Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa
File:                     341c4026-b621-3967-b82c-79af6c49b476.roa (raw, json)
Hash identifier:          RNDEF1Lp18Y3qAi9oqu4HWdTRAM08yCd/Ev9fWnxlaA=
Subject key identifier:   B4:10:15:9C:93:A8:FE:9F:2F:6C:A8:31:F8:37:DC:CD:10:C4:52:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAE88FE0430941555A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:a100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ae:88:fe:04:30:94:15:55:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=fac058f3-a970-4fe8-8030-993a817fac80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:8b:46:d6:fd:06:f3:49:be:dd:0d:08:8b:
                    8c:ba:31:55:5b:d9:09:da:59:46:a9:a9:1c:8a:98:
                    d7:74:40:20:f8:9e:15:12:96:b2:eb:a0:92:05:be:
                    2b:3b:d9:b3:aa:d2:47:16:d8:09:ab:f1:c8:a8:27:
                    5c:fa:a2:67:4d:59:03:48:34:ee:cf:77:2c:01:e4:
                    68:3e:ac:76:7f:cb:a1:08:30:07:d7:3e:a0:06:6a:
                    76:fb:d5:fd:f2:fd:e2:0f:06:da:31:61:34:42:44:
                    df:bb:4e:17:06:37:e4:0b:e6:07:c9:c0:a0:a4:7c:
                    08:17:4f:8f:59:8b:26:30:3a:f8:76:97:7a:96:7a:
                    fe:47:dd:c3:a8:1a:7f:8f:33:24:59:5a:36:7c:cb:
                    40:3a:56:24:f1:c0:91:0c:0a:72:55:02:9d:e2:53:
                    eb:f6:5e:ee:0d:87:38:79:ed:37:4e:fe:ee:00:62:
                    fb:9a:09:9b:c3:0a:9f:c3:e5:49:17:fa:1d:bf:45:
                    ee:72:56:c6:e8:95:16:4f:2b:05:08:3a:e6:6d:8d:
                    c0:1c:63:eb:68:c5:be:2e:a3:0b:85:af:47:73:c5:
                    d7:b8:06:a3:c7:6c:32:81:46:83:21:f5:f0:ac:e8:
                    65:c9:e4:14:51:1e:ba:6a:88:39:cf:e8:20:e4:53:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:15:9C:93:A8:FE:9F:2F:6C:A8:31:F8:37:DC:CD:10:C4:52:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341c4026-b621-3967-b82c-79af6c49b476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:df:f2:80:1a:a8:38:19:5e:49:43:32:82:3c:c2:e5:2b:
         9b:22:b9:48:00:85:a6:83:bc:c5:a3:e6:bc:08:a6:b4:7b:26:
         24:b3:aa:a0:11:87:46:1f:b5:4c:df:11:13:e6:6d:ce:9c:81:
         cf:f9:9a:62:1f:80:37:40:56:28:1b:f7:ea:9e:e1:d5:c2:1c:
         6d:19:72:95:83:f4:3d:14:3b:86:49:e4:15:23:c9:91:b4:af:
         b7:45:43:98:99:22:84:ae:03:84:a4:b3:76:5c:32:ac:6f:c1:
         b7:40:92:9b:cb:f0:6e:de:52:8b:a0:d8:06:d5:56:7f:d9:2f:
         8a:fe:57:1b:bd:e2:dc:49:ad:5d:f4:a4:a0:0f:97:a2:19:09:
         1c:38:77:ed:3c:38:3c:1b:c9:e1:58:c5:76:86:a1:4b:2a:aa:
         a8:76:a4:9a:eb:d4:98:10:1c:3d:3c:36:ae:c8:40:db:ab:a1:
         32:df:37:1f:32:86:72:34:35:16:8f:91:ed:77:73:1b:9e:dd:
         d5:08:c8:55:65:55:ef:e2:1c:c2:28:3e:85:85:40:6c:da:40:
         8b:26:9d:05:ae:79:8c:65:9a:78:64:3b:b3:41:af:69:47:08:
         e1:ad:f4:97:0e:c7:a5:8a:3d:ba:8a:0e:50:7e:d2:71:55:22:
         e9:a2:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----