Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149835.roa
File:                     AS149835.roa (raw, json)
Hash identifier:          0hlLG70Yrkgk027qB+DDPQZI8NlWqcttNNBGFAAUIDs=
Subject key identifier:   FE:1C:33:05:99:F2:8D:CC:E0:13:0C:B7:0B:2F:A5:B3:40:BF:E0:4D
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7AF1D7141EDBCA5CB03C6F618DDE6D517622BFC2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149835.roa
Signing time:             Wed 26 Mar 2025 22:14:20 +0000
ROA not before:           Wed 26 Mar 2025 22:09:20 +0000
ROA not after:            Wed 25 Mar 2026 22:14:20 +0000
asID:                     149835
IP address blocks:        2a06:a005:10a0::/44 maxlen: 48
                          2a06:a005:2870::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f1:d7:14:1e:db:ca:5c:b0:3c:6f:61:8d:de:6d:51:76:22:bf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar 26 22:09:20 2025 GMT
            Not After : Mar 25 22:14:20 2026 GMT
        Subject: CN=FE1C330599F28DCCE0130CB70B2FA5B340BFE04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:d3:be:d0:be:74:e7:6f:bd:d4:f2:56:50:
                    38:e5:ff:dc:98:bd:7e:6e:9c:37:14:1d:51:d3:3e:
                    f6:f1:b9:37:5e:19:42:37:1c:77:fe:5c:66:42:16:
                    09:fb:f9:cb:3f:12:46:44:6c:99:d4:f5:da:78:1d:
                    e5:cf:88:83:55:5a:20:8b:3f:55:e7:9d:d8:d8:0a:
                    15:b3:53:e1:16:43:07:6c:f3:dc:7b:90:35:a5:c0:
                    a0:b2:26:2f:62:b7:10:12:99:58:1a:a8:f1:e7:40:
                    ef:48:bf:4c:ed:50:4c:e9:14:c9:9e:46:a5:55:e0:
                    94:b6:1d:bf:e5:35:bc:9d:84:d9:e4:33:3d:89:37:
                    84:ad:41:e1:92:e5:15:48:54:3a:3c:b6:17:34:f9:
                    66:42:d3:83:fa:ef:b4:6d:9c:96:3a:3b:1c:e6:52:
                    2f:7d:8f:98:04:60:14:35:3d:26:60:0e:1e:7c:1f:
                    a1:46:ee:5a:df:94:fe:65:24:92:aa:ba:9e:a9:e9:
                    09:1e:66:ab:c0:49:ef:bc:ec:31:2b:1c:44:de:c6:
                    38:d1:49:0f:b6:0b:f1:8c:44:59:78:80:60:ae:b1:
                    8d:93:c3:95:10:31:e3:b1:70:e3:5e:85:8e:cf:da:
                    9e:45:38:0b:ac:9a:8e:f7:66:04:40:bf:da:57:aa:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1C:33:05:99:F2:8D:CC:E0:13:0C:B7:0B:2F:A5:B3:40:BF:E0:4D
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:10a0::/44
                  2a06:a005:2870::/44

    Signature Algorithm: sha256WithRSAEncryption
         d3:f9:0a:37:a8:6b:d6:64:2c:7b:1b:aa:e3:39:4b:df:bc:bc:
         af:90:42:9e:56:b1:37:c5:0c:76:b9:b1:25:02:23:4e:5e:6c:
         f6:a2:41:0c:c5:30:fa:98:a8:da:c4:01:98:ff:c9:32:43:e7:
         d4:e7:2a:bc:b3:b5:ed:08:86:3f:eb:ab:dd:c9:d8:e6:9d:5d:
         3a:b0:84:78:ea:4f:03:e2:95:f4:44:f4:22:59:07:09:4f:33:
         1a:de:d6:00:26:04:fe:f6:43:49:d1:6d:91:a5:d6:59:81:f0:
         51:c4:50:e4:5e:21:65:4c:f8:9b:0f:a7:22:31:5f:4b:8d:7f:
         0a:e3:80:ef:50:87:a4:86:5e:ce:48:da:f9:44:43:a9:9e:7d:
         07:1f:04:6e:b2:3a:7b:30:e6:a2:60:41:c0:8b:65:8b:f7:db:
         17:35:f1:f3:12:dd:87:05:36:1d:ba:42:83:da:33:f2:09:6d:
         a0:6b:4c:cd:03:a8:86:6a:3c:04:04:d5:db:3c:3f:a8:3a:aa:
         72:11:d5:c0:8d:5f:dc:67:44:e8:7f:4b:69:3f:88:ee:e1:2c:
         72:f4:20:88:5a:a9:9b:90:65:20:32:6b:22:3b:7b:ab:01:7e:
         19:2b:86:c4:dc:a6:1b:d3:d1:ab:c4:7d:b3:e4:86:66:71:46:
         15:3c:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----