Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363064643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vjaqq7hHfX7ESCaIdgqCZJS9KrULJcKM/pcPMZzG8cE=
Subject key identifier:   6F:B2:D7:AB:4E:FD:6E:66:16:7D:1A:79:E3:44:D5:51:89:3B:BB:D0
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       4111B69079C4A3A68641209953695F54ADA1FF53
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:18 +0000
ROA not before:           Wed 26 Mar 2025 14:16:18 +0000
ROA not after:            Wed 25 Mar 2026 14:21:18 +0000
asID:                     16909
IP address blocks:        2a14:7584:60dd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:11:b6:90:79:c4:a3:a6:86:41:20:99:53:69:5f:54:ad:a1:ff:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:18 2025 GMT
            Not After : Mar 25 14:21:18 2026 GMT
        Subject: CN=6FB2D7AB4EFD6E66167D1A79E344D551893BBBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:ce:ee:6c:6f:00:9d:53:44:a1:32:19:16:
                    22:1b:9e:15:78:0c:89:4b:e2:b1:6a:e9:5b:b2:cf:
                    98:98:0e:5f:a1:1a:87:23:77:09:23:7c:1e:07:a6:
                    f4:db:86:bb:86:31:0c:41:8d:65:9d:04:cc:5e:8a:
                    f4:98:6e:f3:12:32:72:ab:9f:74:be:29:d6:dc:34:
                    e1:5c:d7:83:1a:45:79:04:b2:fc:a2:ec:e2:cb:a9:
                    f4:77:01:98:40:bb:69:72:19:63:63:ec:99:db:58:
                    e0:01:eb:b7:10:32:f1:8e:92:48:e4:57:78:ad:2c:
                    40:3a:8b:16:f4:3b:4a:1e:8e:90:87:45:0b:2d:25:
                    6b:37:42:62:c0:17:5a:2e:a8:1f:3f:e7:c8:45:33:
                    9d:ad:43:e4:53:b2:49:e3:d9:69:af:f9:70:2f:be:
                    20:75:e0:ec:f9:7d:45:e9:61:2e:bc:d7:56:8d:ba:
                    6f:65:51:69:fa:93:d0:c9:c6:44:86:40:ce:27:1e:
                    35:c3:0a:37:e0:31:63:4f:e3:a8:0c:2d:62:cb:32:
                    59:c9:11:d1:16:de:5f:bc:77:f4:24:ab:8d:b8:13:
                    89:73:3e:7d:7b:4a:d4:f1:3b:1c:15:62:35:45:ff:
                    00:ac:fb:a3:10:33:1a:04:6c:51:c3:c4:b7:53:90:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:D7:AB:4E:FD:6E:66:16:7D:1A:79:E3:44:D5:51:89:3B:BB:D0
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60dd::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:72:e3:a6:88:8f:26:b1:20:e7:c7:05:8b:c6:c0:35:cc:
         c2:ca:4b:34:81:07:31:00:4b:af:a4:93:47:ce:95:80:bb:77:
         8f:d7:51:ae:3b:57:6e:c7:0b:93:f9:f9:b9:f5:c8:07:0b:ed:
         f3:89:cc:8d:8e:4a:86:61:3b:26:d2:53:93:38:a0:74:b0:4f:
         a1:4e:d1:db:6d:59:45:69:5e:6e:1c:e5:d2:ce:33:a3:2b:1e:
         74:e2:8f:3a:61:cb:1e:40:17:f0:b7:10:09:d8:a3:ab:05:96:
         d6:cf:cc:d5:16:7d:5f:4f:ec:51:83:dc:5f:0d:72:04:f6:68:
         00:5a:7e:a3:99:d5:da:91:da:57:18:bd:42:f0:92:4a:c2:11:
         d9:67:86:65:29:6d:ee:b0:3e:c6:77:bb:d5:72:61:30:8f:7f:
         cd:75:86:ef:56:80:bd:59:26:eb:f5:4e:ba:58:15:e9:4a:b1:
         59:00:cc:96:ba:d3:3c:44:b0:de:52:c4:e6:b2:fa:62:2a:86:
         e9:6e:87:24:38:af:90:c7:a6:f2:33:c6:1b:83:21:38:75:77:
         3d:c7:cb:b6:23:e8:ae:52:16:60:6d:fb:8f:49:98:18:09:70:
         90:ee:83:96:8b:f1:e4:e2:74:96:82:67:f7:24:61:8b:a9:fe:
         59:7b:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----