Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366135303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Hbf14i5jJOfD0ZuPHrdtuqfF53qpuSILhZq0SEEmzro=
Subject key identifier:   97:95:71:91:E0:B5:8F:C3:BF:9E:47:C7:C7:4E:1B:7A:32:52:11:82
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       225D1687FD6FFCB1B8C6687C5925DBC5607DD7A7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 29 Jan 2025 17:52:13 +0000
ROA not before:           Wed 29 Jan 2025 17:47:13 +0000
ROA not after:            Wed 28 Jan 2026 17:52:13 +0000
asID:                     16909
IP address blocks:        2a14:7584:6a50::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5d:16:87:fd:6f:fc:b1:b8:c6:68:7c:59:25:db:c5:60:7d:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 29 17:47:13 2025 GMT
            Not After : Jan 28 17:52:13 2026 GMT
        Subject: CN=97957191E0B58FC3BF9E47C7C74E1B7A32521182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:66:a3:cb:f0:7f:e5:58:64:18:b7:32:a6:
                    ca:82:b1:bc:06:c1:c5:ee:ab:91:61:76:9e:b1:83:
                    e9:9d:92:3f:b8:bb:31:4e:a2:c4:52:a8:40:9c:9e:
                    2c:41:b3:47:46:95:6d:ed:92:88:80:90:82:1b:4d:
                    d5:94:4d:47:d6:bc:c4:5c:37:5d:d7:7f:f2:c4:f9:
                    c7:bb:bd:c4:30:a3:fe:b2:1b:8e:7c:32:50:dd:92:
                    0f:fc:8a:c8:6b:81:ea:02:6d:89:c4:2f:46:59:d1:
                    95:eb:89:af:ff:f7:39:4b:a4:d6:11:af:3e:db:91:
                    5e:96:55:ea:45:f6:bd:be:2c:3f:c1:eb:6b:09:9a:
                    5e:a7:0e:8b:02:57:82:c2:dc:41:de:aa:e8:f7:cb:
                    ea:6c:41:91:9b:21:09:f0:f2:b4:d6:2a:70:49:11:
                    fe:c3:51:af:48:6c:33:f6:79:03:c3:c8:8c:aa:f5:
                    55:d4:df:e6:ad:b0:00:c3:ae:f3:df:d4:50:4d:a3:
                    37:a0:a6:31:e7:c2:2a:08:24:a5:53:db:25:67:6a:
                    2e:1a:76:52:9c:14:8e:87:71:c1:c2:6e:40:63:82:
                    8e:a3:fd:25:cc:d7:c9:f4:d9:a5:2b:4d:db:a5:6a:
                    90:61:c3:66:4f:4a:bf:04:5d:e4:e6:48:b4:f1:cd:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:95:71:91:E0:B5:8F:C3:BF:9E:47:C7:C7:4E:1B:7A:32:52:11:82
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6a50::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:ef:39:cd:c9:4b:f1:96:c3:76:2c:11:35:d1:e4:0b:b0:
         83:cf:73:0e:3e:b6:56:ee:0b:b1:5e:9d:7b:58:c7:44:07:cb:
         67:5c:81:60:5d:56:da:e4:3c:fb:3d:b3:69:a1:54:0d:1a:91:
         62:76:e7:59:ea:c8:9d:9b:c5:04:0e:29:8c:d2:86:34:60:4a:
         09:4b:3f:a2:b8:57:6a:03:eb:01:b9:8e:26:07:24:f7:f1:42:
         37:31:9d:9f:70:fb:00:b7:a8:d7:0a:7b:85:b2:c5:7e:cf:c0:
         99:9d:a0:f5:a7:e0:80:3e:80:23:48:98:74:19:38:88:23:66:
         af:e1:a7:79:bf:e7:1a:65:54:bb:3c:b2:a2:1a:8b:18:43:b9:
         6b:4b:86:ef:5f:0f:b2:b2:1a:ec:85:3a:ea:a0:e8:42:75:da:
         0f:fd:fe:62:c0:f7:c5:8e:2a:49:63:98:ba:8e:28:b3:ff:1a:
         10:dd:b0:82:be:cf:f9:3c:2f:00:ed:6a:1a:0e:c9:0d:70:b6:
         8f:c9:ef:07:8a:39:d7:f0:1a:1c:e1:bf:52:84:ea:6a:94:84:
         a3:95:c9:38:2a:a7:e4:46:bc:8f:63:84:18:1c:e2:61:69:5c:
         dd:12:80:da:60:98:4b:99:4c:dd:5b:e3:da:37:b8:78:e2:56:
         d2:be:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:11 2025 by rpki-client