Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363031373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          iTCAKqKYzNBs+L5SJTHrcaObTwwJtrS4qAXfjBXcgtY=
Subject key identifier:   42:C4:BD:86:96:EB:56:4A:92:4F:7F:72:C8:C6:26:7B:D4:A8:8F:D5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       39E2D4914652908936B902E0344AC208C91E3D96
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 15 Feb 2025 21:12:51 +0000
ROA not before:           Sat 15 Feb 2025 21:07:51 +0000
ROA not after:            Sat 14 Feb 2026 21:12:51 +0000
asID:                     16909
IP address blocks:        2a14:7584:6017::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e2:d4:91:46:52:90:89:36:b9:02:e0:34:4a:c2:08:c9:1e:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 15 21:07:51 2025 GMT
            Not After : Feb 14 21:12:51 2026 GMT
        Subject: CN=42C4BD8696EB564A924F7F72C8C6267BD4A88FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:46:4d:6a:a3:55:05:c4:0d:14:bc:94:ec:
                    73:5e:9f:6b:1a:2e:3b:82:bb:b4:82:55:02:80:c6:
                    e8:93:67:87:3c:98:9f:22:3f:bb:60:61:d8:cc:ef:
                    9e:3e:db:54:88:c1:1f:53:83:f0:33:f6:60:8c:5e:
                    35:2d:f7:12:dd:b8:04:6c:80:da:55:b6:12:02:d7:
                    99:b4:84:ae:2b:7b:e3:64:a0:d7:d7:de:87:5a:6d:
                    38:97:64:25:87:2f:b9:26:57:09:7c:24:d4:19:11:
                    e2:9c:65:dd:5d:79:86:28:ae:82:f4:88:ea:3f:9e:
                    a3:92:85:77:64:af:c9:60:d8:38:a6:6b:2c:51:32:
                    93:d3:3b:ff:a8:f7:78:14:07:a7:f0:16:18:26:d2:
                    c2:9d:42:f7:e1:30:d4:2a:91:3b:d2:6e:d3:e1:9f:
                    63:c0:71:f2:34:74:bb:c1:84:0e:ed:63:a3:09:04:
                    1c:c3:21:5a:32:38:71:b0:82:8b:c8:c1:ba:ca:50:
                    92:ca:ad:30:47:d2:28:5f:df:68:e1:d3:11:24:0a:
                    f3:e9:14:61:8f:fd:89:45:50:b9:1c:21:8a:1e:54:
                    c4:66:25:7e:0f:01:ce:ee:22:eb:6e:4b:a9:13:3b:
                    6d:c0:13:f6:c4:d6:6f:cc:d7:cc:18:a5:1a:36:2a:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:BD:86:96:EB:56:4A:92:4F:7F:72:C8:C6:26:7B:D4:A8:8F:D5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6017::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:0b:88:a8:46:25:51:8c:45:94:07:78:16:1b:d7:b8:92:
         57:1c:7e:49:7b:fe:0b:1d:13:cc:3b:c4:a0:4f:cc:f6:f1:82:
         41:10:45:7a:c6:9f:a9:9b:db:4a:39:4a:28:35:12:53:e1:e7:
         06:76:19:d7:e6:4b:07:e2:0b:f1:0d:b4:9f:f9:38:09:71:d9:
         7f:d2:5c:bb:5a:75:6a:15:97:22:71:24:d9:e5:04:e9:44:e2:
         34:ca:b2:67:dd:59:a9:9e:d3:c1:71:98:01:51:75:00:36:e3:
         15:4e:1d:66:f4:b2:d3:cb:88:2f:bb:0b:2e:22:50:8b:49:6b:
         55:9d:ed:bb:76:5a:55:5e:ee:a0:ff:f6:a3:20:a6:ab:b3:8d:
         fb:30:10:c4:66:4b:39:31:18:df:bf:65:7c:22:0a:64:82:aa:
         7c:2c:13:54:1d:68:61:9c:3a:5d:b5:d2:c7:72:98:17:46:fc:
         cc:a4:35:66:d7:ef:88:fb:5a:6a:49:fa:f7:ae:5b:6a:37:80:
         9f:60:79:1f:e5:81:20:39:9b:ca:f2:60:48:e0:29:68:c3:b7:
         87:bf:5e:62:6e:87:df:41:e6:13:7d:8e:85:69:40:79:ea:5d:
         1d:ac:61:03:76:b0:18:2f:b0:ab:d0:ae:77:84:51:75:85:05:
         16:05:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----