Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          7wSr8ku6Oia4WiYVCoQkhPUHqZ5sIMwRRQqEfacBWSc=
Subject key identifier:   86:DD:C3:DD:3F:CB:C8:5F:49:5F:3D:48:52:84:1E:9F:E5:28:F5:B1
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       61D9C8C0B6DCD18094E6D20C1A7615A615EB1010
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:26 +0000
ROA not before:           Sun 16 Mar 2025 15:43:26 +0000
ROA not after:            Sun 15 Mar 2026 15:48:26 +0000
asID:                     16909
IP address blocks:        2a14:7584:6099::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:c8:c0:b6:dc:d1:80:94:e6:d2:0c:1a:76:15:a6:15:eb:10:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:26 2025 GMT
            Not After : Mar 15 15:48:26 2026 GMT
        Subject: CN=86DDC3DD3FCBC85F495F3D4852841E9FE528F5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:4a:65:de:a2:c0:d0:be:b8:38:4d:be:62:
                    c3:13:9f:08:dc:ff:10:58:52:14:af:09:e1:1b:81:
                    cd:6e:54:5a:df:81:c3:f1:7b:0b:79:cb:63:86:64:
                    a8:33:f0:80:85:b4:01:ad:d5:69:71:b6:9d:02:8a:
                    f8:e9:8f:3b:21:53:80:d3:bf:f3:4c:15:e4:c4:f8:
                    6e:28:cc:e2:fb:4c:3a:dc:fd:ef:21:0b:9e:bf:a4:
                    a8:c5:62:cf:91:ad:64:3f:1d:20:c5:e6:b5:c1:29:
                    37:6d:1f:d0:45:fb:28:2d:f4:3d:89:e2:a0:a2:6c:
                    66:48:b6:3b:c7:73:06:39:a0:3d:e5:69:5a:44:5c:
                    d6:b0:a0:93:38:75:3a:cb:64:23:bc:66:44:5d:76:
                    18:04:8c:16:53:45:b7:59:28:52:72:c2:81:16:6b:
                    05:18:2a:9b:a4:7a:24:63:1a:0a:6e:7a:87:8b:4b:
                    1f:10:d1:02:12:43:ca:d9:cc:1d:e2:c3:2b:4c:80:
                    41:7b:5b:86:da:83:f0:bc:47:c3:e2:40:ff:83:43:
                    28:a9:26:1c:a9:0e:9f:9f:10:14:6b:c8:ea:0a:01:
                    13:25:01:e0:59:f8:57:40:72:dd:ce:53:ff:da:61:
                    05:61:b4:0d:e8:1e:6c:de:2c:bf:72:48:6b:f1:86:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:C3:DD:3F:CB:C8:5F:49:5F:3D:48:52:84:1E:9F:E5:28:F5:B1
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6099::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:fd:9c:4b:ea:35:83:8a:46:69:94:b8:d0:81:55:89:af:
         e8:fc:30:92:39:60:aa:e0:bd:68:79:f0:0f:7b:b4:f4:ed:95:
         ff:46:cf:93:8b:e6:8f:e6:e2:da:59:e2:c8:19:06:2b:63:7c:
         3c:c9:83:86:75:6c:33:b8:ad:fd:51:39:6b:a2:83:f0:bc:b6:
         54:23:61:db:bc:5e:ac:b5:a4:3b:e2:e8:2b:92:c4:d4:ec:c5:
         54:b1:36:04:22:8e:87:92:b2:d8:d8:b6:96:31:3a:7d:bf:7d:
         5d:8e:77:5b:76:3e:d2:22:f8:a1:df:f5:d8:a9:18:5f:e7:dc:
         dd:19:c9:d8:63:13:52:4e:75:b9:ae:8a:94:b3:da:e9:a8:72:
         e2:06:8e:20:60:c8:23:69:3d:4b:67:38:e3:11:0e:19:e0:cf:
         1c:dc:ae:3a:f9:89:a8:c8:30:76:6e:0e:39:bc:9a:4f:a2:96:
         cd:00:bc:a7:60:5e:2d:f6:52:23:09:8c:b8:13:a4:8e:a5:fd:
         00:f6:32:fb:65:4c:7f:c8:86:af:93:e4:2b:c0:16:3b:62:73:
         70:f1:ff:25:a3:c6:48:b7:a5:f2:f6:ae:90:55:25:0c:f0:a6:
         98:47:32:b1:53:9d:4a:15:09:a5:42:59:19:a0:5a:43:3f:7a:
         1c:4d:54:c3
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYdnIwLbc0YCU5tIMGnYVphXrEBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQzMjZaFw0yNjAzMTUxNTQ4MjZaMDMxMTAvBgNV
BAMTKDg2RERDM0REM0ZDQkM4NUY0OTVGM0Q0ODUyODQxRTlGRTUyOEY1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstEpl3qLA0L64OE2+YsMTnwjc
/xBYUhSvCeEbgc1uVFrfgcPxewt5y2OGZKgz8ICFtAGt1Wlxtp0CivjpjzshU4DT
v/NMFeTE+G4ozOL7TDrc/e8hC56/pKjFYs+RrWQ/HSDF5rXBKTdtH9BF+ygt9D2J
4qCibGZItjvHcwY5oD3laVpEXNawoJM4dTrLZCO8ZkRddhgEjBZTRbdZKFJywoEW
awUYKpukeiRjGgpueoeLSx8Q0QISQ8rZzB3iwytMgEF7W4bag/C8R8PiQP+DQyip
JhypDp+fEBRryOoKARMlAeBZ+FdAct3OU//aYQVhtA3oHmzeLL9ySGvxhijnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUht3D3T/LyF9JXz1IUoQen+Uo9bEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzOTM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgmTAN
BgkqhkiG9w0BAQsFAAOCAQEAoWb9nEvqNYOKRmmUuNCBVYmv6PwwkjlgquC9aHnw
D3u09O2V/0bPk4vmj+bi2lniyBkGK2N8PMmDhnVsM7it/VE5a6KD8Ly2VCNh27xe
rLWkO+LoK5LE1OzFVLE2BCKOh5Ky2Ni2ljE6fb99XY53W3Y+0iL4od/12KkYX+fc
3RnJ2GMTUk51ua6KlLPa6ahy4gaOIGDII2k9S2c44xEOGeDPHNyuOvmJqMgwdm4O
ObyaT6KWzQC8p2BeLfZSIwmMuBOkjqX9APYy+2VMf8iGr5PkK8AWO2JzcPH/JaPG
SLel8vaukFUlDPCmmEcysVOdShUJpUJZGaBaQz96HE1Uww==
-----END CERTIFICATE-----