Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa
File:                     2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa (raw, json)
Hash identifier:          G5J8MXrQlS+cLSESJdU30KqS/V1VG0vAcjyqvUefF8o=
Subject key identifier:   A5:5A:91:CA:87:EC:11:B2:78:E8:BD:6B:80:0B:25:02:06:E5:A1:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A14764FCD2CBA5B2B7300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100a:a011::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:76:4f:cd:2c:ba:5b:2b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=fbeb52cb-316d-4e33-95f9-a256baaf24e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:7a:d4:53:1e:6c:a6:43:3f:c2:07:9a:d5:
                    88:04:dc:0a:93:01:07:57:77:05:df:f5:fc:2e:04:
                    14:31:17:c1:94:5a:ab:66:12:f8:9f:12:e0:af:db:
                    31:5c:cd:74:bc:ed:40:82:ac:a9:67:73:0a:d4:91:
                    bb:aa:6a:37:76:4e:32:35:fc:5c:98:10:31:31:15:
                    ae:3b:36:f5:0b:8b:79:c6:84:bc:ab:64:05:78:32:
                    1a:b1:74:5f:84:6b:2d:82:88:c1:5f:18:83:0a:7f:
                    3c:bf:ad:1d:bd:eb:9a:b4:36:1f:e5:5c:10:59:ac:
                    eb:9f:dc:73:90:71:4b:36:8e:37:48:6e:f5:db:58:
                    a7:a1:72:b0:05:73:f5:96:eb:46:7a:c6:f6:e8:27:
                    eb:43:3c:68:61:79:90:72:b9:24:78:ad:d3:7b:c7:
                    52:a0:dd:20:83:2e:3e:bf:54:d5:da:24:48:1b:7e:
                    0a:69:42:db:cd:6b:64:65:a2:c5:ae:a8:10:63:aa:
                    4d:08:67:76:92:f6:17:cb:6a:cd:cb:cb:e0:1c:fc:
                    81:52:f9:62:99:e6:da:8c:36:c8:04:ea:0f:5a:de:
                    50:84:5f:51:a7:5b:f5:31:ea:90:cd:31:d8:dc:10:
                    07:f8:89:eb:0e:be:71:99:8c:53:5d:b3:4d:48:08:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:91:CA:87:EC:11:B2:78:E8:BD:6B:80:0B:25:02:06:E5:A1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:37:72:bc:1f:8b:26:fa:cd:87:72:ea:f1:6a:ee:85:08:
         18:ee:27:36:12:2c:9b:f3:53:66:a1:ac:0a:3e:7a:c4:5f:e2:
         ae:95:e5:6a:12:7a:3b:e6:8b:8a:fc:fe:ca:ad:69:c8:a3:61:
         a2:41:59:4a:f4:bf:38:29:50:12:23:e0:b7:70:67:e5:ef:04:
         b5:10:93:0f:e8:8a:a5:55:f5:79:f1:8d:89:4f:e5:9c:95:17:
         8a:0e:66:88:5f:f2:b0:01:81:a2:43:70:75:45:06:85:dd:bb:
         e5:d7:47:5d:35:fe:52:66:f5:1f:82:24:71:94:72:c5:12:ab:
         7a:27:dd:2c:86:ce:af:a1:0d:1e:41:96:f1:01:cd:4c:8a:77:
         ab:04:34:23:8a:76:26:99:ac:1c:8a:52:86:12:b0:19:bd:5c:
         af:33:32:64:83:ed:33:31:b2:09:ca:bf:4c:0c:a6:e4:94:69:
         68:3d:bf:f1:88:d6:d7:73:c2:dd:fc:8a:52:b5:6d:6d:2f:13:
         e1:99:69:ee:1d:5d:21:ce:7a:13:27:71:fa:0f:20:ee:4d:de:
         1e:28:f4:33:c0:f2:6b:51:21:e5:16:82:f6:cc:9d:aa:be:a4:
         c5:0f:02:89:16:32:de:69:5d:0a:a3:cf:fb:4f:8e:e5:2d:8f:
         0b:38:c4:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhR2T80sulsrcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZmJlYjUyY2ItMzE2ZC00ZTMzLTk1ZjktYTI1NmJhYWYyNGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVx61FMebKZDP8IHmtWIBNwKkwEHV3cF3/X8
LgQUMRfBlFqrZhL4nxLgr9sxXM10vO1AgqypZ3MK1JG7qmo3dk4yNfxcmBAxMRWu
Ozb1C4t5xoS8q2QFeDIasXRfhGstgojBXxiDCn88v60dveuatDYf5VwQWazrn9xz
kHFLNo43SG7121inoXKwBXP1lutGesb26CfrQzxoYXmQcrkkeK3Te8dSoN0ggy4+
v1TV2iRIG34KaULbzWtkZaLFrqgQY6pNCGd2kvYXy2rNy8vgHPyBUvlimebajDbI
BOoPWt5QhF9Rp1v1MeqQzTHY3BAH+InrDr5xmYxTXbNNSAg3LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKVakcqH7BGyeOi9a4ALJQIG5aG4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjEyMTIyMmItZDZkZi0z
ZDVkLWE3ZWYtMGY3ZDQzNjhhMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCqAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH3mN3K8H4sm+s2Hcurxau6FCBjuJzYSLJvzU2ahrAo+esRf4q6V
5WoSejvmi4r8/sqtacijYaJBWUr0vzgpUBIj4LdwZ+XvBLUQkw/oiqVV9XnxjYlP
5ZyVF4oOZohf8rABgaJDcHVFBoXdu+XXR101/lJm9R+CJHGUcsUSq3on3SyGzq+h
DR5BlvEBzUyKd6sENCOKdiaZrByKUoYSsBm9XK8zMmSD7TMxsgnKv0wMpuSUaWg9
v/GI1tdzwt38ilK1bW0vE+GZae4dXSHOehMncfoPIO5N3h4o9DPA8mtRIeUWgvbM
naq+pMUPAokWMt5pXQqjz/tPjuUtjws4xFE=
-----END CERTIFICATE-----