Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366130303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          ec9S9nTcZLP9PCW+ecrM6kmXGm51Vkz4tcNfch6KFVk=
Subject key identifier:   EE:8D:F6:69:80:22:03:FC:7B:E3:E4:21:F7:E6:9D:72:5A:55:14:49
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       32C9F1E82A5B600B73A7D913D453AFA711C42339
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 24 Jan 2025 11:28:37 +0000
ROA not before:           Fri 24 Jan 2025 11:23:37 +0000
ROA not after:            Fri 23 Jan 2026 11:28:37 +0000
asID:                     16909
IP address blocks:        2a14:7584:6a00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c9:f1:e8:2a:5b:60:0b:73:a7:d9:13:d4:53:af:a7:11:c4:23:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 24 11:23:37 2025 GMT
            Not After : Jan 23 11:28:37 2026 GMT
        Subject: CN=EE8DF669802203FC7BE3E421F7E69D725A551449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:19:73:42:a4:3f:67:e6:17:f5:68:3f:5b:
                    86:18:56:41:24:75:10:05:db:db:34:28:8a:fa:d3:
                    10:c3:73:e9:ec:8a:ef:61:02:14:36:1d:b3:3f:89:
                    1a:34:c9:04:39:da:fa:56:1c:bf:32:14:cb:4c:a9:
                    29:1c:f4:46:c0:91:eb:9a:28:f4:7e:1a:16:32:2c:
                    93:2c:ac:78:5f:36:25:18:b7:dc:3e:48:5f:04:d4:
                    92:bd:f6:c2:70:db:bd:5f:2a:7d:65:46:af:16:82:
                    80:91:cc:d8:8a:8a:c2:d5:13:7a:71:d5:ee:6b:64:
                    2a:55:fe:1c:ce:90:6c:bc:2f:b6:f3:21:e5:bd:39:
                    cc:bc:56:4f:ba:4f:0f:ed:7a:f8:74:03:f4:05:b9:
                    2c:b9:63:3f:d3:c2:d9:f7:12:28:a3:7d:04:78:6a:
                    4d:4c:30:43:b7:be:0f:31:c0:c2:c2:bb:d3:41:de:
                    24:86:73:9c:48:72:d1:aa:59:21:06:89:d9:a9:c2:
                    fe:7c:3a:a9:39:68:d8:ee:50:32:e5:40:1a:74:c4:
                    f9:dd:ec:94:b2:10:17:98:08:d5:c5:3e:b0:24:c8:
                    66:2b:1e:78:31:48:dc:83:8d:fd:c8:98:d1:49:15:
                    e4:11:ec:f3:29:58:a7:0a:b2:12:9a:aa:be:71:86:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:F6:69:80:22:03:FC:7B:E3:E4:21:F7:E6:9D:72:5A:55:14:49
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:16:4f:d6:f1:b7:4a:c6:b5:31:ca:51:c8:a6:6f:05:d9:31:
         14:ad:fe:82:e7:3f:05:91:31:e5:78:e8:74:0e:07:c7:20:35:
         9f:2e:23:07:dc:3a:6c:42:c1:eb:94:a0:2c:cd:63:45:ee:55:
         be:29:04:69:08:b0:21:55:19:e6:a2:35:6c:e7:dc:cf:4c:58:
         e4:57:3d:38:78:b3:e3:f1:72:bc:37:0c:07:ba:be:d3:c3:3e:
         74:e7:46:18:18:3e:26:01:e8:89:77:d3:78:cd:e4:ca:f8:6c:
         9f:8a:0c:f1:a4:a8:9b:12:f6:f7:eb:9d:37:53:b6:80:79:7e:
         29:7b:b0:26:0f:3b:2a:8e:40:9d:98:55:69:b5:bd:4d:3f:a4:
         1d:a8:11:0f:00:5c:83:03:e8:82:09:68:2f:0d:ca:2b:c0:69:
         de:e6:14:f4:60:6a:cc:c6:7b:1c:6b:a2:8a:d6:89:0a:68:0a:
         2e:c0:db:ff:4c:30:c2:b6:b7:50:36:a7:ab:dd:e8:a6:e0:3d:
         0e:01:0c:db:f1:40:45:e7:2c:0b:75:a5:19:a9:7c:82:65:c4:
         bf:33:0f:1d:65:eb:55:14:0e:11:61:0a:b4:c3:e8:bf:7b:8a:
         fc:31:2e:a0:c9:c2:88:43:9d:4e:39:03:75:2a:46:d2:49:fc:
         77:32:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:52 2025 by rpki-client