Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200536.roa
File:                     AS200536.roa (raw, json)
Hash identifier:          NhvWMZX3OqrbMYWPNkyEomMY68TsjXHsDkLoxA7qu9U=
Subject key identifier:   9C:6A:D2:7B:76:69:18:7A:1C:3A:3C:77:00:43:84:91:56:2A:F8:3A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3FBD2F65E4A94A2AFBE20FE73527DE321BDDEF00
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200536.roa
Signing time:             Wed 26 Mar 2025 22:14:20 +0000
ROA not before:           Wed 26 Mar 2025 22:09:20 +0000
ROA not after:            Wed 25 Mar 2026 22:14:20 +0000
asID:                     200536
IP address blocks:        2a06:a005:28f0::/44 maxlen: 48
                          2a06:a005:2950::/44 maxlen: 48
                          2a06:a005:2980::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bd:2f:65:e4:a9:4a:2a:fb:e2:0f:e7:35:27:de:32:1b:dd:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar 26 22:09:20 2025 GMT
            Not After : Mar 25 22:14:20 2026 GMT
        Subject: CN=9C6AD27B7669187A1C3A3C7700438491562AF83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:b8:08:70:7b:98:32:89:61:6b:dd:89:b6:
                    7f:f3:cc:d6:bb:f8:bb:1c:b9:65:47:d6:94:94:9d:
                    43:75:e7:2f:9a:bf:de:75:4e:a5:80:01:9e:0d:02:
                    33:d8:e6:a1:32:de:4c:62:7a:b3:db:b0:a1:86:06:
                    70:9a:d6:dc:93:60:53:2d:24:c4:06:6e:49:97:f1:
                    50:e2:82:12:02:2f:0e:cd:af:83:c0:ab:9d:3e:7e:
                    f3:35:e4:17:92:b3:9a:56:b3:88:40:8d:03:5a:ee:
                    1a:c7:3d:8f:d3:07:7d:ac:f5:d4:2f:a4:67:aa:a6:
                    2c:ff:ea:79:18:fc:91:1d:3e:d5:91:a4:33:2d:d3:
                    06:dc:c0:1f:5d:cd:97:9a:8d:43:e6:9b:b2:3d:a6:
                    dd:09:1b:a8:84:a8:b9:8e:09:c7:07:e4:46:09:d1:
                    0b:36:9c:6d:13:a9:37:ec:a0:0e:70:2c:31:ad:9d:
                    c6:8f:b0:b8:2a:2a:18:b6:6f:68:65:7e:29:3a:56:
                    44:c9:b5:4b:ff:7f:11:f9:3b:4d:d4:9c:5f:60:b2:
                    87:3f:b1:19:23:1e:64:18:4f:84:16:e2:93:9d:6a:
                    02:1b:bf:e0:03:52:d7:92:b0:53:70:eb:e6:11:10:
                    5c:d1:ca:f1:16:ab:4a:89:11:21:ee:fa:a5:fd:55:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:D2:7B:76:69:18:7A:1C:3A:3C:77:00:43:84:91:56:2A:F8:3A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:28f0::/44
                  2a06:a005:2950::/44
                  2a06:a005:2980::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:21:c1:aa:8e:13:65:cf:71:35:8e:fc:c4:82:e1:1a:a9:ff:
         61:fd:02:3e:a6:cd:19:fc:c5:35:7a:88:7e:a5:4f:01:0b:2e:
         7f:0f:60:b3:f4:f1:7c:42:bb:a4:d8:a5:58:98:3e:22:9a:df:
         e0:e5:d6:fa:28:23:c7:73:be:15:d7:89:f5:e2:1b:7b:45:7f:
         bd:f3:ac:83:4d:c5:b7:80:64:31:62:37:b0:5f:1c:75:29:b2:
         87:62:61:26:45:3f:3d:40:73:b1:3c:24:a3:da:a9:b7:73:0d:
         b7:1d:f2:e0:d5:b7:88:97:e3:32:eb:93:84:6e:50:5f:07:b3:
         b6:22:20:f9:b8:0f:35:e6:f7:c5:b1:a3:45:fa:5f:22:e1:23:
         1d:56:48:43:4f:a8:3a:20:0e:de:26:7f:1e:9e:74:b0:9f:8f:
         5b:7d:19:14:b5:5a:5c:08:53:aa:48:12:2e:f9:eb:bb:6b:77:
         3a:10:6b:f8:da:16:ec:6e:08:d9:1b:cc:d7:80:05:0e:99:da:
         ca:a9:4d:b6:08:6b:62:87:7b:da:52:51:31:67:d0:5d:0c:2f:
         6f:f4:5e:d3:86:a6:5b:d3:d3:04:f5:10:22:a8:90:dd:84:1f:
         74:4f:11:d6:96:e9:e1:67:bc:76:9e:c1:b2:e6:52:b3:20:54:
         58:8a:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----