Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363738303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363738303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          NU4MaoVHIFI03mgwqS5e3ohdJMeN4Y6BkNjdy/ckwyY=
Subject key identifier:   61:01:8E:29:62:8F:47:98:FD:E2:C0:27:2F:90:21:58:7C:2E:A3:4E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       74F904DAB2DE22AEE21D8C89DFC82ECC330A8889
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363738303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 16 Jan 2025 19:32:48 +0000
ROA not before:           Thu 16 Jan 2025 19:27:48 +0000
ROA not after:            Thu 15 Jan 2026 19:32:48 +0000
asID:                     16909
IP address blocks:        2a14:7584:6780::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:04:da:b2:de:22:ae:e2:1d:8c:89:df:c8:2e:cc:33:0a:88:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 16 19:27:48 2025 GMT
            Not After : Jan 15 19:32:48 2026 GMT
        Subject: CN=61018E29628F4798FDE2C0272F9021587C2EA34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:b6:cf:9c:ab:b1:69:96:d7:46:8a:53:33:
                    57:55:e3:0e:70:a1:99:d8:49:d8:cc:96:56:ec:7f:
                    ba:ee:b7:bb:0a:23:03:e0:67:a4:af:4c:ec:43:a7:
                    e4:fb:ee:3e:43:8f:f1:7d:6d:5e:6f:01:71:97:05:
                    a4:14:fb:83:d0:05:7c:e3:12:a0:19:03:16:ab:41:
                    64:a0:53:03:74:c6:2b:33:0d:0f:4a:06:d2:f1:02:
                    a6:56:96:e5:ea:e0:ca:ea:e1:7b:c0:8a:63:70:82:
                    03:71:9b:d5:9c:c8:f7:bf:e8:dc:f9:ab:3a:2c:5e:
                    41:dc:82:81:1c:28:82:de:3e:9b:bf:ca:12:51:19:
                    0c:70:91:b1:f9:df:98:69:59:b9:5f:4a:f5:70:cd:
                    a3:e1:3a:13:93:39:49:4a:aa:4a:8a:80:15:85:4d:
                    b3:76:52:22:5e:61:b6:6a:eb:15:7f:1e:47:18:fa:
                    95:dc:51:d1:76:fc:c1:9b:6a:24:5d:1b:aa:51:95:
                    fb:20:48:8d:b3:e7:b3:bf:e8:5e:8c:f4:87:fe:ec:
                    dd:76:b9:9b:99:80:50:32:92:af:1a:3e:3a:f5:97:
                    84:1f:52:c8:9b:9b:e7:49:4f:62:3a:63:d2:b7:b4:
                    06:56:e8:60:2a:5f:10:59:46:4e:18:e9:46:e3:c1:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:01:8E:29:62:8F:47:98:FD:E2:C0:27:2F:90:21:58:7C:2E:A3:4E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363738303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6780::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:78:64:1e:f2:4b:3e:52:54:2c:f2:d7:bd:c5:32:b3:d2:bf:
         2a:ec:13:ef:1f:80:41:95:9d:3e:f5:66:1b:c5:49:1c:1f:4e:
         5c:0f:fb:39:c0:74:f0:4e:86:a1:bd:2a:7b:fe:34:c7:99:d4:
         58:a6:ab:ce:d7:b6:25:0b:83:e6:49:b2:70:b4:bb:f3:bf:b8:
         b7:23:96:c8:77:82:23:51:1b:22:ac:92:bf:9e:ed:a7:1e:03:
         b4:09:75:54:44:59:67:3d:24:e9:51:71:7d:24:a3:5e:66:9a:
         7b:88:71:cb:55:ed:ba:76:f1:ae:6e:91:f4:cd:bf:18:71:49:
         15:2c:54:55:ee:b4:de:c6:f6:27:1e:7f:08:6e:19:56:78:86:
         0e:3f:33:f6:42:3f:84:64:0c:e0:25:72:4d:a0:99:3d:d4:2e:
         2c:d7:62:ef:d0:66:1e:7c:2f:3b:f7:64:23:d0:7f:51:00:21:
         82:3e:a4:26:26:59:b1:9a:63:5c:1e:5e:ad:62:6f:ba:b1:d9:
         3e:10:82:b4:8a:2b:73:d5:93:80:ea:ac:9f:98:c9:01:04:02:
         0b:69:63:2a:45:9c:28:f1:53:a6:a6:d0:4b:83:46:f5:0f:dc:
         42:4d:c3:07:e2:6e:34:16:f2:41:f0:5f:2f:ff:99:44:66:b8:
         ea:61:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:57 2025 by rpki-client