Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062613a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          PpP4k5tIqwcLyMZAwJDtTfaTwhO9HygRt1slZanyLWc=
Subject key identifier:   CD:3F:B6:9E:02:5A:B1:DE:4C:29:2F:85:BA:AF:EE:CF:2F:C7:AE:42
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       53286D019964807CB3F0F8BB2C5056ABA9F5FCF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:57 +0000
ROA not before:           Sun 16 Mar 2025 15:45:57 +0000
ROA not after:            Sun 15 Mar 2026 15:50:57 +0000
asID:                     16909
IP address blocks:        2a14:7584:60ba::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:28:6d:01:99:64:80:7c:b3:f0:f8:bb:2c:50:56:ab:a9:f5:fc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:57 2025 GMT
            Not After : Mar 15 15:50:57 2026 GMT
        Subject: CN=CD3FB69E025AB1DE4C292F85BAAFEECF2FC7AE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:88:1a:55:1f:0e:3d:ad:c9:ae:f4:81:ed:
                    22:4e:4f:05:ce:13:bb:b7:af:11:56:2d:7d:8a:04:
                    f0:99:6a:78:f6:6c:e8:2b:8d:8a:e4:cc:b7:4a:63:
                    87:3e:76:ec:4e:a1:d7:ea:d9:11:75:ca:d8:b9:c7:
                    5a:03:7c:38:ab:c3:cc:a8:2a:68:f5:57:25:a4:7f:
                    7b:34:01:ff:85:5b:86:6a:c0:aa:f3:37:62:1e:a1:
                    99:46:2f:18:a6:eb:d4:d0:08:24:70:f1:00:f2:c8:
                    b8:4d:c8:d7:c7:e1:be:f0:b5:c9:85:bb:93:ea:0d:
                    dc:5e:dc:53:54:e4:69:4c:01:52:f0:54:9a:4b:df:
                    2d:83:ed:a0:14:27:37:15:50:29:26:4e:05:45:1e:
                    41:c4:d0:84:e3:7a:86:bb:68:90:ee:ec:a7:72:9f:
                    d6:85:18:b6:22:d3:40:56:3f:0c:ef:e2:f9:d8:e1:
                    a8:92:64:d5:9f:06:d9:39:39:ce:49:28:ae:da:ff:
                    7e:0f:d6:8f:8e:56:88:9f:16:bf:0b:7c:e3:3f:8f:
                    94:6b:7b:59:9b:1e:6b:cc:34:ba:3d:b2:95:0f:ef:
                    cd:9a:6f:05:ff:80:34:0d:5c:bc:89:f7:42:2a:4e:
                    66:c8:a2:36:23:fd:c0:2f:77:e6:5e:a0:d7:94:7d:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:B6:9E:02:5A:B1:DE:4C:29:2F:85:BA:AF:EE:CF:2F:C7:AE:42
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:97:ea:30:ad:d2:a5:d0:6d:56:19:b4:8a:5f:d9:40:93:e3:
         92:16:0f:76:36:fb:c7:ea:63:45:5e:38:c7:cf:ab:aa:f4:b3:
         6a:4f:59:5c:c6:27:a8:e7:24:41:ef:92:b1:a0:2a:ca:68:30:
         31:b1:f3:ae:b1:73:a5:d9:92:bd:ff:cc:c6:3b:f4:83:31:22:
         c0:14:a5:4a:10:a2:88:85:ad:c0:cd:22:65:19:0c:bb:7d:79:
         00:6a:ec:31:36:37:c9:70:b0:67:c2:82:89:06:3e:30:4c:d6:
         01:13:1c:af:0b:6d:77:cc:75:f7:7a:da:38:3a:11:a9:a2:49:
         c4:f0:ad:df:d0:34:6d:54:11:98:5c:19:7f:ea:03:18:d1:51:
         23:e4:cc:b2:1c:0c:64:8d:b8:ca:0c:e8:62:63:b4:f6:97:4b:
         1c:52:54:73:04:af:cc:77:f7:7b:51:53:89:12:04:d7:ba:ea:
         95:b4:fe:be:0a:5b:0e:cb:35:d7:74:70:f2:97:73:01:63:93:
         58:0f:71:95:92:30:cf:66:dd:5d:7d:43:90:98:73:33:23:6c:
         8b:14:23:1c:4c:ea:3b:9d:5d:41:79:a7:39:c9:19:c4:31:d9:
         c5:d3:9b:56:4a:80:a3:d3:1b:29:dc:6d:a0:5b:fe:81:c0:6c:
         c5:ab:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----