Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032313a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363032313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          5li/07sikmkJTdctyfDoXRVF9c6GWSupK++6P2kIJ8g=
Subject key identifier:   40:83:64:FF:0F:AA:33:2F:DD:82:D7:C1:79:CC:B5:D6:37:3D:30:5C
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7C0285919EBCC4F381E3F8645BAC114419A9D253
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032313a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 23 Feb 2025 07:57:29 +0000
ROA not before:           Sun 23 Feb 2025 07:52:29 +0000
ROA not after:            Sun 22 Feb 2026 07:57:29 +0000
asID:                     401507
IP address blocks:        2a14:7584:6021::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:02:85:91:9e:bc:c4:f3:81:e3:f8:64:5b:ac:11:44:19:a9:d2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:52:29 2025 GMT
            Not After : Feb 22 07:57:29 2026 GMT
        Subject: CN=408364FF0FAA332FDD82D7C179CCB5D6373D305C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:a1:b7:25:f6:74:f0:d0:f9:09:c2:ba:9d:
                    4b:a2:95:ff:c9:3f:b8:4a:0c:d0:82:3b:4b:2b:c9:
                    8a:1e:45:47:2d:f7:4c:7b:a5:91:d7:df:49:94:a4:
                    b8:a6:15:13:46:07:62:41:89:2c:5d:c7:ab:62:3e:
                    67:75:e1:99:94:fc:3f:b2:42:d8:15:f6:0c:69:5f:
                    63:3b:f6:00:dd:95:0a:fc:81:3b:83:ec:8f:93:2e:
                    b1:99:90:eb:81:c2:19:e5:19:76:fa:2f:d6:8d:7b:
                    86:0f:f4:00:93:4a:16:87:98:e9:12:ad:b3:da:4d:
                    bd:ae:d6:0a:c4:fe:89:fb:87:5a:4f:17:b0:b0:4b:
                    70:91:55:25:dd:e0:68:e3:01:6c:7d:d0:85:eb:9c:
                    c2:32:b7:de:a7:85:c2:95:9d:06:e5:51:1a:2f:b9:
                    2b:be:45:18:20:55:95:8a:3b:ef:b2:d1:5e:41:3a:
                    65:0e:96:d6:e7:29:db:ca:62:da:5a:e1:6e:58:71:
                    a1:ec:dc:77:03:61:57:e8:6d:24:5c:40:6e:17:64:
                    e7:69:74:c6:38:5c:d0:3a:c3:61:94:a4:4d:38:bd:
                    57:ea:ec:de:d4:25:e0:71:e9:b5:c6:a4:d1:fe:18:
                    08:fe:52:3a:78:65:24:09:f8:e2:e6:73:ca:cb:a7:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:64:FF:0F:AA:33:2F:DD:82:D7:C1:79:CC:B5:D6:37:3D:30:5C
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032313a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6021::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:af:70:1d:9a:ab:12:70:be:e5:c6:82:db:ff:92:bf:57:6c:
         98:cd:91:47:4d:7c:42:ff:6e:e8:e4:6d:96:b8:02:01:92:ac:
         bd:cc:d3:f1:54:f3:b8:31:cb:0e:07:60:89:44:3a:9b:15:76:
         b7:34:65:58:0b:65:3e:ee:83:fb:b7:a5:75:91:36:b8:3e:d3:
         29:dc:e8:9c:9c:30:2f:24:ef:5d:f6:0a:82:36:53:fc:3c:a1:
         7a:77:68:f5:a3:4d:7e:94:a2:5c:d7:6e:64:14:9d:24:73:07:
         36:7b:02:de:ec:74:df:23:35:09:90:4b:6f:0a:c1:af:b9:e8:
         ce:aa:1c:21:d6:d0:ce:81:15:e6:3c:74:48:2d:cd:c1:5d:9a:
         58:a3:c9:93:2f:c2:47:ab:4c:23:ac:97:84:b3:75:85:d7:2c:
         72:49:d1:ad:67:f3:ed:54:a9:bc:e4:86:29:e8:9f:51:d1:07:
         45:51:5f:d0:4d:5b:58:35:05:a7:53:3e:1e:f7:0d:63:ac:b9:
         eb:c6:72:3c:f5:8a:fe:d7:63:87:70:00:83:f9:69:3c:ae:f2:
         95:02:b4:88:08:1c:da:f6:07:c7:4e:78:4c:8c:3e:03:24:a0:
         5b:3d:bf:38:fb:7f:56:d1:d2:af:7f:e2:3f:cd:52:8a:9d:8a:
         12:5c:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----