Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133393a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Gvf+4ibSQFI/Z7P1/hiT+LXNIz4DQTb6ZryNlVfH3IQ=
Subject key identifier:   21:A8:71:9A:FE:2A:AF:44:EA:2D:9E:17:E7:7C:6F:01:D3:44:F1:0E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3633375833D25C83D4DA3EB8AE29D556AA49BD89
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:33:29 +0000
ROA not before:           Fri 11 Apr 2025 18:28:29 +0000
ROA not after:            Fri 10 Apr 2026 18:33:29 +0000
asID:                     16909
IP address blocks:        2a14:7584:6139::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:33:37:58:33:d2:5c:83:d4:da:3e:b8:ae:29:d5:56:aa:49:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:28:29 2025 GMT
            Not After : Apr 10 18:33:29 2026 GMT
        Subject: CN=21A8719AFE2AAF44EA2D9E17E77C6F01D344F10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:28:8f:36:61:d9:13:0e:45:42:13:af:97:
                    cc:8d:19:a0:14:e6:b5:16:90:e9:e0:07:3a:5c:5e:
                    dc:4c:d5:0d:f8:dd:40:ef:4c:62:32:52:cc:09:bd:
                    60:bf:2e:d8:91:1d:ef:41:15:fb:66:38:3c:38:0b:
                    66:8e:a8:78:a5:96:ca:e1:9f:f8:bd:f4:68:fe:c2:
                    fe:19:50:c8:77:c0:d7:80:c4:d2:2c:3c:c7:16:50:
                    32:ba:97:12:1a:91:aa:57:ce:f0:05:4d:f9:4d:d1:
                    d4:36:fe:a4:e0:3a:68:df:64:ee:eb:88:6b:c4:19:
                    2a:93:8e:fd:87:f7:fe:a4:f2:7d:2c:df:d2:a8:2c:
                    5f:27:8f:2b:4c:9b:67:84:5c:70:90:5a:e8:49:60:
                    7e:97:55:21:83:be:60:01:95:f3:e8:59:25:a8:69:
                    b6:c5:1b:87:6b:00:e5:91:e3:be:39:de:7e:d2:77:
                    e2:3d:c6:1c:82:86:63:3d:d5:de:8e:61:fd:28:d7:
                    e3:c5:f2:7f:47:f5:f5:9d:9a:22:65:f3:db:97:a4:
                    8d:1d:81:67:73:80:17:22:0d:ba:43:18:2c:ad:11:
                    55:b6:45:f9:6e:17:85:9e:33:04:d6:9c:63:b5:15:
                    80:94:64:16:a1:73:b4:cd:19:60:66:97:a7:e9:90:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:71:9A:FE:2A:AF:44:EA:2D:9E:17:E7:7C:6F:01:D3:44:F1:0E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6139::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:c5:45:67:8e:56:8f:35:3c:33:b1:3b:85:62:3f:a3:1f:
         2e:88:be:7e:a4:4b:86:9f:5c:58:38:51:f0:d2:e8:86:72:d1:
         19:3f:5d:20:55:a5:23:db:ab:da:d0:a2:f8:9a:6e:31:82:76:
         45:2e:f2:c6:65:08:4d:37:76:c8:8c:65:c7:2d:a4:1b:83:84:
         86:a9:1f:89:c8:29:a4:21:c9:a5:89:e2:fa:06:fb:2c:bc:f5:
         21:ec:23:8e:69:6f:39:7a:38:c6:75:77:0b:12:91:78:58:cf:
         12:b9:e0:86:ea:51:be:7f:80:a1:ac:b8:6f:69:88:40:9a:d4:
         bb:12:a5:81:86:5d:0a:f3:24:a2:61:42:c1:c7:f1:97:20:6a:
         52:c3:46:01:1f:ad:de:2a:05:f4:73:57:bd:16:85:c4:da:94:
         f9:fa:43:1a:41:c6:8a:8e:26:17:71:18:b0:2a:f5:14:22:b0:
         61:94:b6:cc:8f:b6:ef:27:ed:ed:25:d9:9d:d3:d2:95:f8:1f:
         bb:3b:56:e1:4d:02:71:41:68:93:41:d4:ae:cc:dc:6c:6c:da:
         77:f8:66:e4:0c:6d:0e:29:5e:cc:93:64:a7:41:b1:c7:61:7b:
         6c:e3:2f:b5:e7:36:8a:ea:24:d8:80:a8:db:24:6f:9f:4a:9e:
         c6:a4:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----