Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c55f60-1d2a-3424-80a0-2576af9c486c.roa
File:                     14c55f60-1d2a-3424-80a0-2576af9c486c.roa (raw, json)
Hash identifier:          TTAo7oLjltS+g70XEE4O2yfSI0rUvbFnjhdRhxsmWNU=
Subject key identifier:   45:2D:50:61:EF:5F:04:70:EC:96:C0:B3:42:8A:58:CC:AD:A4:94:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584981D446150037EEEE4412D280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c55f60-1d2a-3424-80a0-2576af9c486c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     6167
IP address blocks:        2600:1007:a113::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:46:15:00:37:ee:ee:44:12:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=1640f174-692a-4ff4-9ca7-93daad3b8501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:c8:27:9d:a5:6d:50:ec:5b:98:2e:59:e5:
                    68:74:a7:9e:a0:14:d1:f9:a2:7e:55:d6:92:a5:84:
                    26:a4:21:ad:2e:f0:29:a7:dd:da:64:fb:7f:af:a4:
                    47:25:df:eb:a1:ca:bc:69:a6:2c:da:f5:f3:d4:5a:
                    35:d8:ee:dc:5a:41:1e:e6:70:1d:bb:b6:68:eb:11:
                    17:12:d9:41:16:0b:d8:d6:f2:f3:bf:45:0d:91:93:
                    f9:d1:35:17:d1:80:b0:ca:3e:84:de:e6:81:dd:a2:
                    2d:d3:82:e6:45:ba:a0:03:0c:b1:da:28:ac:1d:c2:
                    0d:ba:a4:dd:6c:19:a6:72:4c:a6:22:cb:90:b0:41:
                    82:7d:1c:14:c2:d1:13:bb:6a:93:18:53:99:4e:0c:
                    f2:a4:bc:f3:9b:72:cd:9d:d4:e8:a9:59:2e:1e:72:
                    47:59:fa:a3:70:97:74:f0:c3:4e:c7:45:9b:06:19:
                    3f:13:d2:ed:3a:7a:31:17:82:77:9d:98:f8:7c:11:
                    21:93:61:67:02:5d:ce:da:5a:ad:0c:58:86:de:f6:
                    66:bd:96:c7:c9:c1:61:d2:5d:ed:fa:cc:28:e4:ed:
                    00:21:00:d8:a0:8a:17:ac:a3:6b:eb:5f:4a:9c:8b:
                    4c:02:47:4c:ea:44:a7:b2:86:24:a7:66:34:8b:4c:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:50:61:EF:5F:04:70:EC:96:C0:B3:42:8A:58:CC:AD:A4:94:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c55f60-1d2a-3424-80a0-2576af9c486c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a113::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:86:cd:c4:36:88:52:31:f2:cf:63:cd:1b:2d:be:87:a4:
         4e:6d:cb:0e:39:13:35:77:12:64:f7:3a:59:eb:68:9e:40:db:
         48:84:98:06:07:1e:c4:17:0c:15:52:b3:25:d1:78:ae:3f:4d:
         fa:f9:65:85:9b:81:7f:2a:c3:92:9b:00:8f:9e:1c:e8:99:81:
         c8:4b:7d:67:64:2c:c0:ec:92:5b:51:77:49:ff:3e:9b:52:30:
         5c:54:3f:ed:10:22:7c:a3:55:bb:4f:aa:ea:dd:df:36:75:f4:
         5e:72:a0:af:f5:b8:d2:38:93:e3:2a:c9:e1:d9:00:ea:b6:2f:
         4e:21:8a:79:4c:a2:a5:98:47:e1:c0:29:44:af:09:28:44:52:
         34:44:88:a7:b9:e5:ff:97:be:e4:98:9d:19:d7:87:7f:28:46:
         ec:65:b0:64:a9:79:79:94:b8:19:c6:24:e9:63:b7:2e:69:fa:
         0a:38:15:e2:53:6b:2e:3b:8c:9b:3d:86:d9:b7:2b:30:43:a7:
         69:4f:45:bc:be:25:43:b1:f6:df:c7:fa:f9:b6:1f:fc:14:11:
         68:f8:bd:72:28:46:43:aa:31:4d:cd:d6:06:d0:80:c1:6f:87:
         84:54:e5:2e:7e:bb:1b:98:df:29:35:b7:06:6b:a6:e4:8c:ed:
         58:bb:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----