Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363062633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          yApGGmIkAzzyPlvKp/cpOsKHIjJBr5J2MX0zA+Hn/HM=
Subject key identifier:   FE:2E:19:2D:79:52:24:D4:30:D2:9B:1A:B8:61:78:D6:52:B6:BC:81
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       584E1940C157AF514EEAF5200A33D084272A9699
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 16 Mar 2025 15:50:59 +0000
ROA not before:           Sun 16 Mar 2025 15:45:59 +0000
ROA not after:            Sun 15 Mar 2026 15:50:59 +0000
asID:                     16909
IP address blocks:        2a14:7584:60bc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4e:19:40:c1:57:af:51:4e:ea:f5:20:0a:33:d0:84:27:2a:96:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 16 15:45:59 2025 GMT
            Not After : Mar 15 15:50:59 2026 GMT
        Subject: CN=FE2E192D795224D430D29B1AB86178D652B6BC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:9a:e2:df:50:e9:04:d3:7c:2b:3e:ce:ac:
                    21:49:cd:ee:6c:89:3d:9d:75:96:f5:b9:03:5b:74:
                    5c:5c:56:bf:bd:16:d4:4b:6b:4e:2d:d9:be:29:bf:
                    27:47:b9:26:3f:78:c3:ea:04:e3:d3:6c:7b:90:0b:
                    fd:ac:09:a3:75:3b:96:e1:d8:a2:7b:6d:b7:90:0e:
                    e0:1f:30:4a:89:0d:40:7f:53:9a:41:41:aa:5a:ea:
                    98:24:e9:ee:de:df:88:d7:a3:00:87:27:55:a1:8b:
                    d7:16:0c:0b:ee:32:c0:0d:42:8a:0a:70:f7:0f:83:
                    ae:b1:39:6e:03:3d:a0:87:bf:14:be:12:d1:4c:a7:
                    a5:87:89:51:0d:57:0d:1d:72:80:78:cb:52:de:c4:
                    1c:58:2c:8c:68:cf:8f:d8:97:7c:f0:d0:19:e1:8f:
                    72:14:5d:d3:e9:22:0e:e3:ce:84:cc:5b:d3:f0:8a:
                    b0:c0:98:8f:2e:02:6f:ff:c0:32:a9:51:e7:d3:d5:
                    60:91:e8:bb:d5:6c:82:ed:10:58:2c:af:39:20:6a:
                    2a:1a:63:90:44:80:73:84:b0:b8:35:5e:dc:5c:b8:
                    5a:80:ec:56:42:b4:43:ae:e0:7f:19:20:6d:77:0c:
                    6f:9d:10:cd:74:cb:d2:29:30:25:21:b6:ae:4d:0a:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:19:2D:79:52:24:D4:30:D2:9B:1A:B8:61:78:D6:52:B6:BC:81
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:1f:96:df:d1:76:1c:82:3f:43:93:49:62:8f:69:09:e8:
         62:7f:fb:80:67:08:34:7b:dc:d0:96:ea:d4:fe:b7:8f:9a:e0:
         6c:14:8e:a3:d2:7d:36:0f:db:52:eb:67:c5:e8:58:b6:ea:20:
         cb:79:ba:b0:21:9b:b9:36:5c:70:9a:4c:78:40:51:c4:29:4a:
         1b:3f:54:54:f3:10:c0:12:a4:ad:c5:a8:59:05:ce:0d:f3:18:
         a2:84:51:cd:93:57:8f:12:aa:74:8d:98:77:7f:03:52:63:82:
         fa:1c:0f:09:ca:88:fc:a8:8a:c8:7a:ba:16:58:c6:ee:99:60:
         96:28:d3:bb:d5:94:0a:35:b6:d8:e1:10:44:94:37:2c:71:63:
         94:47:cb:d1:86:6a:e4:5e:b6:78:d5:85:e4:fd:1f:a5:d4:3e:
         22:38:e3:70:f0:5f:e5:35:fd:c9:28:64:08:58:d6:b2:86:22:
         70:20:c5:4d:d2:dd:91:10:e4:03:ee:d5:fb:30:29:6a:a5:7a:
         67:7c:61:8b:9a:d8:cb:dd:14:0e:25:ca:4b:b4:69:36:df:38:
         82:10:69:18:a3:e9:88:da:d1:6a:84:25:d7:c8:8c:88:93:96:
         bf:f9:d5:c7:dc:2e:07:6e:9b:f1:50:3b:49:36:a0:69:ea:38:
         e7:50:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----