Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366162303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          a9s92dS/j6ltt5Urvv+Sa6FwMRroZuIkC5V4UBUQzz4=
Subject key identifier:   F8:12:EB:EE:1F:6C:44:72:47:C7:61:1C:BC:92:91:02:67:4D:32:08
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       56402C3C67847B1BB15E9AEA3B73202539262F20
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Wed 29 Jan 2025 17:52:59 +0000
ROA not before:           Wed 29 Jan 2025 17:47:59 +0000
ROA not after:            Wed 28 Jan 2026 17:52:59 +0000
asID:                     16909
IP address blocks:        2a14:7584:6ab0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:40:2c:3c:67:84:7b:1b:b1:5e:9a:ea:3b:73:20:25:39:26:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jan 29 17:47:59 2025 GMT
            Not After : Jan 28 17:52:59 2026 GMT
        Subject: CN=F812EBEE1F6C447247C7611CBC929102674D3208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:b4:55:3e:8a:77:40:6b:bf:39:5f:be:b5:
                    6a:25:6e:a8:80:41:34:ae:f9:71:1d:6a:6b:79:d5:
                    d7:a5:aa:c1:34:d7:2a:2b:98:2d:3e:73:33:b8:ce:
                    25:0f:4d:9e:ac:9e:11:7e:98:2d:0a:41:4a:20:bf:
                    5a:de:f8:1e:da:8e:22:0f:4b:f0:46:98:0b:09:25:
                    28:ec:d1:32:d7:3c:3e:b1:11:a2:77:b5:cb:99:f6:
                    2f:0a:5c:f3:d0:ad:d2:92:72:40:19:1c:46:24:ec:
                    20:01:57:12:85:ae:d3:37:23:94:d8:59:1b:ac:21:
                    02:92:a6:d3:36:7a:6d:3a:d0:e6:70:79:f4:f1:5c:
                    0f:42:bc:52:ed:88:71:25:0b:8b:40:8e:bb:15:9b:
                    24:08:6b:8c:4e:80:3c:3e:52:64:e6:d8:a0:34:d2:
                    7b:21:ae:b4:eb:c1:eb:a7:09:b3:5e:bc:d6:0c:32:
                    aa:43:d0:84:a3:57:16:9a:49:ab:30:8b:8c:24:a2:
                    db:f1:77:86:73:07:3c:e8:70:b0:c5:1c:e3:e0:d2:
                    f9:bb:6c:16:fe:49:6e:09:e9:b4:e1:03:7f:0d:b6:
                    6f:55:81:44:89:b8:0d:48:93:26:aa:7e:25:14:bd:
                    73:fd:35:84:c5:d2:3f:ec:01:49:91:dd:ea:d9:20:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:12:EB:EE:1F:6C:44:72:47:C7:61:1C:BC:92:91:02:67:4D:32:08
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6ab0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:9c:2f:ca:c7:5e:1a:e2:50:dd:4c:b1:51:d1:78:9c:40:
         40:71:d1:9b:89:15:4a:52:eb:46:fc:1b:a3:2e:6a:94:d2:1f:
         a1:ba:38:69:01:20:7a:b8:b6:40:8b:6d:0a:5d:80:3c:ab:c7:
         93:7c:21:a2:6b:34:d7:7b:c2:14:5b:9a:0b:28:db:78:18:e7:
         15:e1:0d:58:20:8b:5c:f2:95:df:0d:36:bc:fb:3e:03:24:42:
         16:8c:e1:52:ab:83:13:3b:c6:a9:ac:fb:2b:39:ba:14:f4:be:
         d6:9a:0b:48:c8:31:b4:c2:f6:02:cd:ea:13:3a:2d:68:1c:4d:
         17:a2:57:07:3d:80:a4:94:28:0c:96:e7:1c:fe:f5:89:c0:9b:
         73:b1:b4:7c:ed:a0:bb:ac:9f:36:5a:86:ce:3e:a1:1a:54:a7:
         05:7e:21:00:78:a2:24:75:1b:b2:90:32:33:15:c3:15:80:b6:
         21:e4:c2:5b:63:57:2f:cb:8b:6b:83:bc:55:9f:4d:52:fc:a1:
         b1:cc:e7:6c:3e:7c:f5:5e:df:89:c6:bf:c0:d6:29:bd:a6:0c:
         96:58:7a:bb:bb:2c:a4:b0:77:73:09:60:00:bc:6e:af:2e:e1:
         e7:54:57:fb:12:8d:8a:35:7f:d5:6f:7c:d6:96:c4:8f:8b:4f:
         77:f6:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:49 2025 by rpki-client