Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa
File:                     0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa (raw, json)
Hash identifier:          bH0R3mPnj/7nOM82n6zQVTEiGNSvJmlzeD6eRtT9y1o=
Subject key identifier:   33:08:F1:84:F8:02:F9:86:D0:B0:59:8C:AD:B8:73:01:0B:22:94:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858496484503214718BFB8094D480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.229.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:50:32:14:71:8b:fb:80:94:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=6cc59036-0753-4516-8be3-b23cce332a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:94:43:8a:dc:f6:67:ed:9a:92:82:ed:02:
                    36:74:b0:65:bc:14:a5:ce:6d:a3:4d:96:fa:e7:2f:
                    6d:a3:90:04:43:57:ec:25:e8:84:09:53:7a:8e:62:
                    fe:b8:82:d9:38:53:28:8b:d0:da:22:18:13:72:7f:
                    52:38:49:42:a5:bf:b7:f3:34:d7:95:3f:89:42:30:
                    87:30:f3:d7:28:b7:21:97:9e:82:95:f9:34:ac:34:
                    3d:07:ec:2d:65:88:8b:7a:3b:0c:33:86:7f:17:62:
                    fb:11:e3:61:57:30:16:54:9d:93:14:0b:9b:09:ee:
                    a4:1f:1f:8e:88:90:62:ed:f8:3c:75:8f:23:a8:92:
                    4a:96:50:0b:12:40:2a:e6:1b:4f:c6:fc:f3:6f:00:
                    6f:9a:bf:3d:5f:98:91:fb:fa:53:e1:df:1b:fd:97:
                    19:d7:94:89:bc:be:a9:bf:29:3e:dc:fe:35:0b:74:
                    82:45:20:23:89:86:6d:e2:de:ea:88:0a:a4:4e:ec:
                    db:82:41:bf:6f:59:5d:df:9d:29:50:51:36:9d:a9:
                    e5:9f:f9:3f:53:f4:80:37:b5:4b:af:b9:b0:de:2c:
                    a3:a7:f7:18:04:56:9e:ea:44:ad:2c:60:33:fd:3e:
                    8e:92:77:4c:0a:43:0b:bf:be:93:db:4c:55:81:35:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:F1:84:F8:02:F9:86:D0:B0:59:8C:AD:B8:73:01:0B:22:94:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.229.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:93:5f:7c:1e:d9:91:ff:5d:9c:d0:ce:51:25:89:19:de:c8:
         8b:7b:29:86:08:38:5e:49:1a:bf:5e:ad:3e:60:3e:c1:7f:bf:
         2c:da:91:e4:e4:50:de:36:84:2b:11:c2:e0:98:84:04:0c:30:
         95:4c:e3:e8:2c:ad:5d:36:f6:55:45:c4:d7:c6:fc:22:2d:8e:
         84:25:01:da:25:aa:ca:08:8c:01:03:56:6d:f7:b1:3a:b2:fc:
         93:62:86:d9:ec:67:12:3f:6b:25:b5:5f:ef:75:04:dc:ec:af:
         ca:72:01:62:40:40:da:00:3a:4a:ba:7e:cc:da:4f:c8:ee:30:
         3c:00:a6:ff:77:28:cd:53:04:21:ea:22:15:8d:46:d7:c2:f0:
         12:68:69:87:6a:1a:f6:86:10:de:b3:68:66:83:6e:79:19:11:
         27:e4:6d:d2:09:ba:7a:4d:a8:4e:54:16:05:ed:c5:5d:d1:ce:
         46:65:b4:6f:c7:c2:b3:88:4e:80:70:23:1d:46:8f:c4:08:58:
         95:30:d1:3b:bb:e5:b8:4b:17:0c:84:3f:86:c2:b1:ac:25:03:
         7b:7a:d4:94:cb:a8:6c:d7:07:cf:8a:22:d3:25:dd:99:c4:c9:
         ee:55:93:20:ac:8e:01:77:3b:e1:14:e8:97:1a:c5:14:da:b6:
         7c:25:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----