Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c1fb0fb-3332-37bb-a3ae-57f8c14626b3.roa
File:                     0c1fb0fb-3332-37bb-a3ae-57f8c14626b3.roa (raw, json)
Hash identifier:          U7Z7JyJ01SJgzClzQMzAvi5pheazyssmWN5Oo3eP/1M=
Subject key identifier:   F9:AB:90:F5:F0:1E:B7:AC:AA:40:51:16:1A:5F:D0:D7:AD:7C:DA:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A17497A558458A4CDD300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c1fb0fb-3332-37bb-a3ae-57f8c14626b3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100c:a100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:17:49:7a:55:84:58:a4:cd:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=46d060fd-641e-4fb7-9df5-36094597f8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:2c:5f:23:d4:c7:07:8d:ef:46:55:8b:57:
                    3e:8f:d1:f4:21:c0:06:c7:6e:f8:8a:9e:3e:41:0a:
                    b4:49:5e:7a:e6:50:57:4f:9b:da:8e:47:22:4f:86:
                    bd:3d:20:5c:9b:01:26:a7:61:22:b8:97:92:c3:21:
                    a8:62:7f:b1:5e:26:bd:ea:a6:c4:e1:24:98:a4:da:
                    f8:1e:92:39:02:e0:88:84:8c:10:fa:70:1a:c7:79:
                    4d:ac:60:8e:94:be:e1:f6:c1:cb:8e:b6:4c:f3:36:
                    58:54:8e:6b:59:9a:99:ff:2a:64:54:61:30:65:4e:
                    22:cf:98:e4:38:5b:49:bd:3d:e3:f0:ff:a3:a5:f0:
                    11:8a:61:87:de:0d:37:4a:8d:01:4a:d7:64:f2:73:
                    a1:38:f8:47:96:48:15:87:c6:b5:97:5e:c1:e3:42:
                    f4:aa:25:d2:70:b3:9a:5f:4f:77:af:2a:9a:47:ae:
                    52:24:18:e0:21:9c:a1:d3:a1:d8:3a:83:9f:97:84:
                    69:ff:19:22:e4:aa:b5:2a:d8:da:b1:1c:9d:96:39:
                    42:be:8b:77:5f:22:53:85:c2:96:38:59:ea:b5:8b:
                    69:14:e4:10:27:0c:12:38:7e:52:fd:80:91:cc:d5:
                    88:3b:35:70:66:19:59:fe:95:b5:81:83:c1:29:54:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:90:F5:F0:1E:B7:AC:AA:40:51:16:1A:5F:D0:D7:AD:7C:DA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c1fb0fb-3332-37bb-a3ae-57f8c14626b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:d2:56:f1:fa:66:3e:91:72:22:da:38:20:98:ca:7e:2e:
         3e:80:9b:a9:8f:f1:5d:51:f5:22:c5:d1:88:7f:ea:ad:aa:ba:
         4c:6d:e7:04:96:39:5b:90:14:c0:b9:33:ce:4f:2a:1a:9e:30:
         92:6a:ff:c8:1a:fe:8f:62:a6:57:e4:92:94:25:c3:2a:f5:ea:
         f8:1e:35:38:57:dd:d0:16:7e:5d:7c:1e:b7:6e:98:e4:50:4a:
         45:54:66:27:6a:34:58:bf:61:c5:74:51:be:b1:fe:a4:0d:13:
         3e:ca:e2:66:ee:d4:fe:60:1b:8e:b1:3f:90:76:e8:4f:f2:a3:
         93:ee:ae:07:f8:fe:4a:62:15:24:a8:5a:82:81:6d:af:ad:b9:
         2b:b2:58:d1:63:ff:fb:49:ad:12:e9:54:e0:c3:df:99:5d:48:
         95:0d:0b:bb:15:a1:e8:3c:0c:39:c1:da:41:72:42:35:a9:d7:
         90:76:e3:34:97:6b:5c:1c:cb:07:e2:d4:1c:8d:44:96:a9:5d:
         43:7a:94:70:34:0b:28:64:77:e0:03:bf:6f:dc:d9:e2:3d:a5:
         1a:92:40:5b:30:4b:69:af:cf:36:4f:00:66:89:43:3e:43:02:
         c9:07:05:a6:3b:92:64:77:f1:54:79:ff:54:05:db:0c:ab:b9:
         50:ce:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----