Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132623a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363132623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          n9VlzX2gm08SYJsJI9K5HGeqgaOVUTQ8VOZ+OI33eaE=
Subject key identifier:   4B:DB:88:13:1E:E4:84:96:51:64:10:69:7F:56:04:24:2E:7C:BE:DF
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       303A2D806EA45971759AF2F666B8306FA05FB975
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132623a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:00 +0000
ROA not before:           Fri 11 Apr 2025 18:28:00 +0000
ROA not after:            Fri 10 Apr 2026 18:33:00 +0000
asID:                     16909
IP address blocks:        2a14:7584:612b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:2d:80:6e:a4:59:71:75:9a:f2:f6:66:b8:30:6f:a0:5f:b9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:00 2025 GMT
            Not After : Apr 10 18:33:00 2026 GMT
        Subject: CN=4BDB88131EE48496516410697F5604242E7CBEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:d3:3b:94:a3:46:2c:b5:53:0a:ff:21:f0:
                    e2:bf:5b:9e:1b:81:4c:e1:c2:ac:b7:10:96:34:eb:
                    48:3f:f2:cc:2b:ae:11:af:2b:f5:21:01:95:6c:16:
                    b6:8e:c9:27:9e:9e:b0:7a:2c:f6:ea:5e:f9:0c:71:
                    0a:6f:f5:33:9a:71:dd:f1:e0:bd:9f:92:a9:b0:44:
                    71:8d:b6:55:cb:14:93:18:17:2a:c6:2e:77:10:6c:
                    5e:2c:cf:c8:f8:a6:56:d0:89:94:58:35:ea:ac:e0:
                    6b:c6:34:7f:d8:9a:28:cb:62:b0:e1:d7:ce:b0:2c:
                    84:b2:85:8d:61:13:59:b8:7f:9a:a0:96:f4:85:d0:
                    20:6a:01:42:d7:81:e0:34:52:3b:85:7a:79:09:8c:
                    9f:35:12:95:e4:10:e5:9f:14:05:0d:fa:34:79:be:
                    62:1a:60:57:43:a8:92:9c:61:0b:0a:c7:19:75:e9:
                    a6:99:6c:9b:0e:39:cf:39:e1:9f:cb:e1:6e:2f:51:
                    a0:6d:00:5f:3f:b6:59:2b:ca:87:73:a7:23:99:2f:
                    56:24:d5:54:c8:6b:6b:7f:fa:81:e3:c1:fb:29:6d:
                    b0:46:04:38:37:fc:fe:01:2b:2f:fc:49:04:72:8a:
                    12:70:49:cb:11:7b:c3:65:6e:09:ec:2b:45:9b:12:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:88:13:1E:E4:84:96:51:64:10:69:7F:56:04:24:2E:7C:BE:DF
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363132623a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:612b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:43:ec:93:e3:e6:2a:8d:9e:6e:bd:61:cb:90:b6:89:4e:
         fd:64:b0:91:32:86:29:cb:b8:fc:60:3f:a7:44:56:9e:5b:b2:
         00:e2:0b:ca:d4:12:23:ae:7f:0a:67:74:b5:a3:a1:6b:7b:3b:
         88:cd:c8:75:02:f8:8f:44:18:0f:41:6d:79:70:98:e3:67:b1:
         31:42:d2:ac:bb:db:02:cc:b6:bc:3d:bf:ec:21:5c:25:39:14:
         6f:21:a7:5c:37:87:6d:79:56:b8:4a:8c:60:73:1c:2c:b0:86:
         d1:a6:e4:bc:63:12:08:0e:31:f7:88:5e:1c:37:1a:2e:93:67:
         b5:50:07:ae:e0:42:cd:4c:63:a4:a1:fd:43:1f:53:e7:6d:32:
         86:3c:78:95:aa:43:bb:57:45:af:54:90:4d:f4:28:f8:69:30:
         02:e9:30:ba:40:00:ef:6e:e3:9d:11:bc:c8:d2:80:72:3b:6d:
         9d:0e:ff:79:0e:fd:e3:a5:62:f1:b8:b7:d5:ab:cb:50:76:75:
         d7:60:45:81:67:d2:cf:ea:3d:92:fc:8c:ef:3c:bf:23:8b:63:
         4d:ef:32:cb:31:77:1c:9d:8e:92:d0:bd:07:79:e2:98:3e:bb:
         15:45:21:b0:c7:96:2a:1c:9f:34:0a:64:ea:78:c0:c1:0c:2c:
         18:62:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----