Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030653a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363030653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5xMDO5JBTQh45y0HZqWDeHI8aC1WlgjVGl4qfIJ5Dtw=
Subject key identifier:   96:7D:A9:EE:E7:17:9B:80:E4:EB:0A:08:19:0D:7B:51:B7:C5:0F:F4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       59BFFA03DF42A6D6E7731D3F1463EF62CAA4281A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030653a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:23 +0000
ROA not before:           Sat 15 Feb 2025 21:07:23 +0000
ROA not after:            Sat 14 Feb 2026 21:12:23 +0000
asID:                     16909
IP address blocks:        2a14:7584:600e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:fa:03:df:42:a6:d6:e7:73:1d:3f:14:63:ef:62:ca:a4:28:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:23 2025 GMT
            Not After : Feb 14 21:12:23 2026 GMT
        Subject: CN=967DA9EEE7179B80E4EB0A08190D7B51B7C50FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:93:d8:6c:9d:a3:6f:4a:6f:5b:b4:5d:71:
                    2e:8a:63:1d:2c:a6:4a:73:6b:8f:d4:ab:c0:1e:2e:
                    db:ac:43:08:25:cd:e7:ab:f9:47:af:09:d9:90:62:
                    84:52:dc:75:09:2a:c8:db:d1:c0:d5:0d:3a:4d:0c:
                    ff:12:93:9b:0f:ee:8e:f6:42:48:85:20:4a:bf:d1:
                    7c:bb:9a:7b:ad:7f:1a:25:e6:0d:d4:33:5e:36:ca:
                    08:44:b0:f7:e8:a4:2a:67:25:23:e1:4e:18:fd:45:
                    2c:cd:68:40:a1:52:ef:a9:02:1b:27:62:20:97:b8:
                    a4:de:fe:d4:df:12:2e:54:97:2c:24:9d:4e:45:00:
                    89:33:7e:1f:a3:53:66:45:5d:18:03:8d:84:08:53:
                    f8:6c:e0:d0:65:53:24:5e:08:ca:44:e1:d5:ec:8e:
                    94:39:b8:25:fe:09:b8:e3:a5:e6:72:4b:a3:13:fb:
                    bc:21:b6:9f:c7:2b:72:a1:a1:b4:0d:a8:48:fa:76:
                    48:51:1a:27:5f:59:7c:ca:24:d4:15:17:e4:e3:8b:
                    ca:6d:52:13:ae:0b:1a:da:01:a5:2a:b5:b6:9c:81:
                    0b:82:b4:eb:f6:c0:28:53:c8:15:c3:83:25:e2:82:
                    bd:25:4a:77:c3:9b:6d:9b:e2:d9:0f:e8:e7:a8:06:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:A9:EE:E7:17:9B:80:E4:EB:0A:08:19:0D:7B:51:B7:C5:0F:F4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030653a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:600e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:74:30:3b:a0:ea:a4:c0:4b:e0:13:d3:d6:08:be:f9:bb:f6:
         3e:a3:09:4e:a0:7f:dd:22:59:04:c8:f9:4a:19:da:28:16:b1:
         e6:66:ee:39:fc:4f:4f:30:bb:41:42:bb:04:99:5f:2b:2b:99:
         40:50:bd:67:66:de:3e:05:a1:74:c6:83:a1:1c:f6:4d:32:d1:
         ba:95:38:b7:19:61:83:e9:6e:2d:07:24:2e:6b:cc:c0:aa:0c:
         14:97:3e:0f:74:cc:2f:83:63:93:ee:e3:87:c1:8d:5a:74:bd:
         1d:4b:82:35:35:68:5b:83:4e:94:50:51:12:68:5b:53:59:7f:
         90:cb:bc:3d:85:33:c0:aa:19:f6:1b:6c:b5:ae:1e:22:51:a2:
         00:62:b5:7b:dd:2d:1b:44:03:54:42:0b:a2:d6:01:10:14:19:
         14:27:40:84:d8:67:99:2d:af:7e:33:01:95:b5:68:4f:af:ed:
         15:fc:e8:0e:cb:f6:9b:23:0c:be:e7:ef:4c:a2:ea:47:03:c5:
         97:f2:f6:ec:ce:47:27:7b:8e:ed:03:15:37:d1:0b:65:9d:30:
         ab:ab:58:a9:da:64:a5:eb:76:4f:ae:95:cd:ae:2c:6e:c8:b5:
         a6:56:0b:b5:b5:2e:13:24:b6:86:3e:a1:96:af:65:91:9e:d2:
         8a:d8:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----