Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
File:                     AS399159.roa (raw, json)
Hash identifier:          QtXKZeHz/6q9YUXQ1JeNJwTMfytTB7Hp/+JuONig1Bo=
Subject key identifier:   75:D3:50:23:A0:60:38:BF:2F:D8:DE:2B:54:C1:B4:F9:D2:E4:8B:FE
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       16AA07E092C1CF571E225A097A8459AEF0E8FCA8
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
Signing time:             Sat 07 Dec 2024 12:13:26 +0000
ROA not before:           Sat 07 Dec 2024 12:08:26 +0000
ROA not after:            Sat 06 Dec 2025 12:13:26 +0000
asID:                     399159
IP address blocks:        2607:f740:d:32::/64 maxlen: 64
                          2607:f740:d:33::/64 maxlen: 64
                          2607:f740:d:34::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:aa:07:e0:92:c1:cf:57:1e:22:5a:09:7a:84:59:ae:f0:e8:fc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Dec  7 12:08:26 2024 GMT
            Not After : Dec  6 12:13:26 2025 GMT
        Subject: CN=75D35023A06038BF2FD8DE2B54C1B4F9D2E48BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:6e:e6:c1:e7:6b:ff:c7:10:cf:7a:de:57:
                    63:a1:f6:81:8a:20:26:77:80:2d:00:9b:fc:1a:62:
                    6d:0d:1f:74:07:83:ff:51:ad:e5:1d:9a:25:ff:0c:
                    51:27:07:fc:94:80:75:9a:8c:28:57:49:d4:de:f4:
                    6e:e4:d6:51:1f:98:7f:84:6b:fd:1d:42:23:c9:2e:
                    27:61:3d:3d:79:d6:99:32:4d:20:64:9e:99:76:70:
                    ee:91:d2:0a:5a:2c:09:43:e5:10:b7:f3:be:8e:64:
                    c4:b4:b5:35:0f:a5:56:64:0a:69:55:05:f3:25:a4:
                    74:a4:6e:dc:6d:2d:3d:f1:b9:ba:80:f5:06:38:72:
                    83:ed:b8:69:7f:9d:8b:c7:8e:de:e9:81:1d:48:da:
                    d4:6d:b0:ba:0f:28:af:55:85:35:c2:7c:42:53:dc:
                    95:26:38:c2:72:fb:68:aa:9c:47:06:cd:69:3f:5b:
                    e8:47:5d:90:50:24:cd:c4:af:a2:0e:a2:d2:16:d5:
                    0f:d4:e4:78:dc:80:5b:1e:a1:e6:72:73:65:48:83:
                    d5:2d:a9:27:66:bd:13:e2:48:6a:4d:99:59:6b:eb:
                    b4:3f:1a:4e:5a:68:a1:4a:2b:89:e0:b6:44:c8:ad:
                    fe:70:b9:a5:9e:eb:00:c4:21:4d:5e:08:cf:05:38:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:50:23:A0:60:38:BF:2F:D8:DE:2B:54:C1:B4:F9:D2:E4:8B:FE
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:d:32::-2607:f740:d:34:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:9e:0b:87:d5:7a:33:bb:2d:fb:43:37:45:22:70:9f:93:
         6f:bc:49:87:ca:21:3d:e4:5d:5a:23:0e:34:34:0c:f5:d2:2a:
         4d:11:0e:04:eb:9e:8e:61:77:30:4f:d0:16:b2:f0:69:53:bb:
         9e:fc:6d:a9:c7:ca:96:1e:6b:ec:08:b1:68:6f:2c:8a:4f:26:
         74:71:74:bd:4f:ff:6d:75:a0:b0:68:a9:bb:5d:aa:44:12:3d:
         07:22:5e:44:76:62:af:53:e4:f9:53:7b:cb:9b:33:fb:bb:21:
         23:1f:7f:f9:0d:ab:6d:7a:b2:4f:ad:ac:53:5a:25:2a:77:92:
         94:89:1b:42:90:7a:10:2b:00:2c:2e:61:ad:d3:e4:26:8c:e2:
         03:36:75:99:1d:41:7f:6a:91:92:80:69:e4:8b:66:d0:5b:49:
         7f:2d:3e:8a:c2:f7:67:81:5b:cb:8d:2b:5c:24:73:99:b8:b4:
         bb:d8:a4:bf:9e:14:0c:ad:a5:32:5e:2b:d7:ef:dc:cb:7c:4a:
         1f:ee:c6:99:10:56:b4:28:cf:be:23:e3:26:ef:71:3c:ff:2b:
         52:10:17:7d:49:e9:83:9a:f9:f4:cf:df:90:80:44:3b:44:da:
         9f:00:77:9e:12:30:8c:14:d1:23:c2:9b:eb:d6:38:2b:d2:09:
         fc:9c:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----