Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37f62321-bc84-3c3d-980b-cb77d90ea94d.roa
File:                     37f62321-bc84-3c3d-980b-cb77d90ea94d.roa (raw, json)
Hash identifier:          TBtGOYCLTJiadhw4M6mk4+5paJzE6wp4Qo+56Zu4Gks=
Subject key identifier:   FF:27:D7:BA:8D:46:D1:08:49:0B:90:D6:7E:6B:57:2B:26:6F:1E:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245EB018A5C5A7FB2CE980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37f62321-bc84-3c3d-980b-cb77d90ea94d.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1006:b090::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5e:b0:18:a5:c5:a7:fb:2c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=fe9285e1-72ec-4b13-bafa-082f08b5c98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:a6:de:c9:80:12:9f:80:a0:fc:60:d1:dc:
                    4b:15:0d:41:52:75:a0:37:4c:f2:9a:ce:7f:d5:3c:
                    72:58:5b:22:d3:21:b8:87:e3:48:1d:8d:0c:d8:15:
                    b1:7e:2d:01:47:8d:dc:c0:8d:6d:85:81:10:50:7a:
                    f4:5b:e5:e1:87:1f:f4:a2:ba:ff:ff:b0:f9:17:41:
                    79:98:b1:29:c6:75:ee:f3:9b:c9:2f:9b:2f:a5:f5:
                    02:79:0a:c3:b4:04:02:d1:d4:9c:38:0c:db:7e:c3:
                    ae:c1:f0:1d:e9:85:ed:fc:d3:b4:69:3d:c4:06:05:
                    b2:be:6b:fb:0c:1f:2f:67:aa:13:80:1c:62:63:25:
                    85:16:1c:d7:da:41:94:3d:5d:c2:eb:42:ab:d1:f0:
                    aa:e7:e6:72:62:81:c9:f5:30:d0:f2:ce:bb:d6:20:
                    90:c8:88:3b:b5:ad:4c:03:af:ff:3b:00:de:5d:bf:
                    73:b4:0f:3f:c2:0d:21:1e:5b:1a:d3:c2:84:3d:f7:
                    a7:3e:63:f5:7e:56:f0:55:ea:c8:24:96:8b:2a:6e:
                    9c:53:7f:a8:28:ad:be:12:67:14:cf:3a:15:f7:66:
                    a0:c6:4f:87:bf:7e:82:04:9a:53:b2:31:2b:ea:b5:
                    10:61:0e:91:08:a2:44:01:94:83:9d:9f:51:d5:11:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:27:D7:BA:8D:46:D1:08:49:0B:90:D6:7E:6B:57:2B:26:6F:1E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37f62321-bc84-3c3d-980b-cb77d90ea94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b090::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:61:04:36:93:ee:20:ca:29:2b:d2:65:5d:b0:79:de:fb:
         5d:63:ad:c1:52:b8:a4:d4:f8:5d:20:e1:ad:5c:34:e6:86:4c:
         88:f7:a0:32:f0:35:e5:25:e7:62:ef:67:ee:0a:f2:f4:b1:1a:
         0b:12:28:e1:6e:6e:ed:16:e1:5f:43:8b:f9:c6:e8:09:ff:84:
         db:e4:5a:e8:fa:5d:3b:16:e7:05:8b:02:ae:61:ef:9d:a4:c4:
         39:ff:9d:b3:2c:59:d1:9b:19:f4:49:38:a4:1b:2f:4e:e5:52:
         db:e7:16:9e:bb:16:c0:7e:45:f1:ca:94:34:3c:2e:1b:fa:a0:
         12:24:37:27:80:ac:23:39:68:58:34:aa:ad:76:b2:7e:7e:e3:
         2b:41:84:3a:46:62:37:63:d0:c7:92:6e:48:09:4b:7b:1a:0d:
         d7:42:26:15:7e:2f:a8:6d:f3:ef:30:12:81:c4:45:b7:9d:5e:
         dd:8b:15:b7:ce:28:d2:24:af:88:3d:81:2e:ed:17:1a:df:55:
         09:72:2c:f6:fa:48:89:82:f1:aa:b3:13:46:9a:8d:4a:89:3f:
         54:c2:59:aa:17:3c:de:16:d5:1a:e2:d3:12:d2:0d:4f:ea:c0:
         30:c9:ab:9a:c4:9c:45:7b:a0:ae:5b:92:a2:4b:a0:30:6f:e0:
         ce:39:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----