Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204374.roa
File:                     AS204374.roa (raw, json)
Hash identifier:          a/BEbVgN06SNi5MaUvPNsYJtVKPoRS57N1WqrS1PAVE=
Subject key identifier:   F1:63:E6:37:D1:68:51:6B:7B:46:E2:4B:32:5E:B9:08:28:26:0C:E5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       230EAFE942057B2A6CB6013EFF8ACFF2956D044A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204374.roa
Signing time:             Wed 26 Mar 2025 22:14:18 +0000
ROA not before:           Wed 26 Mar 2025 22:09:18 +0000
ROA not after:            Wed 25 Mar 2026 22:14:18 +0000
asID:                     204374
IP address blocks:        2a06:a005:85f::/48 maxlen: 48
                          2a06:a005:1090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:af:e9:42:05:7b:2a:6c:b6:01:3e:ff:8a:cf:f2:95:6d:04:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar 26 22:09:18 2025 GMT
            Not After : Mar 25 22:14:18 2026 GMT
        Subject: CN=F163E637D168516B7B46E24B325EB90828260CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:e4:1d:ea:b9:28:b3:2a:31:26:0d:22:73:
                    4f:44:74:72:b7:d3:bb:cd:bc:03:7d:5e:dd:5b:10:
                    25:a6:48:f9:60:f2:f2:13:51:ff:9a:e1:79:a8:2d:
                    cb:e4:fb:83:b0:9e:1a:a2:37:83:27:5e:8f:85:24:
                    22:7b:67:1f:41:c3:3f:b1:a8:50:5e:e0:05:e3:40:
                    9a:df:38:f2:a7:43:23:50:78:0e:36:42:74:d4:ce:
                    e6:44:48:71:65:04:df:9f:1b:e7:4e:f9:79:c8:f2:
                    76:81:1b:a2:82:7f:9f:54:d8:77:54:67:73:2f:61:
                    bd:3e:02:2c:dd:66:1d:19:f4:33:34:0f:84:bb:8d:
                    df:a6:3c:80:c4:21:74:8e:4a:68:ac:39:67:42:c2:
                    ed:ee:6e:1a:70:76:f7:31:47:87:58:0e:81:61:42:
                    de:bd:5f:c0:23:b6:38:17:c0:ed:eb:b7:b0:2f:2f:
                    42:85:0c:18:36:80:fa:10:6c:ac:84:2f:c6:27:5c:
                    d5:96:8a:1d:69:c5:9b:a8:f7:95:bd:d7:41:ec:35:
                    e7:24:72:35:41:d6:01:04:99:7e:39:e4:e6:33:40:
                    44:02:36:db:74:aa:ff:b9:3d:5c:96:4c:3c:46:36:
                    e6:73:f9:6b:d0:50:14:88:65:1a:f1:f0:fe:f1:c9:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:E6:37:D1:68:51:6B:7B:46:E2:4B:32:5E:B9:08:28:26:0C:E5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:85f::/48
                  2a06:a005:1090::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:89:7c:37:b0:30:15:1d:bd:8a:c9:16:a1:42:72:1a:00:
         b1:1f:db:75:d1:9c:cf:bf:e3:f3:11:04:6d:0e:5f:2f:1e:c0:
         e5:90:89:f2:19:3e:32:ba:5c:f6:6c:c0:03:25:2f:d1:8c:71:
         03:6d:33:7a:f4:86:c0:d0:00:5a:5a:45:7b:cf:ec:64:2d:a0:
         d1:36:47:6d:ef:a4:19:fc:46:5d:b0:22:14:13:e5:c4:14:b9:
         3b:8f:f6:3d:13:91:a0:ec:81:e7:30:79:89:a5:85:dc:d0:a8:
         84:7f:da:99:c2:0f:48:56:00:bf:74:0f:e3:42:97:15:c0:c3:
         bf:a2:ca:15:4d:a7:02:64:c6:86:8c:5c:20:0e:9a:2a:e4:83:
         2b:63:a1:1c:16:33:a7:33:cc:24:fa:7e:45:48:65:1f:1f:00:
         ad:7c:be:43:e2:99:87:8b:16:0a:7e:03:23:b3:4f:d6:f6:60:
         6e:9c:a1:df:9a:4c:cc:9b:9e:4a:74:20:27:35:62:6e:5c:0a:
         cd:9f:bb:5f:12:6e:3e:13:d5:8a:5b:7f:25:a9:c4:17:a3:52:
         f6:82:3b:70:47:12:99:ef:50:d0:97:69:13:26:94:29:ad:1c:
         85:25:de:3d:32:83:44:3d:f0:da:2c:d8:80:e6:9b:ce:d1:5b:
         3d:91:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----