Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa
File:                     AS133846.roa (raw, json)
Hash identifier:          cT/Zib9oGl2GsLs033NOsVrEdwBl3ySNjL/ccTE6fUE=
Subject key identifier:   F6:47:47:30:3C:30:EB:11:CD:26:6D:12:DD:83:56:3E:D9:B9:5C:5A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0AB2BDAD291C389516DC5E90876204780453F221
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa
Signing time:             Sun 24 Nov 2024 02:40:12 +0000
ROA not before:           Sun 24 Nov 2024 02:35:12 +0000
ROA not after:            Sun 23 Nov 2025 02:40:12 +0000
asID:                     133846
IP address blocks:        2a06:a005:b60::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:bd:ad:29:1c:38:95:16:dc:5e:90:87:62:04:78:04:53:f2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 24 02:35:12 2024 GMT
            Not After : Nov 23 02:40:12 2025 GMT
        Subject: CN=F64747303C30EB11CD266D12DD83563ED9B95C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:1b:03:93:97:55:f2:c7:04:9e:fa:ca:84:
                    f0:25:60:df:55:32:fd:bb:95:76:55:a2:0a:af:bb:
                    76:ce:2a:7e:b9:a8:25:2a:a0:ae:ef:51:80:12:4b:
                    06:5a:32:15:3b:5f:43:09:2a:c9:6c:bc:59:72:b8:
                    a4:c9:95:4b:c8:3a:59:9a:10:09:06:2f:81:e7:8d:
                    b6:c3:c0:34:6a:eb:b3:f6:db:15:f8:ab:56:a8:85:
                    ec:d3:23:92:6e:b0:62:da:0f:ef:79:38:cf:ba:05:
                    93:8c:63:f5:8f:25:49:04:3d:c6:69:d6:ab:5d:69:
                    60:e8:b1:84:1a:c3:72:3d:a3:b6:b6:bc:5d:18:92:
                    b3:b9:7f:d0:9d:35:da:ca:af:82:72:86:e8:4d:3f:
                    81:73:4f:b7:a0:f6:2a:df:54:08:91:e4:cb:b9:02:
                    80:e8:4f:6f:98:b0:3d:d2:29:a8:f7:a4:f2:e8:ab:
                    fe:7b:42:d8:17:dd:a6:a3:99:2e:b1:5c:c1:fe:c6:
                    f7:44:d1:ef:8c:01:de:df:55:fb:0d:7f:8b:15:18:
                    48:1b:17:5a:18:4e:ef:79:58:fd:3a:2b:10:3e:9f:
                    7f:7a:9b:eb:95:37:ef:21:34:0a:f1:fc:55:cb:4d:
                    69:7a:89:03:5c:2f:ab:32:e4:ff:a4:70:0c:9f:e3:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:47:30:3C:30:EB:11:CD:26:6D:12:DD:83:56:3E:D9:B9:5C:5A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:cf:ec:74:81:f5:1d:e0:b5:59:30:9b:6c:da:16:e8:6f:
         1b:08:0b:12:9b:3c:e4:f2:07:d2:a4:22:fa:71:91:4f:c4:a7:
         2a:20:37:be:c4:52:7e:42:39:0a:5d:4e:7e:98:c1:ad:d1:58:
         1e:59:ca:69:06:79:b0:98:b7:ea:fd:43:b4:63:ba:9c:88:68:
         d3:ac:65:23:e8:9f:5b:d0:07:ef:9f:d8:4b:b4:8d:c0:42:5b:
         38:9a:c8:43:f1:72:f1:ac:03:ed:bb:6b:f2:a1:ee:d7:e8:be:
         42:ff:bb:5a:c8:ed:c3:eb:64:50:a9:c1:d8:be:63:3c:af:4f:
         bd:e9:27:7a:7a:50:ec:3d:e1:05:46:6a:22:52:ef:1e:c5:05:
         7a:e5:9a:39:fb:30:e7:f0:25:42:56:2a:ba:82:70:11:87:9a:
         84:41:3a:d1:a9:57:41:76:62:f2:c8:f8:01:3c:f0:c2:46:80:
         de:47:99:b7:78:c7:26:15:47:89:2b:ac:cc:60:12:35:eb:2c:
         81:22:1d:21:e0:1a:b9:b0:cd:52:9d:38:34:bd:4c:a1:24:f3:
         86:06:c1:69:54:f9:65:7f:8e:a5:32:b1:11:11:cc:e0:6f:8e:
         8d:9b:83:68:d1:b2:24:49:d2:30:1c:75:3a:d2:d4:9c:9e:db:
         e7:08:9e:e2
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUCrK9rSkcOJUW3F6Qh2IEeART8iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMjQwMjM1MTJaFw0yNTExMjMwMjQwMTJaMDMxMTAvBgNV
BAMTKEY2NDc0NzMwM0MzMEVCMTFDRDI2NkQxMkREODM1NjNFRDlCOTVDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQBsDk5dV8scEnvrKhPAlYN9V
Mv27lXZVogqvu3bOKn65qCUqoK7vUYASSwZaMhU7X0MJKslsvFlyuKTJlUvIOlma
EAkGL4HnjbbDwDRq67P22xX4q1aohezTI5JusGLaD+95OM+6BZOMY/WPJUkEPcZp
1qtdaWDosYQaw3I9o7a2vF0YkrO5f9CdNdrKr4JyhuhNP4FzT7eg9irfVAiR5Mu5
AoDoT2+YsD3SKaj3pPLoq/57QtgX3aajmS6xXMH+xvdE0e+MAd7fVfsNf4sVGEgb
F1oYTu95WP06KxA+n396m+uVN+8hNArx/FXLTWl6iQNcL6sy5P+kcAyf4zEJAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU9kdHMDww6xHNJm0S3YNWPtm5XFowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTMzODQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQtgMA0GCSqGSIb3DQEBCwUAA4IBAQBtFs/s
dIH1HeC1WTCbbNoW6G8bCAsSmzzk8gfSpCL6cZFPxKcqIDe+xFJ+QjkKXU5+mMGt
0VgeWcppBnmwmLfq/UO0Y7qciGjTrGUj6J9b0Afvn9hLtI3AQls4mshD8XLxrAPt
u2vyoe7X6L5C/7tayO3D62RQqcHYvmM8r0+96Sd6elDsPeEFRmoiUu8exQV65Zo5
+zDn8CVCViq6gnARh5qEQTrRqVdBdmLyyPgBPPDCRoDeR5m3eMcmFUeJK6zMYBI1
6yyBIh0h4Bq5sM1SnTg0vUyhJPOGBsFpVPllf46lMrEREczgb46Nm4No0bIkSdIw
HHU60tScntvnCJ7i
-----END CERTIFICATE-----