Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vp0oXgUR5gnwcUr1t1x0iwsM5I3S3vbG32pxqhQAycM=
Subject key identifier:   8D:A3:22:A4:CB:3E:06:CA:55:F1:A5:8D:CB:85:32:87:6F:CC:B5:93
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3A6E053D97C1CDE774805A98AF8D9088B13DA332
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:56 +0000
ROA not before:           Sun 16 Mar 2025 15:45:56 +0000
ROA not after:            Sun 15 Mar 2026 15:50:56 +0000
asID:                     16909
IP address blocks:        2a14:7584:60b9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6e:05:3d:97:c1:cd:e7:74:80:5a:98:af:8d:90:88:b1:3d:a3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:56 2025 GMT
            Not After : Mar 15 15:50:56 2026 GMT
        Subject: CN=8DA322A4CB3E06CA55F1A58DCB8532876FCCB593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:56:b0:02:f0:29:3e:99:cd:22:5a:f1:9c:
                    ed:b2:24:2a:dd:6b:cc:58:92:b0:f6:b2:38:39:1e:
                    e2:8b:8d:33:c8:e6:d9:24:c9:5a:f5:f4:25:5c:3b:
                    3c:bd:33:15:a2:6f:52:b0:49:4c:ca:8a:58:1a:19:
                    72:68:58:06:3a:28:26:5f:51:d5:ee:cd:9c:0d:52:
                    66:8a:5f:78:c7:23:72:e4:9a:c3:93:de:eb:52:63:
                    78:08:c5:76:a6:48:0f:b0:a6:15:80:1b:0d:01:6b:
                    0a:ee:3f:23:d7:62:06:8b:87:13:35:89:e4:d9:12:
                    e2:e5:aa:cd:be:7a:bc:f1:46:b3:a2:54:19:4b:25:
                    3e:2c:a4:6d:b2:c8:05:90:a1:70:e1:7d:27:bb:f1:
                    e0:7a:ca:d1:0d:f9:9d:8f:49:6c:51:b8:cf:29:1f:
                    24:be:39:72:43:b9:14:8f:d3:e0:86:e2:76:9a:71:
                    c3:ef:a7:26:83:df:94:2d:29:77:17:fc:d1:29:99:
                    b9:f6:e8:23:80:59:08:d3:56:23:7b:a3:9e:c4:00:
                    71:d1:9a:b4:06:31:08:e9:72:6c:ce:56:e9:22:c5:
                    1e:8f:9b:a4:6e:5b:06:43:cf:86:c4:cb:a7:9c:08:
                    64:68:70:9f:83:74:79:0e:ab:34:f1:02:cc:44:3a:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:22:A4:CB:3E:06:CA:55:F1:A5:8D:CB:85:32:87:6F:CC:B5:93
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:97:6f:ce:67:dd:4f:84:de:56:32:4a:b9:17:84:04:e0:a1:
         2e:f5:fd:8e:b4:99:93:7d:54:f2:30:3f:65:cc:b5:63:8f:24:
         d3:34:b6:d9:7e:61:f0:eb:d3:4f:ef:92:d4:8f:dc:2a:ad:31:
         fc:25:3c:82:cc:03:f0:5e:66:41:98:91:9f:53:89:2a:53:aa:
         78:9d:f3:a3:25:c4:b1:5f:10:39:cb:11:15:fb:3b:dd:a6:de:
         0d:73:66:8a:52:f2:a7:8b:d3:f7:9a:ed:10:14:ac:22:96:b3:
         67:19:b9:9c:0f:1b:b5:69:f8:53:c9:cc:b0:c8:cc:eb:e8:d9:
         58:cf:90:54:ca:61:5d:93:40:d1:39:ca:40:3f:90:84:bc:e5:
         25:4c:66:2c:74:d4:8c:6e:59:63:de:11:9a:13:1f:94:31:fe:
         e2:9b:71:5f:3a:a4:6b:38:b4:39:db:f8:1b:ff:cb:1d:d5:e1:
         89:c2:4d:b2:bb:21:b2:5c:27:f7:87:35:68:a4:03:90:2d:d8:
         87:f9:e4:ea:49:e5:24:51:4e:49:e6:5c:f8:02:13:7a:2e:68:
         84:dc:c9:e7:0f:f3:b1:4a:8a:c9:52:5d:e4:a3:1d:2d:08:f6:
         71:37:3f:92:21:57:56:95:af:4a:20:b7:6e:5f:d4:74:02:d8:
         b0:b9:e3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----