Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
File:                     1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa (raw, json)
Hash identifier:          R71Q/OAzJ1dFSgR1gTKqqK87ZGYcIovbxYPy96O9oUI=
Subject key identifier:   73:2A:9E:80:7F:12:9B:1F:C7:B1:D0:08:DB:A9:BA:89:A5:AE:54:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2448B74344514077EF4180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        2600:4041::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:48:b7:43:44:51:40:77:ef:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=131528d7-5bd6-4f1f-af3e-9528d4d174f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:26:4c:61:78:08:2a:36:d8:0b:2b:57:4c:
                    23:b0:66:f8:24:2e:a0:de:e4:fa:20:d4:dc:1c:ae:
                    91:9e:0d:41:3f:de:f9:80:64:1b:0c:56:d2:90:36:
                    54:9b:d2:05:df:0a:a7:ba:0e:9b:10:84:c6:d8:a9:
                    32:c6:ca:f3:af:57:11:ba:2c:52:1d:ea:97:59:0d:
                    99:77:2a:31:3d:dd:9b:06:19:0f:e6:93:b7:ef:12:
                    fd:55:23:82:73:ef:13:a7:98:fd:30:26:fa:fe:0a:
                    db:e4:c8:c2:6d:dd:0c:5f:f4:6d:f2:1f:90:26:6e:
                    b3:10:01:da:a7:46:a9:f5:a4:7b:ad:1d:c8:68:90:
                    76:57:b0:93:b9:09:cc:ab:5b:f9:0a:92:86:de:3d:
                    2a:e2:75:d0:2d:05:7f:0c:a9:b9:50:06:5c:7d:a7:
                    63:ea:6f:19:a2:bb:95:85:21:be:db:34:2d:9c:37:
                    8b:0e:ee:73:48:a3:ae:6d:ab:dc:17:f2:45:04:00:
                    15:6a:80:b2:71:8b:83:17:e3:4f:cf:58:f3:f1:33:
                    fc:95:9d:49:e9:cb:71:14:8d:a5:e9:a9:8f:67:ae:
                    06:a8:5a:09:f2:6d:f8:07:44:c1:c1:15:44:6e:90:
                    31:c2:63:c0:cc:6f:69:bb:12:a4:48:f6:65:21:3d:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:9E:80:7F:12:9B:1F:C7:B1:D0:08:DB:A9:BA:89:A5:AE:54:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1446c42a-db1d-37a6-a7e1-c64f8187d22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4041::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:17:4a:67:6d:7a:3c:9e:fd:2d:ee:7d:ed:fd:1e:66:ca:39:
         99:99:7c:98:14:20:ab:66:40:8b:70:3e:8f:81:ab:30:1c:b0:
         ba:3b:68:52:4e:6c:89:0d:b8:67:5c:4d:14:9b:2f:42:ed:2d:
         a7:bb:76:23:df:20:d0:b2:18:1b:11:ca:ba:9e:93:9c:c4:64:
         0e:96:a9:a9:f0:08:64:48:e4:51:51:19:00:1f:ec:cb:39:eb:
         4e:d5:9a:ef:c2:30:b0:87:5b:31:51:af:1d:1b:7d:83:ee:22:
         0e:43:e4:27:67:b5:3e:76:c8:c5:b6:9d:45:fc:17:04:64:36:
         4c:c5:22:c5:d0:a1:fe:de:47:cd:1f:ee:e5:c0:cb:c2:5c:14:
         45:e5:d9:b2:da:22:f6:9e:13:63:59:6d:72:e2:80:39:a7:80:
         2c:d2:4b:da:3e:75:d6:3d:e5:0b:2a:62:66:cb:63:92:35:e7:
         76:3b:76:72:85:b3:8c:d7:72:64:d6:b2:35:b8:b3:7b:71:e4:
         09:2f:e5:c8:02:8a:bc:ec:d0:72:6a:60:6a:b0:22:e6:e3:1d:
         7f:ff:19:32:14:8f:42:b1:35:df:36:fe:7e:ba:d8:72:5b:e8:
         f8:c5:7f:24:29:1c:d5:0a:54:cc:39:00:a4:02:80:fe:2d:79:
         cd:bb:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----