Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131633a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363131633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          CBinEI22Zy1UTyAIYurJOb4pzQV5iafaGug7x91HJV8=
Subject key identifier:   2F:0F:5A:BF:01:BD:9F:8D:8F:E4:19:53:C8:D9:3A:4B:5C:8D:B1:E5
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       55BB43734859D8E90ED6EC784EF3D5425DA7E14C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131633a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 11 Apr 2025 18:32:15 +0000
ROA not before:           Fri 11 Apr 2025 18:27:15 +0000
ROA not after:            Fri 10 Apr 2026 18:32:15 +0000
asID:                     401507
IP address blocks:        2a14:7584:611c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:43:73:48:59:d8:e9:0e:d6:ec:78:4e:f3:d5:42:5d:a7:e1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:15 2025 GMT
            Not After : Apr 10 18:32:15 2026 GMT
        Subject: CN=2F0F5ABF01BD9F8D8FE41953C8D93A4B5C8DB1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:f4:b0:67:33:fe:66:62:87:27:72:05:18:
                    b1:57:c7:01:a7:37:97:10:6d:0e:00:3e:56:58:46:
                    4a:06:8d:e3:5e:5f:49:35:31:db:71:29:78:11:49:
                    39:0e:78:09:14:ef:8f:5b:ca:84:da:26:da:e9:a2:
                    6f:14:08:f2:af:3d:f0:cb:45:b3:ab:da:a4:fb:94:
                    9e:00:8d:38:06:21:0c:31:9d:7b:cc:7c:b5:30:5a:
                    03:22:51:58:ec:bf:b4:b5:c3:88:88:94:68:ed:32:
                    73:69:83:95:5a:6d:b0:b9:6a:88:73:c2:87:d2:4d:
                    b5:63:39:9d:6b:5c:ad:92:81:90:79:95:26:bf:b0:
                    5e:2a:0e:a4:60:5f:06:91:d7:70:c0:80:55:f9:7b:
                    0c:79:ca:87:58:b2:da:5f:fe:b4:75:5f:cf:08:b1:
                    dc:41:c8:f6:60:9d:45:ec:0f:8c:94:36:2f:5d:f9:
                    e4:e9:6d:64:9d:c1:46:4c:4a:d6:3b:ec:6d:24:4a:
                    6f:e1:43:9b:36:61:2b:cc:e0:01:e8:eb:fd:1d:d4:
                    1a:4c:cd:ed:c1:4c:ea:24:41:03:38:09:94:92:6b:
                    ad:ce:64:76:6d:77:8d:23:9a:9c:b5:77:1f:73:bd:
                    5b:e4:90:6f:d1:de:cb:3f:80:b5:70:fe:72:70:2a:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:5A:BF:01:BD:9F:8D:8F:E4:19:53:C8:D9:3A:4B:5C:8D:B1:E5
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131633a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:611c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:80:51:c1:81:0d:d9:57:5a:a3:55:f9:07:de:bc:2c:47:
         c6:c3:a1:a2:db:f3:18:95:da:77:58:50:e1:39:9b:61:06:e3:
         57:b2:12:fb:66:83:05:cd:95:bb:a6:d1:f2:f7:b6:22:6c:f7:
         f0:ee:cb:05:7b:dc:3c:12:37:12:94:84:91:22:20:61:88:42:
         af:fd:4c:25:8f:2a:52:cb:29:d7:b1:c0:06:5c:7e:77:4a:56:
         55:df:88:db:22:a8:17:ab:6d:8b:5a:82:ff:12:9c:5e:c1:92:
         45:53:44:c4:d0:fe:04:f4:88:6c:fe:1b:d4:ec:b8:cc:5b:2e:
         70:0b:a6:36:ee:07:d4:32:fe:e4:b5:91:40:f8:41:63:c1:31:
         0c:d2:fb:8d:72:ec:7e:6a:67:fb:53:71:ae:01:29:9e:da:54:
         dc:d9:c9:58:69:1c:43:b8:38:05:b9:49:f3:a3:78:27:3e:f7:
         90:b4:12:a0:a7:f3:d1:09:98:a5:15:cf:fa:6e:f1:89:cf:d1:
         f4:a7:5b:3e:8b:3c:3c:11:e8:67:94:80:13:2b:e1:47:db:ab:
         3b:c9:e6:f9:5e:29:9a:cf:31:cf:9a:eb:1d:aa:c7:8c:97:41:
         84:aa:bb:dd:33:33:77:0f:60:dc:df:f3:e2:aa:46:f3:8f:e1:
         cc:15:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----