Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
File:                     389f5dcb-ae9a-32de-a240-8137aa93a357.roa (raw, json)
Hash identifier:          +rGmratfcS9d7pt0kxPtsCBSYgmhiNje2WqmyyUlDAY=
Subject key identifier:   B5:46:13:4A:E2:E1:86:34:A6:76:15:CA:BB:3E:81:19:9A:7E:08:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A07F393F1820738B19980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100f:b1e8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:07:f3:93:f1:82:07:38:b1:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=7f5163bc-ad2e-4eac-afb7-390622ded953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:72:ec:6c:11:dd:cb:e0:86:f2:a4:c4:72:
                    30:ad:96:d9:0a:85:c1:c2:40:fb:83:c0:1a:ac:ef:
                    4f:30:51:89:21:9e:b6:2d:22:b9:88:5a:7f:96:9f:
                    f3:8c:9f:ff:7b:5c:e0:4c:2a:8a:84:93:ee:65:0f:
                    a0:88:5c:8b:7c:89:ed:92:47:a3:83:ee:c1:97:36:
                    c7:61:dc:37:de:e8:c5:57:d2:e0:b5:d0:be:7f:be:
                    02:64:46:ac:6f:69:bb:67:0c:af:a6:cc:36:fa:32:
                    ba:c4:e5:71:12:bc:19:40:aa:92:cc:72:36:dd:ae:
                    59:5f:c5:b2:7d:c7:a0:33:f1:b6:5e:ef:7d:1d:34:
                    bb:ec:be:38:4c:28:5c:8f:74:d7:ca:76:33:3c:c0:
                    ce:4b:a7:21:d4:3e:da:db:a3:85:f2:b5:2d:73:67:
                    26:a9:31:e3:e5:05:a3:42:5c:27:1f:08:86:cc:d3:
                    e2:0c:e0:54:ef:ce:f2:e6:ab:60:ec:eb:d1:7f:43:
                    4b:2c:6a:3f:b6:a4:4a:b2:3a:99:14:42:12:4c:73:
                    a8:15:b4:90:fd:0a:e4:16:f7:68:c0:21:8d:ed:b5:
                    b2:54:2f:e4:78:42:cd:3d:69:7b:13:a0:58:e5:e0:
                    7d:f4:bb:c2:62:d8:9c:ef:cb:49:62:71:a0:ab:51:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:13:4A:E2:E1:86:34:A6:76:15:CA:BB:3E:81:19:9A:7E:08:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1e8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:5d:ed:66:cf:87:6e:64:c2:f9:4b:b7:07:59:78:a1:04:
         1b:a2:85:c8:ad:31:ab:2d:69:01:ee:c4:a9:8b:db:6e:c1:fa:
         80:c2:e8:21:f0:af:bf:36:9f:34:53:2b:9b:24:07:4c:a2:09:
         23:72:d1:1b:e5:a0:cc:09:06:26:3f:a1:ba:78:e1:17:67:21:
         fc:60:8b:fe:05:6d:fe:2e:fd:b2:07:b3:d4:a7:49:21:8c:a4:
         cc:0c:dc:47:5c:8f:cf:75:80:5d:c5:f7:ba:9b:c2:40:3b:76:
         2e:d4:d0:a2:a3:d4:58:2b:51:dd:ac:7a:a0:81:b1:a8:6b:0f:
         45:b8:7c:23:ce:0b:ab:f1:65:c1:45:ec:d0:d0:32:90:21:f7:
         8e:14:85:b2:28:30:0c:7f:05:ad:61:d5:be:e5:b4:af:98:85:
         be:1b:bc:ec:db:b4:44:b7:de:7f:bd:59:7e:6b:f3:57:a8:40:
         be:e6:51:1f:41:3b:03:fb:7d:f4:a8:10:76:dd:37:f2:02:9e:
         d5:f0:17:58:f2:65:9c:dd:11:fa:cd:2f:81:46:5d:87:6b:25:
         74:6c:54:87:60:ae:3e:00:0d:0b:04:03:d5:38:53:b8:50:38:
         f7:23:10:5d:aa:87:55:f9:e2:87:25:81:20:79:9a:f2:a2:ad:
         fc:2b:3f:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOgfzk/GCBzixmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
N2Y1MTYzYmMtYWQyZS00ZWFjLWFmYjctMzkwNjIyZGVkOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qRy7GwR3cvghvKkxHIwrZbZCoXBwkD7g8Aa
rO9PMFGJIZ62LSK5iFp/lp/zjJ//e1zgTCqKhJPuZQ+giFyLfIntkkejg+7BlzbH
Ydw33ujFV9LgtdC+f74CZEasb2m7Zwyvpsw2+jK6xOVxErwZQKqSzHI23a5ZX8Wy
fcegM/G2Xu99HTS77L44TChcj3TXynYzPMDOS6ch1D7a26OF8rUtc2cmqTHj5QWj
QlwnHwiGzNPiDOBU787y5qtg7OvRf0NLLGo/tqRKsjqZFEISTHOoFbSQ/QrkFvdo
wCGN7bWyVC/keELNPWl7E6BY5eB99LvCYtic78tJYnGgq1GNxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLVGE0ri4YY0pnYVyrs+gRmafggEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg5ZjVkY2ItYWU5YS0z
MmRlLWEyNDAtODEzN2FhOTNhMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQD7Ho
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACveXe1mz4duZML5S7cHWXihBBuihcitMastaQHuxKmL227B+oDC
6CHwr782nzRTK5skB0yiCSNy0RvloMwJBiY/obp44RdnIfxgi/4Fbf4u/bIHs9Sn
SSGMpMwM3Edcj891gF3F97qbwkA7di7U0KKj1FgrUd2seqCBsahrD0W4fCPOC6vx
ZcFF7NDQMpAh944UhbIoMAx/Ba1h1b7ltK+Yhb4bvOzbtES33n+9WX5r81eoQL7m
UR9BOwP7ffSoEHbdN/ICntXwF1jyZZzdEfrNL4FGXYdrJXRsVIdgrj4ADQsEA9U4
U7hQOPcjEF2qh1X54oclgSB5mvKirfwrP6M=
-----END CERTIFICATE-----