Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa
File:                     32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa (raw, json)
Hash identifier:          2HBVTdShqjxISwNfIvTWOyuuJAHhHQ2/ektKtRYSS+c=
Subject key identifier:   4D:7F:25:2E:07:8D:50:0B:B3:92:79:D0:73:25:1B:E3:70:97:A5:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A01712A5A583FA35D8F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:a022::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:01:71:2a:5a:58:3f:a3:5d:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=75df04d6-9065-4ddf-b0cc-45247e2e67bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:95:c2:4f:f7:73:4d:1a:b1:0b:58:ca:d5:
                    b7:6a:d0:d2:88:de:9c:6a:b3:75:92:bb:ee:62:ae:
                    18:34:a0:94:33:14:ed:8d:4c:82:84:f2:07:01:c2:
                    f0:ba:97:4c:ed:84:4c:0e:fa:b8:f2:32:09:5a:2c:
                    4f:b4:8a:1c:69:43:b3:1e:38:29:34:da:fc:8a:25:
                    15:90:f3:11:15:63:54:41:47:2d:73:92:3a:ad:cb:
                    a7:41:9d:16:e0:3a:da:8e:a5:5d:a7:ae:de:31:db:
                    9d:75:92:ea:8b:de:5a:c2:7a:4e:b7:51:25:c6:4f:
                    4a:c0:cd:4f:d3:1a:9d:0d:74:68:7e:cd:72:17:97:
                    98:0b:fb:9e:02:84:d3:f9:cd:a6:fe:a7:3b:42:09:
                    fa:62:2c:b6:3c:ab:86:18:11:00:da:ee:b3:eb:4a:
                    54:85:f1:85:f1:68:53:dc:17:7c:b1:ac:21:1d:73:
                    b3:47:8c:82:83:ab:3e:26:8c:4d:73:8b:2e:6f:e3:
                    23:d3:05:6d:63:ca:ac:20:42:0e:b2:31:c9:06:08:
                    13:ce:49:8d:d1:fb:85:23:35:6b:45:ad:0c:64:a0:
                    96:4f:9e:37:a7:c1:6e:ea:34:ff:0a:82:d8:a1:e5:
                    ce:fa:d8:33:60:8f:f5:b6:7b:97:63:57:e5:9c:b8:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:25:2E:07:8D:50:0B:B3:92:79:D0:73:25:1B:E3:70:97:A5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:05:c9:4a:e0:72:2c:ba:10:95:80:b2:a1:8b:07:b6:33:1c:
         a9:b3:4f:2c:75:a3:91:1f:35:e3:79:65:89:d2:a1:9b:9a:f7:
         82:15:81:a5:5a:37:2e:45:46:25:f3:44:25:3b:22:70:b3:02:
         9c:73:0b:16:5a:58:3a:ab:e4:30:18:6b:96:86:06:74:80:0e:
         10:87:2d:7d:90:d5:32:93:b7:fb:45:00:2c:e4:7d:9d:54:56:
         00:e9:67:a5:a1:2b:e3:8c:3e:f5:44:27:1b:72:46:f8:79:06:
         c2:a8:d6:e8:f1:08:a9:ca:3d:c2:53:6b:d9:32:32:43:ac:77:
         8c:8d:47:89:d4:03:f0:4a:b5:0c:09:80:03:87:b4:a4:e4:4d:
         d6:ba:7a:1b:ba:ac:5b:90:01:22:f5:c6:1b:84:11:d5:68:6e:
         ad:9c:ac:e1:2b:8d:41:d4:99:72:c2:82:8e:43:8c:05:97:c5:
         13:29:2c:d5:d4:f8:4d:3f:02:59:a0:6c:ec:0c:5c:ee:eb:df:
         c9:e8:c0:8d:b7:86:68:3c:8c:04:64:02:82:a4:08:68:9e:ce:
         a9:ab:0d:14:9a:4b:95:b2:f3:53:51:96:ae:27:fe:a2:7b:67:
         be:6f:58:1f:a5:bc:ca:86:02:06:0a:c4:16:1b:86:6a:42:01:
         0f:89:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----