Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          D6g7qk2yxoy8Yk0vlrz/yhSlWJZGuXzZrqYar3yx/Yw=
Subject key identifier:   89:D8:80:35:27:4E:BF:68:08:8C:DC:F5:2A:80:92:80:A3:E7:47:5A
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       221624262A5C77EDFBE1B78180BFEE6A85460561
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:54 +0000
ROA not before:           Sun 16 Mar 2025 15:45:54 +0000
ROA not after:            Sun 15 Mar 2026 15:50:54 +0000
asID:                     16909
IP address blocks:        2a14:7584:60b6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:16:24:26:2a:5c:77:ed:fb:e1:b7:81:80:bf:ee:6a:85:46:05:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:54 2025 GMT
            Not After : Mar 15 15:50:54 2026 GMT
        Subject: CN=89D88035274EBF68088CDCF52A809280A3E7475A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:ac:80:e8:42:32:5d:ff:97:06:ab:d4:cd:
                    09:13:c0:45:73:59:19:8e:09:52:18:84:3b:c4:34:
                    cd:ec:5e:f7:4f:ac:61:db:44:6b:cf:ee:b0:d4:69:
                    b5:22:7a:7c:2b:64:9e:a3:be:65:e1:66:73:33:e3:
                    ac:ca:b0:0a:2e:6b:57:13:93:81:2a:db:55:13:ec:
                    6a:ad:b1:3b:78:f4:9b:41:03:30:0d:d3:df:5a:b0:
                    76:53:0c:44:3a:ee:a2:ab:88:cc:79:1e:e8:bd:8f:
                    f4:e4:68:ba:27:4b:ca:45:d3:70:58:61:47:88:23:
                    04:7d:a7:40:d1:f1:15:19:1b:39:0d:83:83:09:4d:
                    93:88:21:c9:0c:80:97:b2:0d:58:cc:09:d5:68:c0:
                    37:81:91:d5:5b:10:f7:70:eb:1a:1b:64:20:6d:03:
                    27:e6:7f:f0:03:05:9a:95:fd:15:70:1e:67:b3:d1:
                    17:93:70:1a:dd:4a:e6:2b:82:a7:08:b8:d6:f2:34:
                    bd:9f:b5:46:0c:c1:22:f2:57:b5:a3:b7:4d:9f:93:
                    15:2c:c9:71:5b:06:32:b3:68:06:73:0d:be:1d:5c:
                    4b:50:42:65:9b:13:ef:d7:f7:b3:b8:d8:33:07:ba:
                    f8:c3:b1:48:0d:bf:89:f3:ac:71:b3:aa:eb:89:fd:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D8:80:35:27:4E:BF:68:08:8C:DC:F5:2A:80:92:80:A3:E7:47:5A
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:76:12:56:5a:c0:d4:f5:02:7d:9b:ea:c8:3c:a7:fd:90:30:
         31:80:c2:00:80:3d:85:7d:91:1c:0f:50:de:83:b5:5e:78:94:
         c6:35:15:db:3d:9a:dc:12:c0:5f:85:4d:17:8e:29:51:a1:3d:
         03:8d:d2:77:27:fa:16:5b:af:d6:5f:6a:8c:4b:30:b4:0a:aa:
         a3:1f:df:20:ee:32:11:a7:ab:4c:1d:52:d4:d9:bf:43:17:9f:
         a3:73:47:42:5f:01:d1:fe:9e:ab:54:08:02:d7:1a:e1:e0:06:
         82:d0:af:04:1a:cf:16:6a:49:21:05:2a:09:cb:cd:4f:34:fc:
         0a:ed:18:6b:96:e1:29:0e:e6:fe:c2:80:c7:6a:80:9a:f8:87:
         ef:7d:cd:22:64:08:8d:52:8f:78:d0:90:57:b0:11:75:a4:f0:
         aa:ba:d7:f1:e2:5a:37:68:0a:18:b0:66:32:fd:02:b2:79:ab:
         ae:f9:cb:32:5c:c7:8b:90:9f:21:f6:02:c8:b7:78:27:73:51:
         5b:ed:68:2c:d2:29:50:cf:cc:cc:a3:94:fa:91:96:75:b5:df:
         50:2d:f8:5d:d2:54:67:3e:3d:95:13:8d:80:ec:c4:96:7c:d4:
         32:8b:27:68:97:e5:03:93:92:b2:a2:d8:70:27:11:fa:af:2a:
         b1:10:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----