Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363134303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          eKNQDfKzm4QJMCgGtcJJ+Hvss4zV+VlYEQp0vi4Jf4Q=
Subject key identifier:   95:A4:AE:63:3F:D2:25:74:4F:A1:EC:C7:2A:53:82:E1:BA:B7:1F:B8
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2C99392D99991E1B1B8F419863328A71FC7AD349
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 21:04:46 +0000
ROA not before:           Thu 19 Dec 2024 20:59:46 +0000
ROA not after:            Thu 18 Dec 2025 21:04:46 +0000
asID:                     16909
IP address blocks:        2a14:7584:6140::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:99:39:2d:99:99:1e:1b:1b:8f:41:98:63:32:8a:71:fc:7a:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:59:46 2024 GMT
            Not After : Dec 18 21:04:46 2025 GMT
        Subject: CN=95A4AE633FD225744FA1ECC72A5382E1BAB71FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:35:6b:32:94:8e:a9:15:98:f0:0a:45:92:
                    6d:97:e8:17:29:67:95:cb:ec:2e:9c:cf:ff:6c:84:
                    44:2f:12:fc:bb:bd:b5:87:1c:9c:e7:cf:1d:89:2d:
                    ac:26:90:dc:6c:0e:7e:2a:3a:ce:11:e5:59:82:90:
                    a3:fe:d8:b3:21:56:0a:3f:7a:e0:53:b5:45:40:81:
                    be:b1:d1:31:76:4a:cb:a1:15:b5:bc:ed:bb:9c:29:
                    8c:61:0e:23:8b:a9:34:7c:53:d5:c5:64:fb:a5:ed:
                    9e:b7:93:77:2f:07:59:d7:be:99:6d:28:e0:0c:39:
                    af:f1:90:ab:a1:bd:6d:43:97:b5:de:8f:4b:77:36:
                    f1:f3:0b:46:95:8e:fa:3c:f0:ab:cb:f6:cb:1e:c2:
                    a9:ac:00:e2:59:4c:4c:da:31:e8:6e:37:42:64:c2:
                    fd:aa:23:c5:5b:48:f1:d3:79:35:d1:b2:c7:cd:d2:
                    09:1e:4b:d7:75:ee:b7:d4:7b:35:92:e9:de:a4:4e:
                    61:b8:fd:a1:0b:4a:f0:c5:dd:b7:cb:82:fd:b0:09:
                    70:6c:af:8c:c5:2f:81:1c:ce:46:8e:52:3a:5d:c1:
                    9d:24:88:8c:a0:64:f8:b9:02:0b:8f:51:ea:fc:82:
                    35:3a:77:91:27:0b:8a:e7:6d:29:17:80:79:4b:54:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:AE:63:3F:D2:25:74:4F:A1:EC:C7:2A:53:82:E1:BA:B7:1F:B8
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363134303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6140::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:28:97:16:ab:48:71:4d:93:74:3f:46:20:fc:19:1b:22:86:
         ef:5b:35:d8:39:0e:a7:d8:12:ee:1f:d1:bf:1e:dd:b9:1a:dc:
         f7:46:39:20:05:3c:dc:2d:8e:8c:23:ba:68:38:d0:d2:8d:f0:
         07:31:ab:86:29:3a:64:e0:d7:be:17:19:96:20:0f:0c:f3:58:
         c0:14:ff:77:82:51:0b:de:b5:b1:20:45:47:2e:65:09:0c:53:
         0f:5b:64:f4:15:54:47:c4:3e:c4:b2:27:98:13:f9:81:5f:37:
         16:02:ae:24:ab:e0:d2:6a:a8:a4:a6:8c:1e:b2:2d:44:8b:8d:
         9a:08:8b:1b:00:4f:6f:c3:0f:88:56:88:3e:b0:25:c7:78:96:
         85:6f:9c:28:ee:b1:1f:94:6a:95:9f:a9:58:b7:f9:6b:c6:6e:
         38:17:51:88:a3:66:fe:70:4c:ea:ec:fd:7e:35:e8:6b:03:59:
         9c:2e:0c:e3:90:e3:bb:cb:72:c4:6a:31:b6:ad:17:d1:0d:e9:
         0d:62:65:6e:c6:57:3c:df:f6:5e:18:58:c1:b3:13:69:85:af:
         9a:9e:f3:61:3b:ca:0a:d7:01:6d:91:e3:89:1c:ad:d2:ab:fc:
         1e:2d:6b:16:a9:c7:18:fd:8b:9d:fe:69:93:78:2e:f9:0b:4e:
         ef:66:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----