Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039663a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363039663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          8/4yL2dQRQ4vr1hh3IbU/5JK87RBuWy1JACPiuabo8I=
Subject key identifier:   8B:02:51:93:CD:8C:D1:12:9F:C7:FE:DF:69:31:54:B7:0B:EC:0F:88
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7B67F37D0E6C53C466E5652BF6CC585420882106
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:30 +0000
ROA not before:           Sun 16 Mar 2025 15:44:30 +0000
ROA not after:            Sun 15 Mar 2026 15:49:30 +0000
asID:                     16909
IP address blocks:        2a14:7584:609f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:67:f3:7d:0e:6c:53:c4:66:e5:65:2b:f6:cc:58:54:20:88:21:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:30 2025 GMT
            Not After : Mar 15 15:49:30 2026 GMT
        Subject: CN=8B025193CD8CD1129FC7FEDF693154B70BEC0F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:20:7a:3c:12:25:a0:71:39:25:b0:d2:4a:
                    62:f3:e7:18:78:24:ca:42:4c:2c:8c:c5:6f:d4:03:
                    55:14:89:ec:5f:da:62:da:97:d2:74:c9:a9:03:4e:
                    59:20:6a:a6:03:e0:d4:03:4d:ad:58:80:cc:58:de:
                    f6:78:c3:5b:1d:0d:21:24:ee:58:96:95:70:cf:61:
                    c5:ba:6a:84:23:2f:18:47:08:75:68:68:55:17:93:
                    c0:56:f7:ed:50:ea:a7:61:02:5d:1c:4c:c3:85:1d:
                    16:ac:79:06:42:0b:b5:f1:ea:a5:70:08:c3:d1:24:
                    9c:89:ee:d8:23:c7:66:48:de:93:ac:a2:d3:f3:a6:
                    35:a3:ff:78:69:a4:de:00:66:da:a4:f7:17:38:e6:
                    9e:31:41:c5:34:17:b3:15:ab:38:d5:ea:6c:e0:17:
                    e1:ed:56:f8:8f:0a:41:08:57:13:a4:64:59:1f:5c:
                    07:8d:db:c6:43:13:25:62:15:33:80:55:29:2b:fa:
                    99:5e:60:57:fd:d7:9a:56:3b:46:9f:87:45:55:d1:
                    43:2f:b7:e5:1a:ef:1f:d3:d5:08:21:dd:c4:f8:d0:
                    75:bc:37:6d:da:fd:d7:02:9f:7f:85:58:cf:22:ee:
                    de:a5:a0:da:f7:1e:f2:46:53:96:80:f8:87:ae:c7:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:51:93:CD:8C:D1:12:9F:C7:FE:DF:69:31:54:B7:0B:EC:0F:88
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:609f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:5c:f1:6e:db:79:a3:2b:79:2f:dd:47:35:72:f9:de:fb:cc:
         0d:a2:7c:56:94:d4:ca:cb:2a:b7:70:17:a8:f0:e8:76:f2:a9:
         ee:ad:b9:86:03:5b:b1:ea:55:e3:ae:d7:5b:39:ef:2d:31:98:
         ff:f4:14:2b:83:65:70:65:16:6a:dc:cc:cf:7c:97:d5:0e:42:
         0e:5c:e0:ec:fe:86:8e:3e:88:20:93:4c:df:94:4e:28:1f:d8:
         99:f9:9c:6d:df:1d:f6:8d:80:38:5d:99:03:ee:a5:6a:e2:0a:
         81:7c:fd:31:e2:a4:03:cc:7b:2e:2b:2a:c2:ec:e4:43:b8:a4:
         db:17:87:de:ad:aa:96:f2:68:2d:7e:47:36:a5:2e:da:6c:b9:
         ff:82:e7:f5:07:c4:7a:02:06:9b:c4:a1:40:a8:a4:be:1f:5f:
         07:b0:26:e6:25:59:09:84:0e:8e:47:7f:63:99:25:e6:78:35:
         c4:2e:e0:ef:3f:ee:d8:5e:80:d6:fa:97:6d:37:e4:b7:0f:e3:
         f6:1e:6d:16:35:38:4a:64:7d:96:1f:5a:62:cf:0a:8b:e3:12:
         16:4c:cf:ba:53:e2:8b:19:1e:3b:9c:67:36:3b:45:9d:8a:17:
         8c:71:ec:46:af:64:be:cf:08:42:2c:c3:03:30:6f:9d:0e:62:
         3b:42:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----