Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031353a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363031353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          MPI5qA54O75FYLurKVLcyh3LIr7LoUeNyUT7Wmiopuk=
Subject key identifier:   7F:AB:B6:1E:AF:85:3B:1C:63:7F:62:A8:E9:53:5D:2D:3D:0C:F0:C3
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2455CEB2B02F8C049986EA85F3C9D09CE5DBB93C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:50 +0000
ROA not before:           Sat 15 Feb 2025 21:07:50 +0000
ROA not after:            Sat 14 Feb 2026 21:12:50 +0000
asID:                     16909
IP address blocks:        2a14:7584:6015::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:ce:b2:b0:2f:8c:04:99:86:ea:85:f3:c9:d0:9c:e5:db:b9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:50 2025 GMT
            Not After : Feb 14 21:12:50 2026 GMT
        Subject: CN=7FABB61EAF853B1C637F62A8E9535D2D3D0CF0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:38:04:4b:7d:17:ca:99:a1:d5:c9:43:98:
                    dc:ba:ff:50:6f:84:d8:e0:0b:fc:26:27:16:53:9e:
                    df:c8:c2:71:35:c5:b0:99:5f:ec:db:cd:f7:d1:09:
                    fd:3c:8d:f0:92:2c:1b:91:83:8b:5e:67:f1:f9:49:
                    e4:e8:e9:2c:3c:65:14:fd:e7:e1:9a:e7:e6:33:64:
                    51:b5:cf:41:72:6e:61:b3:71:8b:a5:af:63:12:71:
                    48:ef:6a:6e:ed:f1:45:40:64:e3:4e:3d:74:8d:7a:
                    97:30:cf:c9:c8:d9:86:52:f2:60:bc:70:cb:ce:ba:
                    39:f7:6c:05:1e:59:34:16:2b:e2:14:71:36:bb:19:
                    33:3a:d4:f1:72:af:b5:6b:e0:fd:cf:25:a6:6a:97:
                    08:16:f8:4e:6e:dd:dd:74:45:32:07:c7:5c:3c:8c:
                    2a:19:7d:e4:af:26:98:3e:b6:ce:2e:05:75:2a:d7:
                    22:24:16:63:d1:8d:68:0f:1a:66:d6:3d:ac:54:6f:
                    d4:bf:16:e5:98:2b:b1:ce:f8:46:53:69:e9:d1:a5:
                    f0:6a:92:34:07:a6:fc:cd:3d:07:16:d9:f3:2f:e2:
                    10:04:37:76:43:76:d9:4b:df:10:00:b9:d6:10:1e:
                    37:f1:53:b4:76:87:b5:90:ba:a2:79:39:d4:0e:f1:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AB:B6:1E:AF:85:3B:1C:63:7F:62:A8:E9:53:5D:2D:3D:0C:F0:C3
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:6f:dd:49:f0:bc:95:ac:bc:87:93:20:6e:d2:52:2f:bf:
         5f:0d:7f:a9:a0:1f:00:46:ff:a4:36:53:19:d9:cd:03:b7:19:
         b8:21:6d:b0:31:26:0c:54:03:e9:af:9d:64:03:7b:4b:e2:5b:
         58:92:f7:cb:bf:4d:7e:9c:28:1a:69:2d:72:4a:e3:9a:e5:47:
         5c:26:26:e0:44:9b:6d:4c:65:fd:e1:ec:79:dd:8d:ea:16:32:
         9f:13:21:3f:a4:cd:fe:08:06:4f:30:27:6d:53:46:6d:90:2c:
         ab:ba:e3:db:d0:19:a1:b6:d6:9b:2a:c2:2e:94:03:17:32:f7:
         0e:67:b7:20:6b:a8:14:a7:09:16:02:c8:9d:32:fb:94:fb:23:
         75:4a:23:8a:ce:36:76:cd:1e:e4:f2:77:52:68:48:a5:a4:81:
         b3:76:f6:fc:7c:b0:c3:c0:63:87:3e:8d:6e:36:91:48:f3:ce:
         d1:a7:c5:40:f1:b4:b1:cf:e9:b2:6e:a9:ff:18:01:fb:5d:9d:
         d6:7b:34:54:cc:00:1b:2e:71:a9:7c:8a:83:f6:56:f5:7f:3a:
         1a:ef:ce:69:d5:5e:30:b8:d5:de:59:7d:f3:b5:45:2c:60:f6:
         02:a0:b5:10:8f:c6:77:7b:49:ac:57:30:d3:ca:32:7d:af:18:
         73:24:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----