Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa
File:                     38841677-5f6e-30b1-861a-90e041d8a8a5.roa (raw, json)
Hash identifier:          Tp2cQRlIveaiC/3xpSvd5uWfDGkB1quShDZToYakEHg=
Subject key identifier:   B4:42:BD:8A:8C:9F:6A:85:40:53:72:F2:27:EA:31:BC:99:32:E7:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A16BFC9BB9F2BE7F4FF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100b:b1d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:16:bf:c9:bb:9f:2b:e7:f4:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=e34c744e-801d-4d03-be8f-2992255db5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:1d:7e:3c:dd:39:1a:44:95:83:ce:0b:b5:
                    5a:f9:ad:57:07:92:c0:df:a0:e7:39:07:30:23:5b:
                    b8:84:39:86:98:51:ff:16:01:18:c9:e1:de:bf:ae:
                    80:7f:cc:67:7c:5d:53:4f:23:56:24:c7:bf:3d:ba:
                    97:27:5d:3b:26:1f:ad:23:17:4d:10:b5:2b:d5:fc:
                    9d:d7:c6:04:27:8e:53:34:ec:43:70:ce:52:87:0a:
                    d0:42:87:68:c0:f3:68:56:c7:54:cc:01:2a:ae:68:
                    3c:ea:12:62:30:0d:72:29:13:2f:2a:c3:ce:09:7b:
                    bb:16:43:d8:56:0d:cf:d1:c4:e0:6a:86:3d:55:dd:
                    d3:f3:c5:32:c8:0e:7a:38:dc:8c:db:50:b9:4c:3d:
                    04:01:46:06:10:c2:97:0a:83:aa:b3:83:12:2f:69:
                    00:13:98:c7:16:18:69:7b:c7:f0:b0:ce:2f:78:4c:
                    c3:41:ea:61:9d:df:c5:08:7b:de:d4:0a:57:27:d1:
                    b4:11:5f:3b:b3:1f:ad:36:ff:ab:ca:37:0a:ae:6d:
                    74:d1:85:73:37:e6:a2:03:ce:e1:87:5c:d9:70:d2:
                    52:df:64:3c:e0:77:0c:1c:8a:82:89:bb:36:9c:d0:
                    97:92:36:09:0b:da:00:1c:c8:89:27:ec:6c:17:e8:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:BD:8A:8C:9F:6A:85:40:53:72:F2:27:EA:31:BC:99:32:E7:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:56:e5:2e:cd:6e:5e:4e:cf:36:33:f0:6b:3b:39:ad:60:97:
         1a:85:ef:ab:66:0b:90:4f:30:e2:3d:ac:3b:71:4d:f6:1d:d9:
         90:4b:6f:c7:1e:d2:ae:e5:e4:9e:3d:02:92:0f:16:68:f6:2a:
         00:c4:b5:bc:7a:ad:91:de:45:61:82:dc:13:df:7a:f0:c4:63:
         81:9c:c9:6d:ee:16:e2:d5:e7:9b:6d:5c:55:0c:1d:ec:22:7b:
         a5:19:66:01:fa:f0:4f:7d:0b:7c:5b:88:ef:b5:eb:73:68:35:
         9f:13:ec:dd:b5:45:6a:d6:e5:c6:e2:53:c5:81:7e:5b:d4:49:
         5b:65:19:2b:50:3c:89:08:f1:bc:c0:a0:85:72:7c:7c:a8:9b:
         42:0b:2f:fb:c9:19:5a:f6:ea:c9:93:aa:09:c3:0e:28:58:09:
         a5:bf:45:c0:3c:f3:cb:a1:e4:d3:e7:6d:87:c8:a6:cc:a7:35:
         32:fd:2a:01:b2:59:44:93:15:85:1e:e5:6c:28:bc:26:16:ae:
         07:da:34:70:75:87:a1:d4:59:bc:ad:1b:9f:24:81:40:9b:01:
         a7:83:9d:fa:62:64:fb:9e:ef:f1:b7:bb:7f:e8:22:50:31:c1:
         17:f0:75:30:f3:5d:08:1d:aa:63:7c:ef:79:81:ab:39:e7:c6:
         ea:8d:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----