Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131383a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          6UKQbUt/PSbEv8qFDlanr0+h6SPwN/nfhSEIVJOu9w0=
Subject key identifier:   86:47:17:8D:E6:92:76:C3:3B:94:C1:25:24:33:CA:A3:35:90:5A:D7
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       5499E2ABB51029963EFBF29DB5C9A57DCF9CE200
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131383a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:11 +0000
ROA not before:           Fri 11 Apr 2025 18:27:11 +0000
ROA not after:            Fri 10 Apr 2026 18:32:11 +0000
asID:                     401507
IP address blocks:        2a14:7584:6118::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:99:e2:ab:b5:10:29:96:3e:fb:f2:9d:b5:c9:a5:7d:cf:9c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:11 2025 GMT
            Not After : Apr 10 18:32:11 2026 GMT
        Subject: CN=8647178DE69276C33B94C1252433CAA335905AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:5f:74:88:5b:15:c9:5a:11:1e:f0:f6:19:
                    62:88:e5:58:c2:bd:bf:cb:43:6b:c1:5d:97:0d:72:
                    af:19:a6:71:25:a3:24:af:0f:b4:d1:8b:12:68:e1:
                    8f:96:97:98:8c:12:59:8d:76:6c:e6:cd:6f:50:fc:
                    ed:fc:f2:5c:ce:83:5b:04:ea:88:df:0b:df:4f:72:
                    08:5e:da:05:ca:56:de:7d:f4:1e:b3:f3:cb:f4:94:
                    bc:6e:82:fc:47:cb:74:4f:1b:28:71:f9:e2:2a:81:
                    2d:1a:b7:a2:04:96:af:7e:ad:cd:bd:3c:56:45:78:
                    3f:24:76:f7:7b:15:6a:25:e0:cc:7d:57:63:7c:1c:
                    98:26:ae:95:26:f7:ff:3f:9e:63:ab:f3:63:44:50:
                    f5:18:4e:b9:cb:4b:6d:22:8c:c2:ef:37:0e:56:12:
                    07:66:26:fc:a9:24:de:ab:26:bd:e5:d1:98:ef:42:
                    64:53:2d:43:bd:20:e8:00:2c:23:13:12:f4:c8:a8:
                    65:1b:28:1f:cb:60:10:f0:37:e3:dc:d6:bc:2d:63:
                    7d:fa:e4:62:bc:3e:4c:26:fe:e1:db:df:31:3c:3f:
                    a8:b0:27:a6:a0:35:90:62:30:45:6f:ca:4c:8a:9b:
                    37:a8:6e:40:78:44:9e:cd:ed:31:a7:9d:17:7e:b3:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:17:8D:E6:92:76:C3:3B:94:C1:25:24:33:CA:A3:35:90:5A:D7
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131383a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6118::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:6c:06:97:9e:6b:5b:07:1f:32:37:8e:2b:72:47:f6:f2:79:
         99:d0:61:c3:72:0b:c7:52:2e:2a:47:39:1a:b8:ca:66:86:ba:
         e1:44:e6:06:27:6d:87:b1:20:64:74:25:db:d9:60:e8:57:0d:
         87:bb:39:51:43:93:2d:88:b3:0c:fa:92:d8:72:0c:b6:d6:d7:
         55:91:58:4e:3d:81:af:b5:82:50:73:69:6e:ce:81:40:04:b4:
         35:e0:6e:bb:e4:61:0f:fc:9c:0c:5d:72:49:35:14:04:26:5d:
         d9:55:04:7d:48:20:c5:96:30:d2:53:4f:b8:b0:99:20:11:37:
         08:b7:4f:a0:9c:3e:39:f8:c0:a5:ae:88:1d:ed:0f:96:62:2a:
         e4:59:48:c4:cc:19:a5:96:9a:9b:d8:78:f1:4d:d8:67:3e:f8:
         56:c5:da:e2:6d:21:84:60:bb:4d:38:0d:36:c4:35:0c:2d:7f:
         1e:2f:a6:9a:ca:ad:76:54:99:5b:ac:2e:e8:ba:fb:b8:cd:2f:
         17:45:15:f2:3f:25:b9:60:c9:30:fd:6b:df:67:40:f0:e5:96:
         57:35:ac:e5:73:f4:59:82:35:75:fe:29:65:a1:25:f8:0b:50:
         e8:5c:fb:1f:c3:c4:74:b6:f6:a1:65:b2:0c:11:1f:05:b5:9e:
         e6:45:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----