Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036653a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363036653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          7CA/2aej5f+RG9xogJ7VyuUwhYyKzwzfVboY8iWm6u0=
Subject key identifier:   F5:FB:4C:1A:84:9E:C1:72:5A:15:18:DF:8D:1F:26:2B:66:EF:15:A5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       01158B2CF71F709DEC60EDB4D480CDD0132112CD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036653a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Mon 10 Mar 2025 11:53:34 +0000
ROA not before:           Mon 10 Mar 2025 11:48:34 +0000
ROA not after:            Mon 09 Mar 2026 11:53:34 +0000
asID:                     401507
IP address blocks:        2a14:7584:606e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:15:8b:2c:f7:1f:70:9d:ec:60:ed:b4:d4:80:cd:d0:13:21:12:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 10 11:48:34 2025 GMT
            Not After : Mar  9 11:53:34 2026 GMT
        Subject: CN=F5FB4C1A849EC1725A1518DF8D1F262B66EF15A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:77:41:98:a6:6b:40:f3:c4:69:3e:d6:8e:
                    de:6c:8e:81:4d:c5:fc:ae:52:db:2c:13:80:8d:80:
                    9c:35:79:ea:42:18:fa:7f:7e:3f:e1:f6:b1:dd:ea:
                    8d:34:3c:db:66:57:df:5d:ab:b7:0e:3d:02:8a:d6:
                    0c:11:ac:1b:16:ac:e0:a4:13:a7:02:85:2e:54:8a:
                    2c:d6:ed:1f:48:06:32:50:55:f3:a5:60:82:c6:a4:
                    cf:e3:a0:0a:8e:fd:b8:b6:74:fd:cc:76:6a:72:bb:
                    11:b8:95:ea:cd:fe:8a:64:59:c8:0a:6f:ba:76:9e:
                    01:7d:33:ab:9b:e5:e9:d3:f6:bf:22:97:d7:c2:21:
                    73:65:ac:83:1f:fe:f0:b0:d7:5f:7a:22:5b:d0:ce:
                    86:db:92:c8:a1:6f:94:98:a4:8e:cf:58:de:d6:87:
                    6e:27:2c:cc:7f:da:a8:0e:af:10:ca:80:4e:5d:0d:
                    f7:8f:c1:ef:7b:54:85:fd:1d:45:17:e1:4b:c7:0a:
                    64:2a:ad:8e:d2:02:07:75:82:c6:3f:80:11:36:69:
                    47:54:f4:c7:f3:cc:a9:f5:c5:e8:7f:fe:7e:d6:56:
                    82:aa:fa:28:52:e4:03:ce:d3:f2:0e:b8:12:66:be:
                    71:2e:9a:12:fa:9a:b7:0f:3b:25:53:de:81:6d:2f:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FB:4C:1A:84:9E:C1:72:5A:15:18:DF:8D:1F:26:2B:66:EF:15:A5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036653a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:606e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:1b:74:e7:03:68:fb:e2:41:f7:61:e7:3c:1b:02:c1:2a:
         99:7e:2c:61:4c:f5:de:cb:db:42:a2:83:83:17:3e:e0:57:90:
         f2:78:ec:8e:72:1c:b8:c6:43:18:bf:fe:34:1a:6a:e9:b0:17:
         1a:70:51:69:42:80:47:fc:70:ec:fd:55:c2:f3:52:48:b6:ce:
         1f:50:a8:64:b5:73:22:41:65:6d:da:86:8a:ce:78:07:a9:12:
         5d:04:2c:06:b4:2a:9e:da:26:43:4c:48:8d:97:51:46:1c:83:
         46:f1:68:8f:2f:8a:f2:bc:1f:25:ff:30:0d:dc:40:1c:89:6b:
         09:d1:e9:39:44:36:de:69:93:35:93:25:32:50:66:27:f8:f5:
         4a:61:63:a4:6f:0c:ea:32:2a:3e:5b:c2:af:1e:10:a1:30:c2:
         70:ff:e1:60:e2:84:14:e6:98:8f:95:66:a4:da:8e:cf:8a:28:
         24:ca:b4:31:9d:cd:a5:92:ce:3a:21:28:af:d7:28:a9:17:55:
         64:cd:ba:93:9d:57:2c:1c:6e:8c:4c:3d:f7:1a:43:f5:e7:e4:
         a8:9f:61:ef:0b:a8:87:31:28:64:76:cd:99:ea:55:17:8d:d4:
         2f:a3:40:17:c8:ed:ce:8e:4c:35:dd:89:c7:52:e5:f1:84:1d:
         0c:09:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----