Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062643a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363062643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          mggmFpgydsa+VBOirAPwtnbhjT4Ut/iAMN/75PccQqo=
Subject key identifier:   A0:57:B8:5C:DC:59:41:1A:14:5D:35:09:2D:CA:E2:1B:97:33:51:EC
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5A37B31270DCF62EFA2FD0AED5C8713EFD313BE1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062643a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sat 22 Mar 2025 15:21:19 +0000
ROA not before:           Sat 22 Mar 2025 15:16:19 +0000
ROA not after:            Sat 21 Mar 2026 15:21:19 +0000
asID:                     401507
IP address blocks:        2a14:7584:60bd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:b3:12:70:dc:f6:2e:fa:2f:d0:ae:d5:c8:71:3e:fd:31:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:16:19 2025 GMT
            Not After : Mar 21 15:21:19 2026 GMT
        Subject: CN=A057B85CDC59411A145D35092DCAE21B973351EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:57:d5:a8:06:8b:fd:20:7c:ba:34:93:8a:
                    13:b7:a4:57:e7:44:f4:07:fa:10:e6:17:4b:9a:52:
                    23:a9:13:ec:d9:08:2d:1e:00:12:61:c4:aa:6e:3a:
                    0c:bc:ba:89:7e:da:07:d5:84:d8:25:37:2c:51:39:
                    46:1f:81:fc:f4:de:e6:d5:3c:9f:60:48:0b:7e:f2:
                    a6:d9:70:d5:cd:db:43:4f:59:48:9a:0a:0d:ca:c7:
                    b3:2b:eb:9a:a5:47:bb:e5:02:c5:75:e9:5f:61:0f:
                    f3:6d:e3:5f:28:45:5c:42:ee:3b:cb:82:e8:73:7e:
                    fd:8e:f6:5e:de:84:d8:00:3a:75:b3:a9:22:32:e6:
                    85:d0:c7:61:49:e8:1e:13:2f:4c:23:05:58:c9:fa:
                    08:61:41:3e:58:74:8c:d0:5d:8c:a1:21:ba:0f:69:
                    ac:e4:43:aa:69:74:56:87:fb:df:57:1b:9f:88:d5:
                    37:77:67:71:0a:6c:3b:8e:80:df:5f:0d:54:fb:f5:
                    7a:e6:97:be:78:41:af:30:56:62:63:7d:95:3c:7b:
                    f3:b7:d4:12:84:ff:4b:9a:ce:7e:b0:7f:97:70:7c:
                    36:5c:4a:44:df:49:fc:48:84:22:5f:1b:00:c2:52:
                    a5:ed:4b:c4:f6:a4:9e:91:ae:73:64:d4:d9:6c:e0:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:B8:5C:DC:59:41:1A:14:5D:35:09:2D:CA:E2:1B:97:33:51:EC
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062643a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:99:ae:e6:aa:10:18:61:01:68:d4:7a:0c:db:76:f7:a2:ba:
         ca:ab:51:23:ae:60:5d:73:cf:15:02:0e:12:4f:21:2d:5d:72:
         d1:10:99:1e:01:59:2c:7a:dc:ab:17:33:a5:f2:b9:55:d6:f6:
         70:43:5b:c3:ab:0c:fd:b9:c8:05:ec:b1:92:69:77:23:e1:ee:
         48:31:29:e1:7d:da:c3:a2:55:41:df:88:b4:40:1e:7e:b9:21:
         d4:ee:2f:47:e3:b0:1f:79:23:52:94:43:37:7b:0e:26:75:cd:
         37:48:f8:d4:2a:08:f1:ee:d3:06:3c:2f:7b:cf:35:b4:0c:01:
         b9:49:63:7d:2e:63:15:a2:cf:ab:1d:5c:72:31:8d:9f:97:3c:
         e5:bf:5b:c0:f9:38:53:62:0a:d6:8a:f0:a4:ec:de:dc:2a:35:
         d3:c1:3b:98:8b:99:50:0b:d3:e3:ec:98:5d:eb:a4:6c:cb:5e:
         d6:f3:96:00:56:29:42:62:00:60:a8:d6:95:89:a4:5b:f3:6d:
         fa:e4:18:97:a7:33:18:73:c5:33:43:d6:ae:19:18:5e:de:45:
         79:a9:eb:65:41:fd:c8:7b:d3:5e:2f:6d:38:a2:e5:1a:b6:c0:
         bc:70:52:c4:79:be:55:cf:22:bf:36:13:0d:2d:4f:3c:c7:57:
         36:8e:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----