Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          JsgzYlerfo53owRkc8f71yW4Lgac4iym3qdFpIRah2M=
Subject key identifier:   9F:7D:22:6B:5C:10:D1:C4:B2:1C:FD:4C:46:2F:34:A1:86:97:92:EA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1F75E496021F40427122FAE50BB0546E8FD6FAF6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:48:28 +0000
ROA not before:           Sun 16 Mar 2025 15:43:28 +0000
ROA not after:            Sun 15 Mar 2026 15:48:28 +0000
asID:                     16909
IP address blocks:        2a14:7584:609c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:75:e4:96:02:1f:40:42:71:22:fa:e5:0b:b0:54:6e:8f:d6:fa:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:43:28 2025 GMT
            Not After : Mar 15 15:48:28 2026 GMT
        Subject: CN=9F7D226B5C10D1C4B21CFD4C462F34A1869792EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:b0:8c:ea:db:ed:3a:30:14:d0:11:72:06:
                    b8:7f:e2:6f:54:07:82:5b:42:fe:49:79:c8:0f:2a:
                    ae:d0:b2:8f:5b:6e:db:32:f6:a0:96:fb:39:c1:aa:
                    5b:c9:d1:d9:73:65:28:bf:48:b2:01:fe:71:a8:1f:
                    ee:fb:1b:25:9e:84:29:8b:60:93:fa:13:e4:74:2c:
                    ee:0b:bd:c8:9e:ba:61:df:54:68:9f:e9:1b:d0:97:
                    1e:09:cd:5d:4f:03:a4:cb:9f:3c:cd:4f:f7:85:1a:
                    d9:b8:3f:49:1d:ef:b0:48:42:77:2c:02:8c:5b:4d:
                    f6:7a:e5:ee:f0:82:09:11:85:94:4c:d6:c8:9a:89:
                    17:00:c4:96:cf:33:f0:27:64:dd:d9:42:90:1a:cf:
                    1f:08:87:4c:2d:c0:72:0f:1c:8d:06:9b:b4:8e:2a:
                    72:ad:a8:ce:2f:3b:e5:4a:7b:cc:42:90:a7:70:bd:
                    27:3a:be:d9:5c:62:66:3f:a7:43:9d:34:94:93:8a:
                    61:f2:d8:49:fe:27:73:bf:76:af:7a:db:a4:1c:05:
                    14:d9:59:a8:ef:d6:cd:c7:67:f3:ac:e8:14:74:93:
                    e5:4b:af:2f:dc:3a:1d:2e:f1:6d:0a:9b:50:38:83:
                    d4:76:5b:05:f0:18:71:c7:4a:0f:0d:5c:a8:a0:05:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7D:22:6B:5C:10:D1:C4:B2:1C:FD:4C:46:2F:34:A1:86:97:92:EA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:609c::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:e3:e6:d8:85:f3:4e:e6:01:73:8c:45:41:2b:c0:cf:11:
         da:2b:d1:31:66:ea:25:1e:0b:e5:d0:51:f7:3b:11:be:50:23:
         c4:76:d8:28:40:cd:30:cb:1f:14:28:f5:84:b5:c4:50:15:96:
         ef:3a:42:f9:f8:65:13:a6:e3:d6:18:11:74:a8:a6:08:86:dc:
         ac:09:da:55:84:05:b3:dd:5f:7c:16:fd:5f:74:71:a8:69:e7:
         74:34:dc:28:1f:18:8b:ea:0d:36:54:a4:91:a2:67:8c:6e:be:
         af:72:62:02:db:fc:8e:1d:4c:8d:cc:f0:6d:3d:43:f4:ad:41:
         f4:d1:25:23:eb:ad:a6:a3:69:55:be:57:fa:75:49:49:59:2b:
         c0:ee:3e:9d:c3:61:06:e5:d5:b4:00:5e:a2:af:06:1b:34:b5:
         be:f6:e0:7d:04:92:89:4b:71:f4:18:6c:e7:0e:6b:bc:26:b6:
         ac:f9:64:fc:94:a8:ff:8e:61:9f:fa:23:e3:54:17:f1:6c:9a:
         56:a9:da:29:05:3c:05:bf:91:f3:ab:57:c4:cf:8b:19:ed:12:
         ae:b9:09:32:3c:41:05:c1:64:de:dd:2d:d1:13:c8:59:fe:5e:
         28:e7:3f:01:0f:b9:53:58:ee:a4:b4:ee:a1:5a:c1:8b:eb:de:
         a5:f5:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----