Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363033633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          utOIDmg9bsdmjZrwuCzJh0hHV/qoLzOF8DtxGJasgts=
Subject key identifier:   AF:C1:90:34:06:02:99:BC:0C:10:E2:67:27:BA:62:1E:41:D3:A7:16
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7B098D7C026FAF32FEA5BC553651D69B65818CA3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:31 +0000
ROA not before:           Mon 24 Feb 2025 13:25:31 +0000
ROA not after:            Mon 23 Feb 2026 13:30:31 +0000
asID:                     16909
IP address blocks:        2a14:7584:603c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:09:8d:7c:02:6f:af:32:fe:a5:bc:55:36:51:d6:9b:65:81:8c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:31 2025 GMT
            Not After : Feb 23 13:30:31 2026 GMT
        Subject: CN=AFC19034060299BC0C10E26727BA621E41D3A716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:ff:ad:3f:27:c7:ce:aa:ba:e0:c2:dd:52:
                    a1:98:08:1a:3f:9c:2c:c9:1f:30:4f:4d:f2:97:ad:
                    6c:6f:93:0e:a7:2e:49:6b:e7:aa:04:61:ad:32:97:
                    1c:d0:3c:53:d6:e8:6f:18:ce:81:83:fa:47:25:98:
                    1f:ca:e8:31:a1:e7:16:b8:fa:e0:00:7f:09:bc:db:
                    e4:bf:2f:65:a0:cb:35:30:ef:79:af:e2:f3:0f:9d:
                    8c:11:d8:26:c9:c8:2f:ae:f5:92:49:61:b3:13:4b:
                    41:b1:bf:9f:c6:ce:3b:30:40:e7:ce:03:99:b7:3b:
                    6a:bb:a6:3a:6b:01:fa:4a:90:d6:4d:8e:89:7d:43:
                    c2:0e:d0:30:dd:60:e2:4d:ae:fe:8b:8f:ca:14:c2:
                    9b:b1:79:4f:33:25:54:d1:66:d8:b3:1f:46:49:18:
                    6b:b7:98:bc:41:51:a9:6a:e3:d3:51:83:08:d4:bb:
                    e5:07:d2:81:d3:22:11:2c:58:41:a0:24:4d:95:84:
                    6a:ed:4d:e3:b1:58:58:01:61:cf:63:38:d6:5d:cb:
                    5d:17:94:06:af:17:82:e1:67:44:b4:91:dd:74:7d:
                    94:14:09:51:70:bd:1e:eb:95:fe:aa:4a:8e:9e:e9:
                    9c:2d:34:9c:83:cf:25:b2:63:af:ff:4d:7d:5f:bb:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:90:34:06:02:99:BC:0C:10:E2:67:27:BA:62:1E:41:D3:A7:16
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363033633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:603c::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:39:d3:b4:cb:17:34:f7:25:ef:4d:bc:3e:df:7c:df:bb:
         e6:63:ba:59:99:c3:6f:71:cd:73:b0:94:03:8c:3d:65:6a:63:
         47:24:35:cb:86:9c:ba:14:40:7a:c6:c7:1d:fe:62:17:f2:ca:
         da:92:b6:c5:85:a1:82:76:35:54:87:b4:52:fb:72:6d:2e:bb:
         01:7e:11:33:32:66:1c:a7:e5:43:2f:a3:5e:1c:13:b0:36:23:
         be:04:0b:47:df:39:6d:2c:9d:76:1a:79:99:f5:27:aa:ce:75:
         a6:59:24:49:66:ae:c0:79:22:71:4d:61:2b:6f:a5:5b:61:60:
         af:bc:04:32:2f:65:6a:54:c5:cf:04:1e:03:92:a3:f4:6b:ba:
         e5:02:57:ff:1a:87:8a:51:60:92:13:63:ca:a8:a2:ee:ce:ec:
         ee:56:3a:41:3e:37:b7:7c:b4:c0:92:cc:f2:f0:f9:df:30:05:
         ef:c2:c6:cf:4e:56:a7:42:39:c7:16:94:b1:9d:68:74:80:00:
         5b:3f:5a:4d:9b:6f:a5:0b:cb:0e:d8:d3:78:7a:ed:f7:72:af:
         d3:a2:34:0b:49:2f:da:d6:19:45:11:79:03:76:e8:7c:22:d2:
         c3:56:cf:85:f2:c0:ce:01:e9:3c:c8:17:42:f3:9e:db:19:d3:
         1c:65:ae:ea
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUewmNfAJvrzL+pbxVNlHWm2WBjKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjQxMzI1MzFaFw0yNjAyMjMxMzMwMzFaMDMxMTAvBgNV
BAMTKEFGQzE5MDM0MDYwMjk5QkMwQzEwRTI2NzI3QkE2MjFFNDFEM0E3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4P/+tPyfHzqq64MLdUqGYCBo/
nCzJHzBPTfKXrWxvkw6nLklr56oEYa0ylxzQPFPW6G8YzoGD+kclmB/K6DGh5xa4
+uAAfwm82+S/L2WgyzUw73mv4vMPnYwR2CbJyC+u9ZJJYbMTS0Gxv5/GzjswQOfO
A5m3O2q7pjprAfpKkNZNjol9Q8IO0DDdYOJNrv6Lj8oUwpuxeU8zJVTRZtizH0ZJ
GGu3mLxBUalq49NRgwjUu+UH0oHTIhEsWEGgJE2VhGrtTeOxWFgBYc9jONZdy10X
lAavF4LhZ0S0kd10fZQUCVFwvR7rlf6qSo6e6ZwtNJyDzyWyY6//TX1fu5V9AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUr8GQNAYCmbwMEOJnJ7piHkHTpxYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgPDAN
BgkqhkiG9w0BAQsFAAOCAQEAREo507TLFzT3Je9NvD7ffN+75mO6WZnDb3HNc7CU
A4w9ZWpjRyQ1y4acuhRAesbHHf5iF/LK2pK2xYWhgnY1VIe0UvtybS67AX4RMzJm
HKflQy+jXhwTsDYjvgQLR985bSyddhp5mfUnqs51plkkSWauwHkicU1hK2+lW2Fg
r7wEMi9lalTFzwQeA5Kj9Gu65QJX/xqHilFgkhNjyqii7s7s7lY6QT43t3y0wJLM
8vD53zAF78LGz05Wp0I5xxaUsZ1odIAAWz9aTZtvpQvLDtjTeHrt93Kv06I0C0kv
2tYZRRF5A3bofCLSw1bPhfLAzgHpPMgXQvOe2xnTHGWu6g==
-----END CERTIFICATE-----