Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa
File:                     2b1a68a7-7618-33c8-9c20-416977329cd8.roa (raw, json)
Hash identifier:          gIQm1S0GhttPVQribiUI5T6hrM3GOPAeV+sKFp2Kwuk=
Subject key identifier:   94:83:9B:1D:77:72:31:E7:FD:0C:CF:47:2F:B2:9A:EC:31:F5:A8:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2482B5C75C822EBC0B2700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:d020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:82:b5:c7:5c:82:2e:bc:0b:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=691a588c-2975-48dc-a553-dc2b2ec7f0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:91:55:89:f2:a0:ad:e6:47:33:4c:92:f4:
                    d1:fe:52:3d:77:96:f3:fd:87:dd:f9:93:19:c8:ef:
                    e2:a5:d3:ea:47:c8:3b:5c:7b:55:e1:ac:f9:28:73:
                    68:40:f4:8d:b4:f4:3a:9a:8a:ea:7b:d8:85:6e:ca:
                    c2:5b:bc:6a:0e:bc:66:50:14:85:85:67:8a:6b:e4:
                    9f:2a:12:8e:63:99:21:2b:13:81:99:8a:5a:80:e1:
                    b4:bc:b4:44:0f:a6:43:9b:d1:bc:5f:f6:c9:b8:0a:
                    7a:01:45:7f:26:fc:ad:6c:e4:4f:b4:ec:60:85:65:
                    81:d9:73:37:44:2f:f6:6b:e8:eb:28:20:c5:44:87:
                    ae:d2:1f:36:27:70:3a:ee:3a:7e:56:12:63:b4:09:
                    7e:2e:5b:09:b2:2f:fb:51:94:22:0b:6f:84:a0:da:
                    2f:60:65:85:63:22:df:6e:36:b7:4c:11:41:36:3c:
                    ef:aa:80:8e:7c:f3:a0:45:22:4c:ad:90:02:88:7e:
                    e4:1e:46:0c:74:d9:41:10:de:47:5a:a3:0e:b6:40:
                    3f:9f:70:07:a0:8c:a5:86:a2:db:43:01:52:52:c4:
                    10:39:dd:39:a1:18:0e:07:7e:09:5e:32:f9:51:6d:
                    0d:c6:1f:68:23:0c:02:66:c1:5a:f3:f0:72:94:be:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:9B:1D:77:72:31:E7:FD:0C:CF:47:2F:B2:9A:EC:31:F5:A8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b1a68a7-7618-33c8-9c20-416977329cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:5b:f7:9d:4d:df:48:83:e2:2d:b5:4d:40:13:89:ba:2c:
         ff:c8:7b:6b:1d:08:4f:03:19:88:86:72:48:e7:77:f9:75:9a:
         86:b2:86:75:c8:8f:55:46:0e:37:51:37:5f:31:7d:b2:20:b7:
         f3:01:e5:a8:59:6b:04:60:b9:5a:f9:3d:3e:80:67:2b:ab:54:
         fe:84:2a:62:e2:16:1e:37:eb:81:aa:e5:78:6d:5c:1f:59:37:
         05:90:50:2e:9a:24:f8:1d:f3:f3:af:93:f5:79:16:30:ee:39:
         22:e6:13:35:71:b5:01:83:bc:4b:f6:77:17:b7:88:36:98:61:
         a1:c0:ac:7a:14:37:cd:a2:23:47:e5:0d:15:c0:e9:2a:a6:02:
         f9:05:76:39:3e:3b:d3:72:ee:5f:0a:5a:7c:74:e6:d3:ee:af:
         f8:9f:4c:8c:f3:b2:33:76:82:70:d6:ea:67:9c:fc:1b:79:c8:
         df:21:67:22:f6:1d:6b:58:06:99:b5:2b:fa:45:04:2f:5d:31:
         ab:9d:91:e4:2b:34:16:cf:97:b9:89:bb:0e:15:2e:df:f3:4a:
         94:40:1b:60:b4:09:85:f6:aa:a8:2b:24:8d:f3:7e:96:1a:3e:
         b8:d5:27:3e:c3:37:13:55:e0:55:1a:eb:6a:41:7c:f9:43:df:
         74:cf:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----