Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa
File:                     AS215580.roa (raw, json)
Hash identifier:          Cvmo/iwl0NNtyMBJtIHT4OGSR9bxEXH0VvOFSYk6eXE=
Subject key identifier:   3C:20:9C:79:7E:5E:19:3B:E6:AD:00:F5:05:92:E7:36:CD:56:8F:4B
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3C726713C1B6ED41647F4ED98609F8E5DABD7029
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa
Signing time:             Wed 14 Aug 2024 21:02:08 +0000
ROA not before:           Wed 14 Aug 2024 20:57:08 +0000
ROA not after:            Wed 13 Aug 2025 21:02:08 +0000
asID:                     215580
IP address blocks:        2a06:9f40::/32 maxlen: 48
                          2a09:54c0::/32 maxlen: 48
                          2a09:54c4::/32 maxlen: 48
                          2a0a:6047::/32 maxlen: 48
                          2a0d:d905::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:67:13:c1:b6:ed:41:64:7f:4e:d9:86:09:f8:e5:da:bd:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Aug 14 20:57:08 2024 GMT
            Not After : Aug 13 21:02:08 2025 GMT
        Subject: CN=3C209C797E5E193BE6AD00F50592E736CD568F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:1b:74:99:c3:d3:4b:d4:96:62:46:08:1c:
                    46:ab:83:40:2c:32:c3:9b:52:74:c0:22:a8:4d:a9:
                    26:71:ff:d8:55:42:de:08:ec:85:3c:3a:8e:66:37:
                    24:d3:d8:f2:cc:66:cf:18:cf:ff:f4:c5:1a:d5:5b:
                    3e:9b:01:c8:11:ff:9a:e2:fc:8c:d3:13:98:1e:f8:
                    f6:5f:3f:dd:24:da:71:29:32:89:d8:82:a3:c5:6d:
                    bc:4b:eb:e9:a7:57:ef:c7:60:22:60:70:d8:a0:18:
                    a3:3d:88:1e:89:a9:06:f5:0b:c8:b7:b9:fd:af:b3:
                    0b:d3:94:9c:1b:08:5a:4c:1f:4a:21:26:ab:1b:b4:
                    0e:1d:ff:a4:53:a8:4d:04:2b:2d:eb:1b:2d:db:83:
                    98:86:84:c4:2d:96:34:21:5a:fa:23:47:de:b4:08:
                    0e:38:4d:22:f9:59:87:59:bb:13:cd:d8:90:e4:76:
                    a3:12:cb:35:20:4f:86:f4:58:35:41:aa:01:86:6b:
                    9f:dd:bb:a3:18:b8:f1:e4:8e:f2:bf:ca:1a:de:f0:
                    4b:c1:50:81:94:37:cb:de:7e:9a:45:c4:e1:78:ef:
                    7c:5b:a0:a1:d8:ed:20:8f:9b:b3:9e:27:e9:8e:16:
                    11:1d:ca:b6:62:04:be:8a:b1:8f:92:33:de:c4:6b:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:20:9C:79:7E:5E:19:3B:E6:AD:00:F5:05:92:E7:36:CD:56:8F:4B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f40::/32
                  2a09:54c0::/32
                  2a09:54c4::/32
                  2a0a:6047::/32
                  2a0d:d905::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:b1:1a:1d:a6:83:36:fb:61:21:bc:55:81:7c:33:51:bb:
         ef:49:58:f0:5c:3d:2b:20:55:a1:b6:d5:49:7f:e7:54:7f:6c:
         a3:38:55:50:59:ec:d2:cf:df:6e:d7:7c:1a:59:aa:20:1f:89:
         01:86:ce:ef:a9:79:30:ff:72:0c:91:e3:dd:65:58:61:05:e5:
         c0:33:59:86:a0:b3:bd:ee:a4:67:21:57:ee:e9:1e:7e:a3:a8:
         33:ff:05:f2:a0:62:31:cc:57:4a:25:3f:0a:1d:ef:c3:f6:7f:
         de:d5:2a:85:8f:33:9f:a4:66:9b:e3:48:e3:98:e2:a4:e1:3e:
         59:c3:d7:99:fe:f0:be:96:41:6a:a9:8b:3d:6f:75:c3:9e:ef:
         28:4e:5a:dd:4d:fd:64:68:41:12:dc:c7:3c:36:2d:61:83:b0:
         f8:46:73:31:1f:e5:74:21:48:90:c6:54:b1:ec:b4:d7:e3:9d:
         01:5a:92:14:50:fe:7f:3b:bf:ed:17:de:21:dc:e3:07:82:c0:
         85:48:d8:e8:ee:75:ca:5c:19:6c:d2:71:a0:6d:f9:36:73:9e:
         a3:cb:43:08:52:cb:ef:f3:f3:d3:1d:8c:b1:66:ab:31:39:60:
         da:c6:76:3d:3b:ed:f9:91:b9:2b:e2:c3:91:41:05:3b:34:42:
         3f:29:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----