Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          bXuGHzUGYGqn0x4rHqOk/UncLehpDJHvuDjSfK26x/s=
Subject key identifier:   5B:A5:DA:DA:D9:88:AC:11:71:05:C9:3D:9B:0C:0F:64:D1:F5:EA:14
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       768229A3CA566D5386DA6A79278F865B2EEC7901
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:35 +0000
ROA not before:           Sun 23 Feb 2025 07:53:35 +0000
ROA not after:            Sun 22 Feb 2026 07:58:35 +0000
asID:                     16909
IP address blocks:        2a14:7584:6027::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:82:29:a3:ca:56:6d:53:86:da:6a:79:27:8f:86:5b:2e:ec:79:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:35 2025 GMT
            Not After : Feb 22 07:58:35 2026 GMT
        Subject: CN=5BA5DADAD988AC117105C93D9B0C0F64D1F5EA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:e9:8d:e0:83:2a:84:6a:e3:43:4a:38:f4:
                    1f:4f:ea:b6:9a:bd:0b:e8:74:40:c5:08:de:f9:53:
                    59:a0:2c:a2:64:f0:41:de:e9:f6:a2:e7:8e:c8:11:
                    7a:a6:ac:f2:e7:78:28:16:8c:53:94:b4:1b:87:12:
                    98:a1:6e:ba:22:70:f0:02:dc:9d:32:2c:d2:3f:4e:
                    51:a6:10:49:62:86:10:e9:69:28:1f:5b:1d:3a:e5:
                    01:d2:ed:cf:bc:eb:a3:98:9b:e1:a4:9b:87:d6:d9:
                    27:6c:d4:d2:74:46:9b:c8:36:db:f9:9f:8f:47:42:
                    7b:d7:53:ac:a6:88:7a:d0:93:98:e4:0e:8a:3a:59:
                    72:ba:7a:58:96:4f:32:3b:a1:8c:c1:f2:15:68:ad:
                    c2:43:3e:4f:2c:0f:78:13:4a:b0:a0:8c:e7:f4:e8:
                    a0:14:a3:df:42:93:27:37:4f:1f:72:09:65:a5:15:
                    7b:ce:69:52:f0:24:21:6c:58:8a:48:76:e2:b9:f8:
                    78:54:26:81:26:f9:bd:83:f0:da:9a:16:1d:b3:85:
                    e3:61:61:1b:b7:86:44:2f:b5:96:c5:9c:c8:9e:3e:
                    84:05:f1:1e:0d:83:da:22:4c:19:60:5f:3e:48:23:
                    f9:6d:7a:5f:14:a6:6a:b5:6f:55:b5:00:47:d4:00:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:DA:DA:D9:88:AC:11:71:05:C9:3D:9B:0C:0F:64:D1:F5:EA:14
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6027::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:6c:5d:7a:4a:89:f9:c3:aa:1b:4c:de:e9:bf:a6:bd:69:
         35:be:93:0d:87:48:dc:a7:52:42:d5:eb:c6:21:a9:20:91:08:
         c7:2b:96:59:5b:35:85:e8:4f:7e:63:40:a1:68:8a:d5:22:7d:
         41:7b:94:ce:0f:aa:24:c6:2b:dd:d0:29:9d:f9:8b:d8:af:1e:
         49:a7:be:6a:16:42:37:61:fc:86:c3:44:c8:59:2c:3f:4d:46:
         7d:d3:bb:e7:e9:dc:b2:5f:96:89:43:36:39:3b:9b:01:53:69:
         13:06:cb:3a:3e:d0:a0:a1:ab:03:b4:22:59:2f:f4:61:85:d2:
         98:96:e9:b1:0b:f7:4e:fa:b2:11:2c:80:87:3b:fd:b7:d9:09:
         5b:75:47:1b:47:bc:1b:e2:f5:5b:03:27:97:b4:81:e6:aa:c8:
         9a:bd:5c:87:e5:53:2d:52:ed:6c:79:dd:99:4c:d7:36:5f:40:
         c7:b7:97:78:14:49:a3:ed:42:f8:23:1d:75:4a:5a:2b:e4:43:
         43:ab:fd:ea:33:0e:ce:15:2b:4f:7d:ac:c4:3a:8c:ff:61:85:
         77:d5:42:6f:bc:0c:ed:1b:89:b3:3d:ab:84:6f:38:52:0c:79:
         ec:f8:7c:76:bc:13:b1:ea:ca:3f:12:5f:16:9c:78:79:d3:c8:
         57:50:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----