Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061323a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363061323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          u44Iuq6WglBXoMpcyQR75i9Loi3FFn4Em/fm28UsJZg=
Subject key identifier:   25:FB:63:3D:42:A9:9F:A7:4D:97:9A:9B:2A:22:E3:2B:98:2E:96:97
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       7B185381EF6C8305B89330B5BDAE1754922D4EDF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:49:32 +0000
ROA not before:           Sun 16 Mar 2025 15:44:32 +0000
ROA not after:            Sun 15 Mar 2026 15:49:32 +0000
asID:                     16909
IP address blocks:        2a14:7584:60a2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:18:53:81:ef:6c:83:05:b8:93:30:b5:bd:ae:17:54:92:2d:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:44:32 2025 GMT
            Not After : Mar 15 15:49:32 2026 GMT
        Subject: CN=25FB633D42A99FA74D979A9B2A22E32B982E9697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:7d:02:d0:1f:4a:c8:23:29:27:c9:5a:77:
                    91:97:cf:96:62:cf:79:52:e9:d9:b9:34:38:c6:ce:
                    6f:66:9f:d8:02:c1:15:09:e0:ad:ef:b4:60:28:1d:
                    99:b4:5b:3a:6d:40:4c:b3:58:f2:f1:99:e3:af:b6:
                    47:5e:68:a2:38:51:a8:bc:3b:9c:12:80:14:dc:8f:
                    76:9d:ea:6f:01:51:3b:8c:3a:40:80:2d:fe:54:19:
                    39:93:b4:e7:80:c6:3d:99:9c:2b:8f:3e:ce:59:43:
                    e6:47:6b:ee:19:3f:15:b0:c7:a3:6c:d3:0a:a3:fc:
                    54:01:0f:51:6a:c1:c5:d5:53:45:ce:07:89:63:2e:
                    28:6c:22:65:29:47:d3:65:a1:48:88:c0:f0:ef:58:
                    ce:78:8f:0d:1a:db:6e:50:59:b6:4c:f7:d3:85:60:
                    36:ce:17:54:7f:dd:1f:0a:07:6f:64:fa:5f:d7:6a:
                    75:77:7b:44:3e:57:f0:d4:8c:5d:26:c0:25:f3:96:
                    9d:d0:0f:d3:c2:22:3b:ef:0d:76:ee:c6:3b:99:c8:
                    02:5b:0e:c9:84:cb:3e:df:f7:8c:58:00:49:a2:13:
                    2f:ea:73:96:e2:71:b4:7f:27:d8:61:d6:85:3d:93:
                    2b:2c:d7:1f:5d:45:5a:a2:67:29:ab:39:b3:d0:19:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:63:3D:42:A9:9F:A7:4D:97:9A:9B:2A:22:E3:2B:98:2E:96:97
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:49:a6:49:40:2f:ad:f5:c0:32:fa:00:1e:32:17:5b:9f:2a:
         e1:cd:b6:60:02:4c:20:ca:50:45:e3:41:c2:bc:4b:15:cc:3a:
         77:f2:07:46:2a:f5:03:cb:ad:8a:c4:8a:ab:92:2d:e6:19:34:
         10:c5:dd:eb:94:6d:dd:0e:97:23:f9:10:7f:d1:1c:d7:a5:74:
         95:7f:a0:46:f4:d8:5c:b7:42:ed:62:95:48:62:a9:c6:c3:b5:
         56:07:b1:27:af:ad:1c:fb:8a:f8:b4:f8:49:d5:e5:46:19:59:
         38:95:ae:f2:cb:c7:27:c7:3f:9d:ca:33:8c:2d:dc:2e:f6:6d:
         84:2a:99:6d:cd:27:da:73:03:84:1e:75:a2:67:85:07:5a:18:
         73:83:04:05:ef:23:eb:2d:7c:33:8a:a3:ee:b5:31:05:03:40:
         da:5c:ee:6d:b8:5c:02:74:49:6a:34:cd:29:34:35:71:51:23:
         14:81:15:e1:7a:a4:91:f4:f4:93:59:7f:ec:12:77:fc:e6:1d:
         01:1b:9f:92:37:b5:e6:9f:a2:86:9a:d0:cb:6a:13:e8:dd:78:
         5c:a2:a5:a9:9d:d2:c1:7a:8a:68:9c:26:e8:bf:a8:8b:65:4f:
         95:87:91:bb:ff:7e:85:4d:ad:dc:d4:c1:f4:fe:8d:b5:45:ea:
         1a:bc:df:36
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUexhTge9sgwW4kzC1va4XVJItTt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTYxNTQ0MzJaFw0yNjAzMTUxNTQ5MzJaMDMxMTAvBgNV
BAMTKDI1RkI2MzNENDJBOTlGQTc0RDk3OUE5QjJBMjJFMzJCOTgyRTk2OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyX30C0B9KyCMpJ8lad5GXz5Zi
z3lS6dm5NDjGzm9mn9gCwRUJ4K3vtGAoHZm0WzptQEyzWPLxmeOvtkdeaKI4Uai8
O5wSgBTcj3ad6m8BUTuMOkCALf5UGTmTtOeAxj2ZnCuPPs5ZQ+ZHa+4ZPxWwx6Ns
0wqj/FQBD1FqwcXVU0XOB4ljLihsImUpR9NloUiIwPDvWM54jw0a225QWbZM99OF
YDbOF1R/3R8KB29k+l/XanV3e0Q+V/DUjF0mwCXzlp3QD9PCIjvvDXbuxjuZyAJb
DsmEyz7f94xYAEmiEy/qc5bicbR/J9hh1oU9kyss1x9dRVqiZymrObPQGeKbAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUJftjPUKpn6dNl5qbKiLjK5gulpcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgojAN
BgkqhkiG9w0BAQsFAAOCAQEAlEmmSUAvrfXAMvoAHjIXW58q4c22YAJMIMpQReNB
wrxLFcw6d/IHRir1A8utisSKq5It5hk0EMXd65Rt3Q6XI/kQf9Ec16V0lX+gRvTY
XLdC7WKVSGKpxsO1VgexJ6+tHPuK+LT4SdXlRhlZOJWu8svHJ8c/ncozjC3cLvZt
hCqZbc0n2nMDhB51omeFB1oYc4MEBe8j6y18M4qj7rUxBQNA2lzubbhcAnRJajTN
KTQ1cVEjFIEV4XqkkfT0k1l/7BJ3/OYdARufkje15p+ihprQy2oT6N14XKKlqZ3S
wXqKaJwm6L+oi2VPlYeRu/9+hU2t3NTB9P6NtUXqGrzfNg==
-----END CERTIFICATE-----