jAW
meJo2lPrAhp8zwuEwlAE011wfrkM3uci9LLqB7FXhF0YbHz37N6aqyz4tSyvAmNd
ydCH1JQusbdbjkT9L5kWKGYb50nL0pZe4xde5Ff1geKySA==
-----END CERTIFICATE-----