Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363032633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          XRh8bNw3uwFDZFNme5DvXUdjP16h1PVTpLqKSDLGhrs=
Subject key identifier:   74:0F:9F:0E:AA:64:5C:CD:FE:EF:CB:9C:12:58:D9:8B:11:6D:F0:C9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7FCCF5C882151F51BFA93D26F71CA5AC0288E670
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:58:55 +0000
ROA not before:           Sun 23 Feb 2025 07:53:55 +0000
ROA not after:            Sun 22 Feb 2026 07:58:55 +0000
asID:                     16909
IP address blocks:        2a14:7584:602c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cc:f5:c8:82:15:1f:51:bf:a9:3d:26:f7:1c:a5:ac:02:88:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:53:55 2025 GMT
            Not After : Feb 22 07:58:55 2026 GMT
        Subject: CN=740F9F0EAA645CCDFEEFCB9C1258D98B116DF0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:58:99:ca:fc:40:18:68:48:45:31:dd:64:
                    03:6c:73:53:7e:14:2d:7a:74:02:97:ad:07:73:aa:
                    0a:4d:df:eb:0f:a2:42:d9:f3:6a:a1:89:a8:84:65:
                    ff:26:bf:20:a7:f5:cc:ef:75:13:a8:f3:b9:ad:c1:
                    31:56:9b:1a:35:d4:9d:ef:47:27:ce:3d:29:31:66:
                    3d:ab:fc:86:34:d3:b8:89:6b:74:1f:8b:7b:ae:69:
                    a7:9a:3b:e8:29:b4:07:12:19:65:02:7c:b0:33:e0:
                    fc:4a:1d:b3:cf:d8:67:8c:ae:32:f0:84:96:33:2d:
                    00:65:9b:c8:c8:5d:30:79:11:d4:27:d5:81:53:de:
                    e5:5b:1b:24:2b:a0:f6:3c:70:3f:b3:43:07:6c:39:
                    c9:f2:41:53:a3:cb:2a:ac:b8:60:38:80:21:a6:63:
                    3f:fd:1a:98:93:7b:86:1c:34:58:5d:a8:bc:59:b0:
                    00:8a:38:e5:7a:79:00:9f:87:76:f6:55:71:de:51:
                    fc:0a:93:e8:ec:13:fd:b0:a9:9e:01:fe:3e:5b:67:
                    a5:8a:b0:be:d8:23:a4:cf:f2:c4:f4:aa:e8:62:e2:
                    87:9a:78:10:51:de:aa:04:5e:8a:ae:7e:fc:3f:48:
                    0b:ef:55:a6:95:bc:4f:20:95:e8:86:4e:2f:2d:c7:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0F:9F:0E:AA:64:5C:CD:FE:EF:CB:9C:12:58:D9:8B:11:6D:F0:C9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:602c::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:11:1e:72:9f:8e:d5:d6:62:39:9c:99:44:3d:62:5b:02:4c:
         b9:56:ee:1f:13:de:ab:56:c4:53:49:4b:df:49:3f:d9:6b:26:
         22:60:a1:dc:13:7d:fb:c2:92:50:13:02:87:dc:a8:f6:75:01:
         07:92:de:59:7f:5e:6a:3a:6f:7e:5f:ca:d7:a7:d3:32:e4:ae:
         20:3c:88:5b:3a:4d:6b:c8:aa:22:d2:c2:e2:9a:73:d0:7c:62:
         69:c6:db:11:2e:7c:29:70:8d:1c:50:4f:d5:bd:3a:f7:bc:01:
         7a:fe:45:74:01:c7:b5:47:70:db:6c:65:cf:0f:f9:b7:44:76:
         7a:75:58:93:01:f4:89:aa:fc:93:1d:86:45:d3:d3:7d:b1:08:
         4b:d7:03:2a:9c:7c:04:be:ca:d2:46:af:1a:05:09:a7:09:a4:
         bf:c7:4a:cb:0d:5a:1a:f7:fd:1c:4e:b4:54:23:59:e4:02:2d:
         0c:43:88:d6:fe:bb:56:c8:d0:21:3f:54:88:75:06:c6:29:36:
         ff:6a:ef:46:58:c0:a2:96:ff:5d:8a:a3:3c:9c:51:af:45:eb:
         dd:83:6d:5f:bc:35:f4:a3:6c:fa:10:4d:b0:1b:8e:41:b1:e2:
         1b:09:b9:11:64:56:89:86:f8:18:0c:21:ce:b8:d1:fe:44:9c:
         3e:10:4f:f7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUf8z1yIIVH1G/qT0m9xylrAKI5nAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzUzNTVaFw0yNjAyMjIwNzU4NTVaMDMxMTAvBgNV
BAMTKDc0MEY5RjBFQUE2NDVDQ0RGRUVGQ0I5QzEyNThEOThCMTE2REYwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeFiZyvxAGGhIRTHdZANsc1N+
FC16dAKXrQdzqgpN3+sPokLZ82qhiaiEZf8mvyCn9czvdROo87mtwTFWmxo11J3v
RyfOPSkxZj2r/IY007iJa3Qfi3uuaaeaO+gptAcSGWUCfLAz4PxKHbPP2GeMrjLw
hJYzLQBlm8jIXTB5EdQn1YFT3uVbGyQroPY8cD+zQwdsOcnyQVOjyyqsuGA4gCGm
Yz/9GpiTe4YcNFhdqLxZsACKOOV6eQCfh3b2VXHeUfwKk+jsE/2wqZ4B/j5bZ6WK
sL7YI6TP8sT0quhi4oeaeBBR3qoEXoqufvw/SAvvVaaVvE8gleiGTi8tx6eZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUdA+fDqpkXM3+78ucEljZixFt8MkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgLDAN
BgkqhkiG9w0BAQsFAAOCAQEAUxEecp+O1dZiOZyZRD1iWwJMuVbuHxPeq1bEU0lL
30k/2WsmImCh3BN9+8KSUBMCh9yo9nUBB5LeWX9eajpvfl/K16fTMuSuIDyIWzpN
a8iqItLC4ppz0HxiacbbES58KXCNHFBP1b0697wBev5FdAHHtUdw22xlzw/5t0R2
enVYkwH0iar8kx2GRdPTfbEIS9cDKpx8BL7K0kavGgUJpwmkv8dKyw1aGvf9HE60
VCNZ5AItDEOI1v67VsjQIT9UiHUGxik2/2rvRljAopb/XYqjPJxRr0Xr3YNtX7w1
9KNs+hBNsBuOQbHiGwm5EWRWiYb4GAwhzrjR/kScPhBP9w==
-----END CERTIFICATE-----