Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
File:                     2357474e-3774-375c-80ba-4139f0e8b8a4.roa (raw, json)
Hash identifier:          u8PFeaBDt0pa9c4lL9pxOtgk/yGFn7nacKBxbI1AT0Q=
Subject key identifier:   7A:C7:BE:74:0F:76:92:23:00:6E:FC:B7:A3:35:21:A7:29:91:5B:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A19082C010CE5F2F80B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100c:b290::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:19:08:2c:01:0c:e5:f2:f8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=d57622e5-114e-4c28-a265-f942ef5a31ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:1f:68:56:6e:c7:0c:9a:28:74:f1:b8:9f:
                    95:31:a4:50:bc:d6:68:46:bf:4d:78:4d:c6:f2:1a:
                    b0:f9:11:fb:5e:69:5c:ac:1b:1a:33:8d:1f:97:fa:
                    b9:03:11:11:ab:9f:da:26:98:90:12:85:de:7e:31:
                    ac:02:ad:80:82:fd:d7:fb:c9:7c:21:86:f4:d2:be:
                    21:ac:03:3f:e5:d0:39:0f:bb:bd:4e:e8:a5:f9:ec:
                    0b:77:c8:fc:39:72:85:4d:a2:32:a7:18:d1:00:d3:
                    76:60:c7:cb:c7:a0:e6:9a:ae:c2:c8:d8:28:cb:70:
                    d6:7b:d8:3e:a4:8d:71:60:af:b6:69:46:a4:fb:50:
                    ee:86:24:42:09:de:84:10:9d:a4:ff:44:3f:e9:50:
                    3a:a4:ad:7f:e6:06:d4:a5:68:42:93:a1:01:83:ae:
                    4a:40:26:64:23:f4:f9:cd:e6:05:6d:fe:74:dc:56:
                    e5:f2:2a:c5:b7:34:28:d7:29:e9:64:71:41:30:d5:
                    8f:1c:15:a6:27:bc:65:70:21:75:8a:80:57:cb:df:
                    ba:5c:d3:9f:e3:33:2a:c9:4c:8d:39:2c:75:06:b6:
                    e2:1f:7e:07:61:89:0e:91:4c:25:d4:8d:01:1b:90:
                    88:b3:db:d4:33:b7:df:68:05:a8:a8:ae:56:a0:c4:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C7:BE:74:0F:76:92:23:00:6E:FC:B7:A3:35:21:A7:29:91:5B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2357474e-3774-375c-80ba-4139f0e8b8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b290::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:62:eb:36:07:06:c7:21:09:14:64:3d:26:a2:0e:f2:b2:7f:
         33:e5:23:f4:e9:21:83:85:90:ec:30:3c:d9:27:3d:92:f8:04:
         05:3e:66:44:9e:26:bb:64:95:b6:06:59:15:41:f3:18:ae:e6:
         71:77:9f:70:2a:1a:c6:7d:fa:2e:d7:6c:a2:84:db:f9:ee:14:
         3a:70:2a:e7:5b:e6:e6:43:3e:4b:59:81:0d:34:9f:fd:4f:37:
         2f:7f:5e:6a:f9:7a:08:80:92:42:71:d3:c3:09:76:55:38:d7:
         60:ab:04:6f:69:75:37:7d:3b:74:28:81:ce:13:65:3f:14:81:
         15:07:52:6f:db:6c:bd:39:fc:e9:27:1f:46:23:58:24:4b:ba:
         53:6f:d6:6f:ca:5a:87:d8:58:8b:66:01:a9:d1:54:d8:be:16:
         2a:7b:14:be:3b:83:2a:c8:1e:5b:46:64:5f:61:7a:c1:3c:c7:
         a2:eb:41:23:46:2f:6f:76:80:d8:d5:ab:6d:ba:69:21:b8:75:
         b3:23:f8:2d:3a:c2:55:ff:b1:a3:f7:26:a0:59:99:5d:70:b0:
         6f:84:01:b5:3a:f0:35:b5:9a:db:60:1b:0a:f7:78:a0:24:48:
         7b:9a:99:e9:6a:26:74:aa:1d:0e:5f:ca:1f:bd:1d:2f:14:fa:
         17:a2:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----