Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064333a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          n6wlSSi7EuaG5EDN0cBQk64NNF/r96eumLMMwUcEVpM=
Subject key identifier:   AC:C0:41:2F:CE:83:A1:43:47:61:7F:CE:BF:B8:44:78:23:14:3A:02
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       54D40E08D8B9F5E849CCAB10FEE0E2B590ED508C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 22 Mar 2025 15:22:53 +0000
ROA not before:           Sat 22 Mar 2025 15:17:53 +0000
ROA not after:            Sat 21 Mar 2026 15:22:53 +0000
asID:                     16909
IP address blocks:        2a14:7584:60d3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:0e:08:d8:b9:f5:e8:49:cc:ab:10:fe:e0:e2:b5:90:ed:50:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:17:53 2025 GMT
            Not After : Mar 21 15:22:53 2026 GMT
        Subject: CN=ACC0412FCE83A14347617FCEBFB8447823143A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:94:4c:b5:b7:20:95:e5:fa:8b:50:36:cc:
                    db:45:47:c4:a4:3b:83:8c:80:e0:46:b8:84:0f:32:
                    0a:8a:97:77:ff:16:73:0c:9b:ab:04:d6:f8:72:68:
                    eb:07:2b:f2:5f:32:92:d9:e9:37:de:f5:8e:bc:c6:
                    7f:33:85:41:43:c5:f9:f5:35:a2:fe:58:0c:5e:50:
                    ba:59:ee:5c:f8:53:61:11:41:7c:4b:99:f1:34:8e:
                    bf:a3:15:93:b8:bc:d3:ce:1b:db:5a:ad:eb:31:8c:
                    06:c5:7a:6c:d0:13:7a:d5:0c:03:24:dc:ca:ad:85:
                    62:50:b9:23:42:e8:e1:e1:ac:28:4d:43:86:00:1b:
                    00:d3:d5:2f:79:5f:ad:fd:1e:81:d8:7b:76:2a:8f:
                    b2:46:1d:f4:46:33:65:ed:66:20:ab:b5:01:0c:de:
                    9b:dc:46:7f:be:f9:06:88:3e:8c:37:d2:36:9c:8b:
                    2c:36:ec:b2:43:d1:b9:a2:c5:45:7a:47:65:aa:15:
                    e3:b8:9e:93:1a:4e:a9:9c:9d:0a:cb:21:0d:a5:29:
                    34:60:50:04:5d:91:cb:fe:9c:80:84:86:b2:99:c8:
                    08:fd:98:ff:55:fb:bb:f3:61:f4:89:4c:de:9c:55:
                    af:59:37:94:83:a4:14:26:db:b0:ba:24:75:02:b1:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C0:41:2F:CE:83:A1:43:47:61:7F:CE:BF:B8:44:78:23:14:3A:02
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60d3::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:25:92:c9:cd:fa:36:14:c9:0a:b0:b1:49:5b:bd:2e:c9:15:
         55:75:6e:4d:74:d4:59:2e:17:01:24:43:ca:7c:66:dd:f9:a3:
         5d:e1:2d:44:3d:9b:6c:ba:55:36:88:9f:e6:99:c1:a1:5c:ee:
         94:97:85:0c:4a:2b:bf:32:c8:66:39:1f:de:82:e8:a2:55:48:
         c7:48:5e:af:a5:a2:b6:e6:0e:e0:a4:ee:b2:69:60:1f:73:ae:
         2b:0e:72:af:ba:c1:34:10:95:48:c8:1a:24:de:cb:e0:66:50:
         f9:d1:4a:07:6d:eb:e7:97:12:44:20:2e:dd:ed:1c:ee:8b:52:
         fd:23:94:1b:86:d3:27:bf:71:f0:6a:20:dd:b4:cc:f9:9e:d6:
         45:75:7e:1b:28:f3:1e:12:36:14:19:c7:4b:b9:08:bf:93:83:
         6e:a1:f0:d8:c6:5d:e8:8e:bb:bd:e8:16:04:75:81:4e:e0:49:
         f7:ce:d2:9d:44:70:fb:ae:57:27:24:0a:de:e0:40:49:ac:61:
         38:0d:a3:85:7e:52:e5:9d:39:75:a1:13:cf:1b:71:67:f8:5b:
         65:55:d7:0f:3b:59:d7:2c:89:2d:74:65:05:d3:37:07:bd:e4:
         2c:18:6e:93:bf:67:a1:ee:f2:e0:84:32:41:d8:6b:81:24:9c:
         ea:4b:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----