Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132363a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Wb8hbTi5xrh94rJzFpduHm3r8Jv9i1fnMQEJAyLRzzk=
Subject key identifier:   EB:CC:0B:B2:08:66:95:60:3F:FA:E2:F2:0F:6E:93:FE:09:34:0E:55
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2AC20678773A3C98E73FEDD9233C6C5AB484E582
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:32:43 +0000
ROA not before:           Fri 11 Apr 2025 18:27:43 +0000
ROA not after:            Fri 10 Apr 2026 18:32:43 +0000
asID:                     16909
IP address blocks:        2a14:7584:6126::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c2:06:78:77:3a:3c:98:e7:3f:ed:d9:23:3c:6c:5a:b4:84:e5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:27:43 2025 GMT
            Not After : Apr 10 18:32:43 2026 GMT
        Subject: CN=EBCC0BB2086695603FFAE2F20F6E93FE09340E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:dd:fb:42:2b:f7:db:15:18:69:e2:9e:b5:
                    1b:9a:45:5c:14:a6:d0:84:c8:b3:60:e0:5d:a5:2a:
                    56:5d:6a:49:ab:ee:1f:b9:c1:70:ae:ac:d0:ec:38:
                    23:a9:75:18:6a:5f:2e:3b:28:61:37:ba:ca:e0:93:
                    d8:c1:a0:88:b8:52:23:be:19:05:6d:c1:58:e0:f3:
                    0d:73:a3:05:2e:0f:a1:ab:99:37:4c:73:2b:74:9d:
                    7c:3d:9c:d6:12:f2:cd:5c:1b:6a:a4:45:a0:bd:3c:
                    23:ee:de:63:de:d2:64:ab:5d:da:8a:13:c9:13:ae:
                    18:2b:54:7b:b1:fc:fb:0c:3b:82:34:ee:1b:76:34:
                    dd:8c:a4:21:1b:53:d9:db:8d:f6:6e:7a:31:3e:85:
                    f1:1b:30:ab:06:e4:37:bf:7c:51:65:69:dc:ce:b9:
                    83:13:e6:d4:e9:6a:21:7b:29:55:15:55:cd:c2:df:
                    ac:5b:c8:81:9b:e4:55:09:0a:ea:24:03:b4:80:62:
                    59:42:78:5a:b8:a4:7f:dc:50:a9:c8:3e:47:1a:f1:
                    05:29:bd:2d:20:bb:eb:d3:da:4d:4b:ad:6c:0e:f5:
                    ac:88:84:f5:3c:ff:9d:15:cc:d8:a5:15:57:48:29:
                    17:b4:14:87:8c:c6:5c:ef:f3:10:ac:97:eb:57:af:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:0B:B2:08:66:95:60:3F:FA:E2:F2:0F:6E:93:FE:09:34:0E:55
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6126::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:64:45:3b:4f:de:81:7b:cf:f0:ee:d4:51:48:f1:58:60:
         47:39:cc:3d:64:c0:e4:92:38:2d:89:fa:2d:32:0c:1d:87:44:
         da:37:9f:5c:a0:86:5d:79:af:21:40:8b:42:92:76:6a:e1:7d:
         be:7e:00:e4:eb:d2:0a:5b:85:95:15:21:79:12:08:75:90:8d:
         59:8f:0f:6e:99:6f:bf:cf:ca:28:69:e8:b3:72:cc:b7:cb:4a:
         23:83:33:5d:a1:52:e2:f3:f5:93:df:5c:96:64:a6:e4:d6:ab:
         a3:db:cb:3b:f8:7e:bf:d3:e0:31:eb:2b:8e:54:79:5b:5b:cd:
         43:8f:0e:e4:cf:14:c7:7b:33:4a:49:02:2c:58:8f:c1:3d:fa:
         5a:bc:21:6a:26:52:a2:59:31:ae:7f:1b:05:67:89:32:3f:fe:
         39:21:32:f1:99:16:3a:48:39:96:d1:6a:9a:0d:51:e3:c2:75:
         00:5d:96:36:94:e9:d1:76:ac:8b:f6:67:2e:cc:94:7e:6b:cf:
         40:63:9c:dc:c1:61:d1:74:a0:9f:42:a3:fe:71:e6:84:59:a5:
         38:64:9f:ec:3d:e7:74:82:5b:20:13:75:ef:fd:a4:99:d5:0f:
         8a:ef:dd:e3:bc:e3:58:65:66:a3:99:6f:37:35:f7:06:40:90:
         9a:16:3b:b4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKsIGeHc6PJjnP+3ZIzxsWrSE5YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MTExODI3NDNaFw0yNjA0MTAxODMyNDNaMDMxMTAvBgNV
BAMTKEVCQ0MwQkIyMDg2Njk1NjAzRkZBRTJGMjBGNkU5M0ZFMDkzNDBFNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3d37Qiv32xUYaeKetRuaRVwU
ptCEyLNg4F2lKlZdakmr7h+5wXCurNDsOCOpdRhqXy47KGE3usrgk9jBoIi4UiO+
GQVtwVjg8w1zowUuD6GrmTdMcyt0nXw9nNYS8s1cG2qkRaC9PCPu3mPe0mSrXdqK
E8kTrhgrVHux/PsMO4I07ht2NN2MpCEbU9nbjfZuejE+hfEbMKsG5De/fFFladzO
uYMT5tTpaiF7KVUVVc3C36xbyIGb5FUJCuokA7SAYllCeFq4pH/cUKnIPkca8QUp
vS0gu+vT2k1LrWwO9ayIhPU8/50VzNilFVdIKRe0FIeMxlzv8xCsl+tXr1H5AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU68wLsghmlWA/+uLyD26T/gk0DlUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzMjM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhJjAN
BgkqhkiG9w0BAQsFAAOCAQEAQ7hkRTtP3oF7z/Du1FFI8VhgRznMPWTA5JI4LYn6
LTIMHYdE2jefXKCGXXmvIUCLQpJ2auF9vn4A5OvSCluFlRUheRIIdZCNWY8Pbplv
v8/KKGnos3LMt8tKI4MzXaFS4vP1k99clmSm5Naro9vLO/h+v9PgMesrjlR5W1vN
Q48O5M8Ux3szSkkCLFiPwT36WrwhaiZSolkxrn8bBWeJMj/+OSEy8ZkWOkg5ltFq
mg1R48J1AF2WNpTp0Xasi/ZnLsyUfmvPQGOc3MFh0XSgn0Kj/nHmhFmlOGSf7D3n
dIJbIBN17/2kmdUPiu/d47zjWGVmo5lvNzX3BkCQmhY7tA==
-----END CERTIFICATE-----