Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a366433303a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          2nyCh6DkmeSno5mTIEsfcpGPDAFuBmQlL3ZLbQVhsFs=
Subject key identifier:   86:88:DB:64:1B:98:FE:9B:ED:48:CF:D1:38:D7:B8:19:B6:10:4B:69
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6E50AF91C90D00B7F042132418E48BA4B8C5DE3B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sun 23 Mar 2025 09:40:54 +0000
ROA not before:           Sun 23 Mar 2025 09:35:54 +0000
ROA not after:            Sun 22 Mar 2026 09:40:54 +0000
asID:                     401507
IP address blocks:        2a14:7584:6d30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:50:af:91:c9:0d:00:b7:f0:42:13:24:18:e4:8b:a4:b8:c5:de:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 23 09:35:54 2025 GMT
            Not After : Mar 22 09:40:54 2026 GMT
        Subject: CN=8688DB641B98FE9BED48CFD138D7B819B6104B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:29:d2:f3:84:02:94:99:b6:16:c4:5f:39:
                    df:25:a0:49:cc:33:f1:aa:a6:c8:63:36:65:7c:97:
                    1a:b3:f4:bc:27:8f:e9:e8:36:9c:b8:69:bb:e8:be:
                    71:a5:05:f6:0b:bb:0c:ec:aa:4c:34:84:1a:04:97:
                    87:39:53:08:71:a7:5a:2e:78:20:69:64:2e:1c:99:
                    09:bf:65:1c:4c:54:c5:d3:b3:95:aa:7c:10:3e:cd:
                    9f:93:93:bc:01:b7:be:5b:4b:b7:93:3b:9b:9d:9d:
                    a5:04:6d:4b:a9:27:e3:ec:7c:93:0b:8e:eb:ab:ce:
                    76:a6:48:e9:3e:5f:67:a6:7d:97:6a:ff:40:4e:ea:
                    ce:15:db:38:d4:26:19:dd:48:17:6c:9c:ba:9d:27:
                    e6:b7:b5:f7:91:04:28:0d:5f:77:a5:a3:20:36:e5:
                    c6:30:e7:08:cb:11:ef:c8:39:5a:aa:ab:16:30:68:
                    15:ec:9a:04:62:d4:8c:9d:63:b9:ec:ca:d8:94:34:
                    c4:b3:59:f3:4c:40:38:77:f7:a9:86:4b:8d:ac:62:
                    27:58:3f:05:db:56:d5:e6:9a:73:00:05:42:12:bb:
                    5d:b1:e8:7c:be:d9:e0:ca:d3:1c:65:a4:65:f7:4b:
                    92:c9:01:14:cc:3c:1e:a0:4e:ee:88:a6:86:c4:01:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:88:DB:64:1B:98:FE:9B:ED:48:CF:D1:38:D7:B8:19:B6:10:4B:69
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433303a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6d30::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:33:63:dd:ff:83:c2:9c:80:ba:5a:3a:c1:e6:ad:f8:6c:2a:
         63:ba:ae:0e:b3:2a:1f:ca:17:a8:b0:da:b8:8f:f6:ab:1c:1f:
         cb:9e:25:aa:dd:80:83:b7:a4:ab:ac:06:e9:e2:84:13:02:7f:
         77:36:24:58:8e:8f:67:68:93:fc:3a:11:0d:65:56:b7:7d:42:
         20:c8:6e:6c:8a:61:df:45:04:8b:6d:08:93:4f:e5:0c:dc:2d:
         33:45:a1:a7:1f:4e:f6:3f:f2:8b:8b:13:7d:64:fb:a2:63:4d:
         5f:d2:69:ef:08:80:a7:f2:35:31:f0:9c:4d:17:bb:f4:15:6c:
         fd:d2:98:8c:e3:b6:66:e5:82:6a:7a:99:6e:6b:62:7c:75:a1:
         6c:98:5c:f5:12:87:84:6d:a6:03:b8:b4:bf:d9:ed:c7:76:e7:
         36:f8:2e:61:c9:6d:53:54:63:9c:65:55:8e:9e:12:bd:81:ff:
         11:3f:f3:9e:6c:80:4f:28:fd:69:3f:0d:53:37:9e:82:eb:6d:
         cb:d7:d4:7e:fe:77:76:65:9e:fe:7c:4d:fa:80:1c:73:4b:d8:
         ee:ef:20:99:b0:42:42:2a:9c:31:28:e7:0f:b1:f0:bc:2d:de:
         f2:5c:12:2b:84:43:b6:e6:f8:a9:eb:ab:5c:b8:63:6f:96:a4:
         0b:ac:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----