Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363565303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363565303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          8xWIyWmS0qPab6eockZ2MGRAbN7fvwliVMla/XtJNzI=
Subject key identifier:   DE:2D:17:15:B8:FA:AF:A6:6D:23:A9:A4:7B:71:AB:DE:52:6A:7E:C4
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       1816B9ED7B3CEF04DBAAC9E2030CCD69E2A23219
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363565303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 24 Dec 2024 20:45:41 +0000
ROA not before:           Tue 24 Dec 2024 20:40:41 +0000
ROA not after:            Tue 23 Dec 2025 20:45:41 +0000
asID:                     16909
IP address blocks:        2a14:7584:65e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:b9:ed:7b:3c:ef:04:db:aa:c9:e2:03:0c:cd:69:e2:a2:32:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 24 20:40:41 2024 GMT
            Not After : Dec 23 20:45:41 2025 GMT
        Subject: CN=DE2D1715B8FAAFA66D23A9A47B71ABDE526A7EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:b4:bb:6d:cd:d4:ec:d0:f0:af:ec:f9:4b:
                    4f:d3:55:64:af:d0:f6:e9:81:fd:ac:32:6e:8d:5e:
                    82:d8:24:0b:9d:02:7e:f2:41:5b:d0:3a:0c:33:98:
                    64:88:36:e0:37:72:c2:c9:2c:32:37:3b:e5:25:93:
                    0c:2d:65:ee:56:86:9a:08:ac:a9:74:b0:8f:06:44:
                    7d:2e:a7:cd:3a:65:2b:f6:ce:27:d7:c9:e4:52:54:
                    e4:5a:bd:13:59:02:e8:98:94:9b:8d:77:e9:1f:9a:
                    73:e9:6d:d4:97:8a:4b:3f:06:a2:b5:9f:0b:f2:b8:
                    4d:c9:0a:1d:86:9c:54:0f:23:8c:08:78:86:ee:0f:
                    ae:fa:38:03:7b:7c:2e:35:6d:7c:d4:34:e3:80:75:
                    a4:a2:f2:db:4f:a0:af:f5:d1:74:7e:aa:35:fa:59:
                    f0:c1:67:af:bb:df:85:fd:f9:20:0a:ba:96:49:9e:
                    34:aa:61:4f:83:b2:de:5f:02:d8:3a:d7:18:15:de:
                    09:73:7d:64:93:e9:67:23:dc:5c:8b:4a:17:81:72:
                    b2:ba:10:69:0a:86:64:24:21:72:e3:bc:58:44:1c:
                    95:24:a1:bc:db:21:55:7c:61:a6:1a:eb:a6:75:0e:
                    e8:42:5b:f7:bc:35:99:31:6f:7e:97:c1:46:c7:1c:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2D:17:15:B8:FA:AF:A6:6D:23:A9:A4:7B:71:AB:DE:52:6A:7E:C4
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363565303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:65e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:c6:52:60:b9:2a:de:cc:f4:8f:76:e3:af:7e:3f:c2:9e:
         ee:93:fc:f5:80:ad:ab:c4:d6:06:08:01:d6:4f:d1:d4:b8:04:
         8e:f5:e0:35:88:8a:bd:32:b8:66:2e:7d:dd:e7:3d:46:5a:1a:
         d3:1f:71:0a:e1:f4:34:63:7d:a9:37:ac:6e:c4:c6:b5:5a:69:
         20:34:d6:dc:c9:78:38:68:48:64:ef:c3:3a:59:6f:ae:d5:55:
         ab:8c:a1:f7:78:14:f4:13:e1:c3:6f:55:9c:fa:be:ac:39:3c:
         8e:df:c1:71:42:6f:b8:2e:22:1b:c8:da:25:7b:77:3f:e3:9d:
         d3:9c:8f:74:12:fe:bf:76:c1:3e:a2:59:68:ab:16:d0:51:d7:
         7d:5d:ef:c6:2e:55:c3:2b:64:5e:22:42:d9:c1:53:01:22:90:
         3a:c2:34:90:9c:f1:dc:02:ae:90:f8:e9:da:85:cb:31:2f:29:
         4b:98:69:1e:4c:19:9f:b1:e7:bd:08:e5:24:ac:e4:3e:23:88:
         74:2e:b7:20:fb:c7:7b:24:d7:15:20:fa:e8:23:48:e8:c1:fc:
         33:0c:b4:c4:c6:62:f7:76:3c:a8:49:ed:10:6d:d2:0c:d9:47:
         a5:49:07:cf:06:74:dd:86:fe:1e:6f:73:55:32:39:5d:e1:21:
         0f:ab:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----