Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44570.roa
File:                     AS44570.roa (raw, json)
Hash identifier:          XbkIOc5BrhlWTBwizlS0hMH+06a9QLhI00SE6h1jq5M=
Subject key identifier:   6D:2A:86:93:47:83:EE:9C:38:20:20:16:DE:FE:2B:C6:6D:4D:AE:06
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       64C7BFC6AE0BB17DA90B7BCB3EE9A3DA632BBCBC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44570.roa
Signing time:             Mon 30 Dec 2024 03:23:58 +0000
ROA not before:           Mon 30 Dec 2024 03:18:58 +0000
ROA not after:            Mon 29 Dec 2025 03:23:58 +0000
asID:                     44570
IP address blocks:        2a06:1280:1000::/36 maxlen: 36
                          2a06:a000:2000::/36 maxlen: 48
                          2a06:a000:3000::/36 maxlen: 48
                          2a06:a000:4000::/36 maxlen: 48
                          2a06:a000:5000::/36 maxlen: 48
                          2a06:a000:6000::/36 maxlen: 48
                          2a06:a000:7000::/36 maxlen: 48
                          2a06:a000:9000::/36 maxlen: 48
                          2a06:a000:a000::/36 maxlen: 48
                          2a06:a000:b000::/36 maxlen: 48
                          2a06:a000:c000::/36 maxlen: 48
                          2a06:a000:d000::/36 maxlen: 48
                          2a06:a000:e000::/36 maxlen: 48
                          2a06:a000:f000::/36 maxlen: 48
                          2a06:a004::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c7:bf:c6:ae:0b:b1:7d:a9:0b:7b:cb:3e:e9:a3:da:63:2b:bc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 30 03:18:58 2024 GMT
            Not After : Dec 29 03:23:58 2025 GMT
        Subject: CN=6D2A86934783EE9C38202016DEFE2BC66D4DAE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:be:22:e6:79:46:1d:a5:f6:cc:5b:2f:ec:
                    67:d6:f4:8c:bd:06:9b:fe:26:59:99:1f:3a:96:fb:
                    b7:78:9d:e7:30:02:e0:2b:5e:10:b9:ba:39:95:69:
                    3a:5c:03:b9:b3:fc:d8:58:ee:c2:c1:73:e4:19:b3:
                    09:55:b6:38:d2:66:2f:1a:b4:f9:cd:4a:01:6d:f9:
                    43:da:ff:b2:2f:21:01:a4:6a:b4:29:b3:f5:62:ac:
                    41:c3:5b:48:1c:68:5a:d4:c9:6f:ba:3c:a6:b4:3a:
                    41:a9:79:76:e7:7d:ec:e6:2d:de:0f:a6:f0:1e:9c:
                    7d:99:12:84:1c:7c:4c:dd:6c:97:14:a7:68:b4:b5:
                    a2:63:b1:5e:07:18:79:b9:9a:6c:fb:f2:ec:2a:ac:
                    91:2e:3a:31:4a:a5:19:ac:ed:ca:ff:22:52:66:7b:
                    7d:fd:2b:51:3d:f9:f8:5c:a6:3d:cc:e3:ba:06:4a:
                    22:e3:bc:8c:84:81:d9:e7:7a:6e:89:be:fd:5f:4e:
                    b5:91:e9:73:15:9b:d6:29:fc:88:0f:4a:7f:3e:33:
                    85:50:26:8c:8c:ac:f2:43:30:74:b4:fe:eb:d9:49:
                    6a:77:ce:7a:15:cd:18:e7:61:ce:0c:d1:90:11:6d:
                    ce:10:4d:a2:c8:97:9f:ab:2d:4a:cf:25:32:5a:6a:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:86:93:47:83:EE:9C:38:20:20:16:DE:FE:2B:C6:6D:4D:AE:06
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:1000::/36
                  2a06:a000:2000::-2a06:a000:7fff:ffff:ffff:ffff:ffff:ffff
                  2a06:a000:9000::-2a06:a000:ffff:ffff:ffff:ffff:ffff:ffff
                  2a06:a004::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:37:c1:da:7e:95:72:5f:69:13:47:f8:f7:10:7b:e8:a2:
         97:4d:29:47:9a:f1:9a:62:44:75:ce:d0:a5:46:50:05:fc:8b:
         b0:59:fa:bc:07:82:85:c5:3e:b2:e1:8b:93:e6:de:61:95:a4:
         d3:6e:f2:1c:4d:2d:a1:a9:b4:c1:90:15:ec:78:7d:34:36:7d:
         3e:02:4b:1e:4f:29:6f:ed:a3:e3:b4:d7:d6:e5:13:e0:04:b7:
         90:0a:3e:7c:41:26:36:65:57:52:a1:bf:20:4f:98:54:8a:bd:
         5b:8a:b8:51:96:f2:74:69:55:16:1c:9b:99:5c:39:93:e6:49:
         63:dd:03:27:9e:9c:c2:78:17:7c:e2:ac:5e:de:2b:6d:22:f4:
         93:6a:2e:9e:30:68:c2:f3:3e:41:d0:cc:52:b6:eb:25:d7:2b:
         31:15:99:f7:bb:bf:ff:17:85:46:5d:70:14:8f:54:fe:06:4b:
         a3:73:98:8c:f3:9f:9d:c6:89:6e:98:96:d1:c3:eb:27:b2:90:
         87:5c:a2:bb:bd:d7:fa:8d:e0:fa:6f:9c:43:db:6e:cf:21:60:
         f7:35:aa:16:64:70:b1:8b:c2:b6:d5:bf:d5:ee:c0:51:fe:ab:
         4c:78:ef:a1:b2:20:cd:22:c6:53:73:99:eb:79:8d:5b:3f:4e:
         97:8e:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----