Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa
File:                     1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa (raw, json)
Hash identifier:          0Q4RhiZFUUT80KaTY8gFhdfDM+RrDt2Yy9uTbf28nC0=
Subject key identifier:   29:D5:00:C6:DF:BB:61:D0:06:A2:A4:24:68:AD:1B:B3:3E:F1:CB:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A142FD9F41378D10CF300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:d030::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:2f:d9:f4:13:78:d1:0c:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=73c1efc8-c188-45be-939f-a72b0e5bce61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:90:14:9f:91:85:98:de:f2:a5:1d:68:1c:
                    8a:c3:f3:e9:86:23:ff:3c:ea:f3:aa:24:05:89:26:
                    84:20:9e:cb:93:d4:ec:75:bf:e5:29:e1:c4:f0:09:
                    0d:4b:af:8d:02:a3:67:4f:11:2a:b7:37:ac:d3:12:
                    d5:30:a7:5f:55:36:b9:c6:ce:46:f0:51:ed:64:57:
                    fc:28:92:5c:16:61:37:fd:0b:2d:83:a9:b8:95:3f:
                    b5:16:d3:71:a4:dd:6c:c2:7f:b9:33:f3:19:50:8b:
                    64:8d:bd:e7:a8:02:5e:2d:d9:1f:6b:be:b5:39:c0:
                    ca:a4:79:d0:99:a7:82:15:90:b9:55:a1:6f:6e:2b:
                    24:c3:70:6f:75:07:57:a9:ec:a3:c4:05:1b:f4:fc:
                    2b:2b:f9:18:92:eb:03:d7:91:12:3c:82:d3:34:e8:
                    d3:28:8a:89:58:26:64:6d:cc:5b:ee:18:bc:37:1c:
                    f9:9c:31:79:bf:2d:e6:bd:31:ba:c4:23:e9:ee:aa:
                    e4:ec:a8:fb:4f:36:a1:36:b4:a5:fd:7d:52:17:99:
                    a7:11:63:6f:65:d3:e4:04:19:a5:28:39:39:3a:87:
                    7d:60:83:7f:70:f9:f1:50:33:e0:e2:9a:77:cb:39:
                    cc:a7:70:79:b7:b3:e6:c1:3e:99:5a:25:4f:ef:12:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:00:C6:DF:BB:61:D0:06:A2:A4:24:68:AD:1B:B3:3E:F1:CB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c4f2f77-ff14-3f22-be8f-57e79364f7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:35:93:43:b9:35:8b:b6:48:82:0f:43:dc:41:88:cd:41:
         69:21:b9:41:46:7d:27:b1:e0:0f:6f:fa:8e:c5:9b:0b:22:6a:
         6d:2f:76:1f:eb:cd:45:84:49:98:f3:6d:1b:e9:82:4f:16:ed:
         cd:b1:15:e0:9b:c6:71:29:73:e8:e9:e4:ab:15:52:15:09:ce:
         06:9b:75:b2:a1:98:96:6c:af:5a:65:27:75:5e:3a:f4:75:4a:
         78:4b:fd:ec:e9:72:89:7b:cc:14:9b:9e:36:ba:f6:02:1c:a8:
         d7:08:d1:77:54:7c:b9:3c:d5:0f:71:2e:ed:38:fd:d9:67:cd:
         09:ac:7e:6e:42:a0:01:93:65:9e:3d:f2:49:3e:11:df:b4:0e:
         ce:e8:36:db:d6:2d:92:65:ae:67:cc:f3:40:65:9e:b2:59:30:
         d3:7c:fe:42:70:b0:4e:43:dd:f6:38:90:71:25:cb:a1:8c:7e:
         fc:e8:a3:4d:83:01:65:03:fd:82:fe:09:06:24:7d:2c:e8:2f:
         d2:09:16:20:e6:49:08:fe:50:9a:ce:f9:04:5f:9f:d1:f6:6b:
         a5:96:ba:e1:d7:89:99:08:99:65:3e:dc:dd:1d:f1:c0:bd:84:
         85:a4:b5:d0:9f:27:ac:eb:e3:60:da:f3:ef:88:8c:3e:aa:72:
         fe:46:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----