Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          yXaLRImTp8Ou2hUmLiUHmV7lN5l+pFmilPmqwzAOBsw=
Subject key identifier:   99:1D:20:D3:8B:2C:C4:71:10:55:C4:60:43:EF:D2:D2:CB:5D:73:03
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       56FC11D09587E793D7F651F84E6768E0801255BC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 07:59:20 +0000
ROA not before:           Sun 23 Feb 2025 07:54:20 +0000
ROA not after:            Sun 22 Feb 2026 07:59:20 +0000
asID:                     16909
IP address blocks:        2a14:7584:6039::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fc:11:d0:95:87:e7:93:d7:f6:51:f8:4e:67:68:e0:80:12:55:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 23 07:54:20 2025 GMT
            Not After : Feb 22 07:59:20 2026 GMT
        Subject: CN=991D20D38B2CC4711055C46043EFD2D2CB5D7303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:83:15:b6:f5:40:01:2b:25:5b:b3:6c:87:
                    a9:17:16:9f:8f:13:70:cd:d5:95:0c:fc:d6:37:f4:
                    e3:b3:4e:9c:85:c7:75:7e:c3:fa:d6:a2:bc:39:7c:
                    ae:d0:31:51:b0:16:24:e2:ab:d6:c4:4e:91:a0:2e:
                    81:3f:3e:39:94:0f:7d:aa:ab:95:91:87:da:f8:5a:
                    82:66:33:9a:05:79:8b:90:9c:bf:93:59:aa:74:e1:
                    b2:b5:c1:d3:10:aa:c8:6a:6d:73:97:d4:39:89:63:
                    4d:f7:cf:58:4b:e2:d5:d8:ac:75:7e:ab:11:99:cf:
                    80:ae:24:7c:f5:46:82:81:2e:3a:a8:e8:60:96:05:
                    08:d6:44:07:a6:b9:e8:4b:5d:11:0a:c4:1a:16:fd:
                    c8:db:a2:5b:35:8f:9f:0a:24:57:0a:1e:33:4b:69:
                    1e:b3:8a:44:c4:21:55:97:fd:d2:8f:f9:d4:c5:3c:
                    5a:20:dc:79:8e:9c:45:e5:78:9d:80:cf:39:24:7e:
                    d3:0f:51:3f:1a:e0:46:c6:02:79:c6:02:3e:3b:44:
                    e1:a5:dd:2a:55:08:17:77:d6:37:46:2f:75:1d:d9:
                    1e:e3:ae:eb:55:53:75:16:57:0b:03:87:52:e2:5c:
                    d7:72:9d:de:73:ea:e4:39:61:91:ca:d0:9d:89:50:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:20:D3:8B:2C:C4:71:10:55:C4:60:43:EF:D2:D2:CB:5D:73:03
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6039::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:c2:6a:84:20:a9:d3:f2:38:1c:77:0a:fa:13:bb:5d:50:
         f6:f3:06:43:33:63:58:b2:51:53:88:d5:0b:e2:5a:c8:fe:d2:
         c8:5c:51:5c:e5:82:2c:76:60:47:cd:38:78:4e:5c:c0:3e:d2:
         d4:32:58:ca:93:98:37:77:ae:c7:d1:cb:6c:07:4e:74:3f:2a:
         2a:d0:79:0a:01:f8:e6:ad:1f:2b:98:04:f9:82:03:40:e1:e2:
         0b:e8:c9:c9:55:24:10:90:ad:72:8f:57:d1:b1:68:4e:6d:e5:
         5d:bd:71:b8:ac:f6:e6:eb:2a:b9:9b:ad:cd:cc:71:4c:8b:c5:
         2f:17:cf:a3:a6:06:ea:fb:d6:4a:87:f4:8b:36:6b:60:ec:a7:
         74:16:3f:ef:b9:8f:d7:44:85:94:40:9d:81:42:79:b5:67:11:
         2c:1c:9b:b9:f4:84:25:87:70:24:81:de:4a:52:5c:4e:9f:8b:
         09:35:8f:37:b7:d4:28:97:f1:98:1d:90:09:00:e8:14:33:0c:
         9d:44:ef:34:f3:b3:e3:99:20:89:b7:d2:c3:9a:fe:c5:49:5b:
         b7:32:fa:86:59:fc:7f:0e:10:4e:40:4b:6a:f7:ab:bd:e2:21:
         f9:ca:89:9d:87:19:fa:a7:65:c5:3c:af:ae:02:66:8e:35:d5:
         f4:27:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----