Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033343a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          8xL8x+WNOgnJbTUgxa1j9AVIR+qR3QIQhAp6J7dnJq4=
Subject key identifier:   DD:62:F7:4A:B5:3E:55:56:4F:C4:FD:C2:9D:66:F1:E9:62:DA:3B:68
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6C2E7791FCAB4BD3F3486EF348AB99E211507FD9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033343a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:17 +0000
ROA not before:           Sun 23 Feb 2025 07:54:17 +0000
ROA not after:            Sun 22 Feb 2026 07:59:17 +0000
asID:                     16909
IP address blocks:        2a14:7584:6034::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:77:91:fc:ab:4b:d3:f3:48:6e:f3:48:ab:99:e2:11:50:7f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:17 2025 GMT
            Not After : Feb 22 07:59:17 2026 GMT
        Subject: CN=DD62F74AB53E55564FC4FDC29D66F1E962DA3B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:fb:d7:18:dd:90:b6:0d:4d:ef:8a:52:0f:
                    7e:8d:22:d9:b5:19:fc:75:fa:6e:63:35:48:9e:24:
                    73:26:20:f3:07:96:8a:be:3c:2b:ad:0a:0d:05:56:
                    48:ce:f4:5c:f7:b1:6f:73:38:af:05:4c:bc:48:5c:
                    50:68:27:92:4c:d9:95:d9:8d:44:e2:dd:33:b5:f0:
                    87:d9:9d:71:fd:a6:c7:40:ce:2d:5f:0f:f0:d4:8f:
                    0c:53:16:a3:ef:52:72:03:59:57:8d:e6:e5:08:98:
                    9a:be:56:c9:fb:02:93:24:1b:78:b0:9e:5c:26:fd:
                    34:35:1e:6b:d4:fd:c9:1f:70:09:7c:59:17:76:c6:
                    a5:bd:6c:a7:8d:21:20:ae:8e:48:71:a7:7f:01:b8:
                    61:43:f9:72:23:5c:0d:11:6f:b8:20:dd:61:2b:78:
                    58:c0:1f:dd:6f:ce:4a:8d:31:9c:b0:c8:58:80:e8:
                    40:68:8e:30:31:19:9a:80:16:d1:5a:1a:b2:6c:4f:
                    f1:2e:ff:12:ea:d6:da:5b:6d:c2:ad:b6:96:3b:7c:
                    23:f7:4a:7a:9c:cd:80:47:7d:78:a2:08:83:35:4e:
                    52:c8:0d:0f:4d:19:78:37:9a:e5:62:53:9a:f0:3b:
                    64:0f:39:c4:59:48:4c:f7:e9:5d:27:ef:05:0f:f0:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:F7:4A:B5:3E:55:56:4F:C4:FD:C2:9D:66:F1:E9:62:DA:3B:68
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033343a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6034::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:e5:23:71:3e:48:f4:ad:c3:8f:a5:d4:4e:8f:19:82:66:
         ee:3d:2f:4e:63:3d:f0:b9:9d:c9:6b:4c:60:2a:a7:df:de:70:
         62:61:7f:4f:40:18:c5:13:b2:8e:f8:23:97:de:f0:b5:ce:97:
         22:b6:10:50:d7:c6:e1:1c:a1:b9:ff:7a:24:5e:a5:b4:da:a1:
         86:e7:1b:f6:3d:a8:1b:35:8e:88:da:b1:4b:64:f7:61:77:07:
         43:a6:d1:55:b1:90:e7:68:cb:8b:33:f0:18:6b:40:12:22:dc:
         83:23:04:26:f7:7a:90:79:d0:59:d6:91:68:d1:eb:78:42:1d:
         06:1a:71:58:a6:ba:1b:96:68:6a:84:16:70:9d:1c:e9:f7:a9:
         14:1f:75:26:38:6b:0a:58:16:80:77:27:3c:ee:f3:cb:84:99:
         ff:54:52:32:5b:a6:fb:5a:ec:cc:3e:32:38:fd:47:d2:a2:e1:
         12:c7:6b:ef:44:82:52:95:45:18:0c:e2:14:89:91:de:57:7b:
         6f:b0:96:c0:ae:2d:32:30:0a:62:98:3a:77:6a:78:ae:ef:b7:
         f4:d0:aa:f7:89:60:65:b8:68:63:f7:41:22:7c:23:62:c8:07:
         b7:a1:0e:dd:6d:6b:84:ae:9e:3b:ae:4f:1b:63:1b:c0:83:31:
         f1:64:e5:fa
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbC53kfyrS9PzSG7zSKuZ4hFQf9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzU0MTdaFw0yNjAyMjIwNzU5MTdaMDMxMTAvBgNV
BAMTKERENjJGNzRBQjUzRTU1NTY0RkM0RkRDMjlENjZGMUU5NjJEQTNCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYfvXGN2Qtg1N74pSD36NItm1
Gfx1+m5jNUieJHMmIPMHloq+PCutCg0FVkjO9Fz3sW9zOK8FTLxIXFBoJ5JM2ZXZ
jUTi3TO18IfZnXH9psdAzi1fD/DUjwxTFqPvUnIDWVeN5uUImJq+Vsn7ApMkG3iw
nlwm/TQ1HmvU/ckfcAl8WRd2xqW9bKeNISCujkhxp38BuGFD+XIjXA0Rb7gg3WEr
eFjAH91vzkqNMZywyFiA6EBojjAxGZqAFtFaGrJsT/Eu/xLq1tpbbcKttpY7fCP3
SnqczYBHfXiiCIM1TlLIDQ9NGXg3muViU5rwO2QPOcRZSEz36V0n7wUP8ERFAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU3WL3SrU+VVZPxP3CnWbx6WLaO2gwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMzM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgNDAN
BgkqhkiG9w0BAQsFAAOCAQEAd3vlI3E+SPStw4+l1E6PGYJm7j0vTmM98LmdyWtM
YCqn395wYmF/T0AYxROyjvgjl97wtc6XIrYQUNfG4Ryhuf96JF6ltNqhhucb9j2o
GzWOiNqxS2T3YXcHQ6bRVbGQ52jLizPwGGtAEiLcgyMEJvd6kHnQWdaRaNHreEId
BhpxWKa6G5ZoaoQWcJ0c6fepFB91JjhrClgWgHcnPO7zy4SZ/1RSMlum+1rszD4y
OP1H0qLhEsdr70SCUpVFGAziFImR3ld7b7CWwK4tMjAKYpg6d2p4ru+39NCq94lg
ZbhoY/dBInwjYsgHt6EO3W1rhK6eO65PG2MbwIMx8WTl+g==
-----END CERTIFICATE-----