Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363937303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363937303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          I5R3NcgVWQbDJhcK/PMcUTPo1dH+Sj+e+MZFWJszpHc=
Subject key identifier:   60:4E:1F:41:A1:3F:94:47:80:93:84:2A:C7:56:97:D8:3E:2E:47:00
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       3041EE5F71FB3FC9497AB4444DEE9647C30748D7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363937303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 21:04:38 +0000
ROA not before:           Thu 19 Dec 2024 20:59:38 +0000
ROA not after:            Thu 18 Dec 2025 21:04:38 +0000
asID:                     16909
IP address blocks:        2a14:7584:6970::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:41:ee:5f:71:fb:3f:c9:49:7a:b4:44:4d:ee:96:47:c3:07:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 19 20:59:38 2024 GMT
            Not After : Dec 18 21:04:38 2025 GMT
        Subject: CN=604E1F41A13F94478093842AC75697D83E2E4700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:6b:93:40:66:a5:38:b0:02:e3:f3:42:1f:
                    41:aa:3c:0f:b3:44:34:ec:d4:a1:7f:e3:e9:b3:1a:
                    91:d4:55:fb:be:09:1e:4c:6e:57:60:97:1b:00:08:
                    75:f3:d0:b4:85:ba:7a:93:d9:ba:13:74:22:7d:e2:
                    5f:e2:30:fc:e0:5f:4d:20:f1:b2:f8:42:86:b3:c5:
                    ba:1f:96:63:b0:cf:27:34:ad:b6:b5:68:c4:26:16:
                    40:c3:1e:ec:22:25:90:1e:89:73:fe:8f:af:92:cd:
                    55:9b:3e:02:7e:65:6d:c0:3b:9e:3b:fe:98:e6:4f:
                    49:ff:04:62:51:77:ef:30:19:3b:74:d8:22:c7:c0:
                    16:04:39:ec:4e:fd:38:2d:51:e3:3c:ee:ec:56:29:
                    42:38:21:3e:8b:f6:75:33:7e:80:79:ba:4c:12:89:
                    71:88:4a:eb:ce:d0:8e:f7:0c:d8:e5:eb:ea:38:7c:
                    9c:bf:f2:67:ab:a4:ad:71:b5:37:c9:53:62:e6:5c:
                    23:96:41:0c:c2:d0:e7:23:99:98:5b:e5:fc:4c:84:
                    d7:f0:fd:f2:3e:1a:a3:47:31:1b:be:48:ff:62:68:
                    49:48:00:fe:7e:f1:21:2c:fe:16:51:fb:55:1e:bd:
                    ad:e0:e2:0d:85:18:af:94:31:79:0d:d1:00:64:7b:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:1F:41:A1:3F:94:47:80:93:84:2A:C7:56:97:D8:3E:2E:47:00
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363937303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6970::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:66:01:42:02:33:37:4a:66:d3:b6:2b:ca:d2:37:1d:98:
         1d:8d:d8:c9:ea:3c:27:26:c4:88:97:f2:d3:d0:cd:ee:82:64:
         bb:72:7f:6a:6c:37:6e:5f:e3:68:92:2c:a8:43:da:3d:e5:42:
         73:55:26:19:9e:73:3a:4e:22:00:03:2a:0e:3c:67:39:2e:23:
         d6:67:2f:6b:09:9b:47:45:ed:28:de:cc:56:23:c9:21:38:6b:
         63:a3:88:a5:97:3f:7d:2e:08:9a:44:dc:80:c5:a7:47:51:08:
         70:47:1b:63:6c:dd:b5:11:7c:56:e0:c1:ec:ca:6a:7d:97:a8:
         97:31:df:69:4a:c7:bf:18:e0:bb:12:db:08:f9:17:8f:c9:48:
         f7:70:21:78:e4:e9:52:81:19:de:b4:b8:bb:a8:9d:f7:d5:b2:
         93:dc:f0:a4:b3:f7:3f:8b:8b:d6:44:c6:f1:ea:04:99:79:ba:
         a0:f5:0f:52:36:a9:13:87:78:10:29:39:69:dc:9d:9b:f6:ea:
         0d:69:e8:1f:e5:5b:a1:5b:ae:21:52:6c:e5:5c:df:96:62:5f:
         28:1c:7e:41:ac:b1:c8:15:fa:ad:89:72:0f:4d:f9:c2:46:37:
         e1:a0:61:e9:fd:eb:b3:3c:29:01:21:e8:e3:a9:6c:e8:e6:f3:
         05:72:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----