Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065313a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363065313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          sp7zBFP8IDi8DO/haMoqnD4sMp7dCJVOSqBIl7e2TJg=
Subject key identifier:   31:71:8D:D4:55:BC:F9:5D:8B:C3:E1:E5:FB:96:A8:84:84:12:15:2E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       481A00110CB0C85AAD4F05E2790ECE51483EC75F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 26 Mar 2025 14:21:40 +0000
ROA not before:           Wed 26 Mar 2025 14:16:40 +0000
ROA not after:            Wed 25 Mar 2026 14:21:40 +0000
asID:                     16909
IP address blocks:        2a14:7584:60e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:00:11:0c:b0:c8:5a:ad:4f:05:e2:79:0e:ce:51:48:3e:c7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 26 14:16:40 2025 GMT
            Not After : Mar 25 14:21:40 2026 GMT
        Subject: CN=31718DD455BCF95D8BC3E1E5FB96A8848412152E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:9e:1f:00:8e:6b:c3:81:ff:21:68:59:8d:
                    1e:2d:38:24:6e:e2:f9:4e:10:98:19:70:7d:6f:58:
                    c9:d2:57:e9:5c:25:25:35:40:4d:7a:64:af:be:16:
                    5f:0e:1d:cd:dd:65:b6:93:b5:a3:20:0d:47:2a:74:
                    c2:0a:ca:e9:ee:e8:26:3a:ce:2d:7e:41:1d:60:da:
                    ae:d9:19:3f:89:69:cc:30:94:0e:d7:8e:d0:68:27:
                    7c:b8:97:05:ea:4a:63:93:1d:5a:49:e2:29:e0:18:
                    4f:07:75:7c:57:65:c9:18:01:53:63:06:8a:1d:ae:
                    43:ee:f9:e3:63:fa:1e:e2:8d:fa:b9:c2:5e:50:9a:
                    ea:43:84:26:b1:16:db:eb:38:ef:01:26:6b:c6:ee:
                    c6:c7:78:ca:e8:7e:13:fd:ac:4b:e4:8c:75:cb:48:
                    39:db:b1:8c:64:06:ba:c3:ea:72:19:cd:4f:0f:10:
                    00:2c:e8:b5:02:93:45:af:3a:b2:b3:a5:1f:e6:62:
                    54:f2:4d:28:1b:c0:f4:60:fe:89:f1:6d:e8:d9:e4:
                    c5:7e:09:d3:66:8d:cc:95:1d:11:91:07:f8:0e:99:
                    c3:56:5f:9f:b1:56:3a:86:f0:a2:ff:50:7f:91:1f:
                    3a:46:dc:91:31:df:4e:4b:53:49:e8:5c:06:ec:44:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:8D:D4:55:BC:F9:5D:8B:C3:E1:E5:FB:96:A8:84:84:12:15:2E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:ec:a4:d1:86:32:e2:8e:d6:59:e1:96:7b:31:b3:31:8d:
         54:5a:cc:40:61:96:57:52:05:f6:e6:89:60:59:34:50:00:ca:
         b6:8c:57:ae:c2:4b:21:d2:84:fb:45:a2:8c:8d:3e:4b:1e:bb:
         e9:6d:8d:33:52:3d:0a:7c:8a:1f:3a:55:20:b8:70:8c:17:c2:
         7a:0c:c5:66:d7:b8:17:5c:b6:dd:e4:70:10:4b:35:fb:2f:b5:
         59:47:3f:4c:e4:b8:59:ec:2c:5b:9f:46:1d:4b:46:0c:e8:1f:
         e3:6f:ad:46:5e:9b:dc:50:d9:23:21:ca:05:b1:e6:fd:de:2a:
         0d:b0:f6:2d:80:7e:de:89:ad:7e:07:a2:6e:9a:4b:c8:9f:85:
         64:f1:cd:09:2c:41:8f:fa:ec:ef:f6:5a:d1:55:a6:93:e6:aa:
         3b:03:69:f9:16:30:f7:be:cc:d0:78:51:d1:b6:81:e4:10:5e:
         12:4a:e6:85:b2:fb:ff:fa:e1:c1:20:aa:07:b1:67:7c:78:c9:
         72:54:8e:f6:95:e3:46:5c:42:41:78:6a:b7:23:86:e0:16:fa:
         82:ec:2e:23:11:e2:39:e5:2b:cc:7c:87:8b:fa:29:f3:b4:2e:
         6b:e7:96:bb:63:2b:fa:0d:8e:fc:64:6c:56:8c:50:e8:c3:1c:
         21:fd:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----