Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133633a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363133633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          5WroAcQPbyw+DSB4pPlF+ZgNeqtfoR5VBEpprGkoWNo=
Subject key identifier:   DA:76:62:DD:7C:76:E9:1D:03:7F:90:DC:75:F5:61:7F:7A:CE:DE:19
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       73973D192C559D708E0D3B17780C8E00BB4F6768
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 11 Apr 2025 18:34:09 +0000
ROA not before:           Fri 11 Apr 2025 18:29:09 +0000
ROA not after:            Fri 10 Apr 2026 18:34:09 +0000
asID:                     16909
IP address blocks:        2a14:7584:613c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:97:3d:19:2c:55:9d:70:8e:0d:3b:17:78:0c:8e:00:bb:4f:67:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 11 18:29:09 2025 GMT
            Not After : Apr 10 18:34:09 2026 GMT
        Subject: CN=DA7662DD7C76E91D037F90DC75F5617F7ACEDE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:4d:52:c2:49:db:b6:be:36:60:2a:58:80:
                    ce:d3:d2:ef:c5:25:4d:f0:86:70:29:23:e5:64:8e:
                    8c:bc:c0:75:b2:66:bd:de:00:f1:f0:01:6a:b3:40:
                    6d:0b:05:d3:0a:96:5a:f5:46:7f:84:fc:61:ba:fb:
                    f8:9b:a4:e8:bb:b8:f9:29:1a:32:f1:bc:ae:ca:db:
                    dc:5c:16:0b:33:62:46:34:f5:e0:bf:27:f1:29:1a:
                    20:65:df:30:18:5c:f5:69:68:50:aa:b0:ab:9f:a9:
                    08:1c:cf:2c:62:a8:63:40:e6:74:1a:91:7b:73:ad:
                    80:2d:f1:0c:08:4d:22:9b:79:d1:f1:b5:24:71:08:
                    a7:f0:50:d6:78:81:42:87:6b:3c:c7:e5:80:12:92:
                    72:89:dc:ba:6f:46:48:c3:96:15:b5:fc:df:1b:05:
                    36:c2:15:cf:86:93:0a:94:ae:bf:2f:57:cd:a6:56:
                    98:96:2b:6d:5c:d1:77:6d:0f:d5:7f:69:c4:ad:57:
                    8f:db:44:41:b3:f2:2f:1d:36:30:a3:c0:3e:ab:f5:
                    fc:7b:31:ef:b3:1b:9d:de:3b:f7:05:85:1d:f2:d4:
                    67:40:8f:62:4f:fb:5a:ec:d5:ee:69:39:2c:51:0e:
                    04:44:33:e4:a1:6f:5d:75:c9:66:81:c3:ed:4c:bd:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:62:DD:7C:76:E9:1D:03:7F:90:DC:75:F5:61:7F:7A:CE:DE:19
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363133633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:613c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:ec:87:04:1e:41:2d:d5:58:f8:7f:84:90:02:c2:07:71:
         16:08:f6:b6:67:0c:5b:00:12:be:60:cf:b8:4b:c4:13:3d:33:
         a5:5a:51:49:52:4d:19:de:cb:a5:71:ba:a0:9b:50:99:e7:f5:
         ab:25:ef:91:5b:6e:64:0e:21:cf:52:0b:25:5f:cd:aa:25:65:
         7b:72:77:ec:9b:d3:17:b6:41:cb:2e:4d:fb:e7:41:78:5b:32:
         4d:62:6d:c4:fb:93:46:ca:f9:d7:63:bb:d2:b8:fd:0a:ce:53:
         22:07:a6:de:b4:3a:46:a5:0b:2b:6c:70:c1:e7:7d:2e:ca:de:
         dc:e6:b0:18:ad:fd:27:25:97:b5:83:26:e1:ca:92:f8:27:ff:
         18:70:a6:f2:8e:8b:bb:9f:6a:71:a2:ad:80:f8:f0:ab:6c:f4:
         d5:d4:15:d8:4b:bf:cc:ae:61:03:d2:52:8e:a1:d4:46:1f:48:
         aa:5b:20:81:90:94:f5:a6:ec:f7:78:89:1e:3d:30:00:1a:87:
         69:ed:4d:c0:09:a9:c4:3f:78:8c:ff:16:a3:38:cd:fe:47:0e:
         02:ac:e0:07:78:cb:3f:01:38:31:3e:a3:66:a6:a2:fe:4a:6f:
         b9:19:71:cf:6f:89:79:4b:c7:a0:60:f7:b8:d2:b4:11:f5:92:
         7c:54:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----