Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037383a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363037383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          lH0RP6rz/5y2gBa1qFtgxdsxOmTAZiNw184cPZRP3ec=
Subject key identifier:   D2:AE:5F:6A:E4:F4:EE:96:01:F8:CD:F3:72:D2:AF:05:C3:BE:26:0E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       67F0AD188146A6975C148346686AB665324CE0DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037383a3a2f34382d3438203d3e203136393039.roa
Signing time:             Mon 10 Mar 2025 11:54:02 +0000
ROA not before:           Mon 10 Mar 2025 11:49:02 +0000
ROA not after:            Mon 09 Mar 2026 11:54:02 +0000
asID:                     16909
IP address blocks:        2a14:7584:6078::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f0:ad:18:81:46:a6:97:5c:14:83:46:68:6a:b6:65:32:4c:e0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 10 11:49:02 2025 GMT
            Not After : Mar  9 11:54:02 2026 GMT
        Subject: CN=D2AE5F6AE4F4EE9601F8CDF372D2AF05C3BE260E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:00:dd:80:06:c1:b4:a9:b4:31:5f:ad:9b:
                    9c:8d:04:8d:06:6a:74:c1:a3:98:3b:91:1a:d3:b5:
                    d1:6a:7f:b5:68:03:47:55:d6:e8:18:ef:68:5b:f9:
                    d2:c3:86:81:06:4c:2d:4a:e3:06:46:14:f6:69:be:
                    36:ec:3c:dd:8e:42:86:7c:21:84:43:c2:2a:c5:9e:
                    04:34:ab:f1:ef:47:ae:da:7e:a4:94:a5:51:cb:4d:
                    6f:c3:04:11:fd:f9:69:2e:6d:44:75:1e:b7:65:64:
                    b6:d7:64:fd:22:5d:bb:66:ed:bd:f6:65:f4:0e:ba:
                    af:bc:e9:3a:a5:91:2c:18:70:ee:af:79:12:81:c5:
                    8f:48:3e:47:d8:88:b7:ae:9c:14:95:ec:3b:52:fc:
                    cd:f4:da:b2:9f:f3:fc:0b:d6:c3:da:3b:a1:eb:18:
                    f6:d2:8b:da:47:31:2f:c1:65:7f:4e:c6:53:9a:68:
                    91:a5:57:be:8a:85:e2:19:d4:5b:1e:3d:d0:40:f9:
                    6c:9b:b5:b3:c1:02:59:19:19:dc:50:66:b4:3d:a6:
                    92:04:df:93:5e:fe:84:13:c3:ea:a0:34:a3:7c:65:
                    93:0b:17:54:d3:1f:2f:54:f6:ba:76:17:f8:3b:f7:
                    e2:df:40:71:cc:29:33:fd:e1:b8:c1:9f:94:a3:cf:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:5F:6A:E4:F4:EE:96:01:F8:CD:F3:72:D2:AF:05:C3:BE:26:0E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037383a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6078::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:89:d0:db:43:6c:4b:0e:b7:f7:94:bc:12:56:ad:66:9a:
         32:8e:47:1b:94:5b:29:ce:17:9e:c6:3c:d2:56:a2:28:e4:c6:
         a3:de:49:d9:3b:34:cb:b7:8c:d8:e5:df:63:9b:de:68:64:ad:
         d5:87:f8:ef:bb:0e:37:d8:a6:f5:4e:4e:32:19:be:51:3c:8e:
         35:ab:18:c2:e5:e3:79:44:5f:c4:e4:56:a4:3d:7f:28:d0:82:
         0e:46:95:3f:ad:d3:d2:c0:7b:26:13:b4:e5:90:6d:eb:23:62:
         f9:c8:ee:c4:d5:7d:70:26:9b:b7:18:05:54:9a:bb:33:2a:58:
         7e:d9:67:7e:4d:fc:62:e3:6c:bd:c9:22:60:b1:eb:0e:0f:08:
         0a:dc:35:fc:e2:88:84:c1:b8:44:b5:56:67:af:c4:4e:0d:c6:
         c0:37:d8:13:e1:56:1a:cd:bd:17:82:67:f6:da:80:22:a4:ca:
         12:d7:87:13:47:7c:5c:ec:40:3e:c3:15:7d:e7:bd:37:52:f1:
         36:6d:44:01:bd:28:dc:42:ec:66:e2:4e:9c:3c:bc:69:65:6b:
         f8:e6:e3:c3:2a:b7:8a:ef:a6:12:8f:c1:57:a1:b0:48:ac:18:
         a8:76:82:90:e0:2e:16:7c:bb:7f:ce:6a:0f:f4:b5:42:fe:15:
         2e:4f:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----