Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363034323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          tWk9Bcv6f7e/CTexfkjK6FOx6ZcqZpQPmJEcHnswk8U=
Subject key identifier:   46:AF:AC:3F:FA:07:64:50:6E:DD:7D:86:41:AA:04:8A:64:56:D0:15
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       59A7BEE01A3B32F300C02B01B742BB3A30F1BA04
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 24 Feb 2025 13:30:34 +0000
ROA not before:           Mon 24 Feb 2025 13:25:34 +0000
ROA not after:            Mon 23 Feb 2026 13:30:34 +0000
asID:                     16909
IP address blocks:        2a14:7584:6042::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a7:be:e0:1a:3b:32:f3:00:c0:2b:01:b7:42:bb:3a:30:f1:ba:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb 24 13:25:34 2025 GMT
            Not After : Feb 23 13:30:34 2026 GMT
        Subject: CN=46AFAC3FFA0764506EDD7D8641AA048A6456D015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:36:da:65:a7:34:a8:1e:e2:65:e1:14:98:
                    46:b5:56:39:c9:58:2c:cc:6c:97:6b:ea:f7:41:36:
                    2d:73:30:5b:a1:a0:cd:2e:eb:77:a7:d4:20:9f:17:
                    a7:63:11:85:20:16:2e:40:9e:fa:97:b4:bc:88:58:
                    ba:a3:d3:07:73:31:ba:51:9f:ad:a9:5c:34:8f:4f:
                    8a:4c:16:0a:72:d8:2d:5a:22:a7:db:8f:8b:ff:94:
                    56:d6:05:6f:e7:1d:e1:0d:13:8a:ce:0e:c9:3c:3a:
                    a8:17:d0:ff:7e:ec:77:85:a8:bd:95:59:89:7a:2b:
                    6a:0c:40:3a:14:23:f3:59:4c:67:9c:75:44:75:b6:
                    57:65:95:a9:30:48:95:eb:f8:9a:a1:0d:00:97:f8:
                    e4:aa:fe:a3:2e:25:c4:28:5e:7a:e0:18:5f:33:55:
                    c7:18:c6:4c:8e:57:ca:87:64:4c:68:53:a8:82:91:
                    ed:59:77:71:50:f5:88:8c:bc:91:17:7b:85:d8:b3:
                    27:20:6e:dd:18:67:be:2c:71:75:cf:aa:59:93:a1:
                    47:17:7c:54:02:18:86:ab:70:31:bf:75:ca:92:ba:
                    0e:69:c6:0b:22:43:75:4e:5b:4b:0f:d6:8c:28:97:
                    4b:9a:bf:e5:31:2d:0c:45:a5:eb:e6:11:6f:b8:66:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AF:AC:3F:FA:07:64:50:6E:DD:7D:86:41:AA:04:8A:64:56:D0:15
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6042::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:c5:c7:5e:bf:06:75:61:fb:ae:ea:27:59:81:3b:74:0d:
         80:a7:f6:03:be:31:a7:63:99:f9:90:14:4d:5a:10:88:f0:f5:
         e0:7c:0f:fa:22:f9:38:63:e1:43:7c:dd:b5:1e:d7:f5:39:79:
         c4:be:84:00:70:18:30:ac:cf:77:b9:04:3a:a3:cc:80:66:f4:
         9c:38:f9:09:27:94:7d:01:ec:4d:35:93:0a:13:ad:5b:a4:84:
         bc:79:82:e5:ca:38:72:6b:31:97:6a:7c:ab:d8:5d:28:10:b9:
         10:5a:c3:ad:bd:8c:da:36:2c:ff:ab:1c:16:56:7c:0d:e5:ed:
         61:5a:9d:6a:a3:f5:48:7f:43:98:1a:92:46:78:50:74:8d:48:
         54:ed:86:81:69:1f:ea:e3:24:70:ea:c5:ed:90:3b:de:42:46:
         7f:bc:da:69:23:59:58:08:7c:0a:78:87:c4:25:53:76:3e:b5:
         cc:18:eb:08:63:87:8f:7d:d3:87:27:64:30:76:9b:9a:b2:da:
         9c:ac:04:4c:9f:36:a2:aa:67:a8:a7:04:ed:be:43:66:47:a0:
         df:97:2b:af:b8:c6:02:96:ba:1b:24:40:64:8d:14:4c:36:16:
         db:d6:32:3e:db:a0:bb:01:ff:90:c5:33:bd:7b:98:62:fe:06:
         58:b1:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----