Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363031363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          6yuCepsDg8T7vbHj1Nqru0y7NDTYgHcvwlenXaZFcfg=
Subject key identifier:   3E:98:50:FE:8B:CA:69:60:0B:6C:07:05:17:54:5B:B5:8C:F2:52:B4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       BE7CCC65342DAA29FD78260DDAB85DC513B862
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:50 +0000
ROA not before:           Sat 15 Feb 2025 21:07:50 +0000
ROA not after:            Sat 14 Feb 2026 21:12:50 +0000
asID:                     16909
IP address blocks:        2a14:7584:6016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            be:7c:cc:65:34:2d:aa:29:fd:78:26:0d:da:b8:5d:c5:13:b8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:50 2025 GMT
            Not After : Feb 14 21:12:50 2026 GMT
        Subject: CN=3E9850FE8BCA69600B6C070517545BB58CF252B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:50:3f:b4:9e:88:57:18:fe:db:66:ef:5e:
                    9d:e2:8f:7f:5f:19:07:09:89:17:e1:da:57:2c:13:
                    fd:c1:af:0f:18:ca:9e:7a:c9:6a:3b:90:4b:45:b8:
                    6e:12:6b:1a:c0:e9:74:1b:6f:ea:70:e3:04:d5:0d:
                    cb:74:3b:e1:a5:88:25:80:3b:27:51:2f:7a:74:d1:
                    e9:7c:49:70:27:e2:5c:dc:ef:66:84:0e:a6:a4:b2:
                    53:45:51:07:4f:95:b0:61:ba:7b:c7:26:af:8e:51:
                    db:4e:c9:55:ab:b5:de:ef:45:2a:cd:d6:d7:c0:f5:
                    9c:fb:63:19:12:ca:bd:1e:e5:cd:a8:cc:46:6f:04:
                    f3:d8:b6:88:22:74:4e:3c:ef:f2:f1:3f:e1:74:c8:
                    e2:a0:53:43:eb:d8:34:16:ce:e3:e7:5c:20:9c:e9:
                    d4:11:1c:15:69:98:32:bd:92:31:e7:56:7d:02:fc:
                    54:f9:e3:9c:2f:9a:af:45:e7:65:f3:b5:40:a1:5a:
                    83:d2:3b:8f:40:5c:2d:c0:9d:cf:30:d0:0e:dc:0e:
                    7a:0a:65:ba:e4:69:6d:80:9c:e9:be:b3:c1:59:ac:
                    02:5d:d3:b7:d8:c3:87:ef:d3:8e:76:53:cd:58:eb:
                    71:5f:17:96:e0:9b:0f:68:dd:5b:f8:f7:67:19:37:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:98:50:FE:8B:CA:69:60:0B:6C:07:05:17:54:5B:B5:8C:F2:52:B4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6016::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:44:20:d1:63:0b:ec:81:d9:d8:5f:4b:19:83:eb:42:f7:fc:
         9c:a8:14:f4:8d:41:bd:e0:22:00:1d:cd:5c:71:4e:7b:d6:49:
         d2:b3:b8:e3:cd:0d:f0:34:90:73:87:9b:33:52:ab:48:7c:8a:
         49:49:cc:19:27:49:eb:1e:58:66:79:a7:a3:b2:5a:9b:a2:af:
         8d:7b:34:c5:ab:57:50:c2:6d:08:d6:93:ce:94:47:f3:69:b4:
         68:1b:3f:6e:6d:55:36:da:93:58:53:db:af:e6:bc:85:25:55:
         8b:eb:1a:fa:93:af:ec:ec:10:45:bf:40:5c:54:81:90:d9:0d:
         b1:dd:74:e0:8d:2b:03:17:bc:38:d3:fb:43:73:bc:bf:c3:3c:
         c1:78:a0:c8:48:6b:44:48:d0:0b:f3:70:91:31:83:dd:ec:92:
         f8:a7:6e:33:a9:10:71:b6:30:97:8c:70:b2:73:04:d8:47:0d:
         07:de:f1:a8:f9:58:a2:89:3c:1f:6e:62:32:91:0f:00:74:d4:
         50:a3:76:71:b0:9b:32:b4:74:b8:1e:84:b6:0c:4a:14:3c:0d:
         57:59:cd:c0:e4:ca:a9:ef:45:ac:04:4f:42:97:7e:9f:d7:db:
         56:5a:54:f1:7c:af:bc:97:2e:8b:74:df:4d:c6:8d:e9:11:67:
         8c:9c:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----