Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3dd55b79-a3fa-3206-a6d1-896ad473b394.roa
File:                     3dd55b79-a3fa-3206-a6d1-896ad473b394.roa (raw, json)
Hash identifier:          gYzlQZNiBGAokTSn83NuMvsacxBaQdUx9NcRavCojRA=
Subject key identifier:   0C:19:06:07:96:C7:4C:15:9A:51:04:A2:5F:C2:CE:30:DC:0E:33:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C248113CF79A59DBB08CD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3dd55b79-a3fa-3206-a6d1-896ad473b394.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:a100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:81:13:cf:79:a5:9d:bb:08:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=dfa76042-151f-4358-b2b5-284042f90ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:4e:aa:41:26:30:54:52:fa:55:b3:d5:a0:
                    a9:05:4d:2d:94:14:cb:9c:0a:3b:4a:3e:08:21:f5:
                    ce:6c:8a:32:91:7a:2a:66:6f:d2:54:61:d7:08:9f:
                    8e:2e:f4:a8:0c:72:85:63:a2:11:90:55:98:54:73:
                    19:07:98:7d:37:13:31:93:d2:96:15:78:2b:ff:17:
                    69:91:c5:8b:af:b4:43:76:78:5d:dc:b5:a6:d1:c6:
                    a5:2a:0a:ea:c1:41:02:31:ab:58:62:5e:30:42:c3:
                    f0:26:18:f1:d6:4b:5e:78:88:a7:9b:9d:de:06:3c:
                    da:eb:09:b6:a5:4e:32:e3:ec:27:e1:41:7d:6a:81:
                    80:1d:0f:52:16:13:32:eb:f7:80:79:06:dd:db:94:
                    0b:50:f0:51:e4:c7:33:5f:f8:36:89:cf:8a:78:8d:
                    94:05:e6:c3:31:26:9d:82:86:81:1b:8c:5d:6e:54:
                    bb:17:63:ee:92:a6:d2:43:fa:26:22:10:ca:a0:38:
                    8c:d0:bc:af:ab:2b:54:6a:a2:53:70:0a:64:46:87:
                    00:83:31:30:43:24:0c:f0:c6:d7:e2:09:23:f5:7a:
                    8a:5e:35:98:db:00:99:46:d4:3d:91:ba:f3:6e:bb:
                    da:72:0e:7e:89:0c:8e:52:82:ea:74:ee:62:56:aa:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:06:07:96:C7:4C:15:9A:51:04:A2:5F:C2:CE:30:DC:0E:33:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3dd55b79-a3fa-3206-a6d1-896ad473b394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:14:11:78:82:2f:55:01:90:5f:e4:98:33:6d:4e:49:35:69:
         01:a6:a7:03:c5:9d:9c:21:f0:5c:58:62:be:46:39:db:14:1c:
         65:5f:7d:59:5f:07:b0:95:ab:72:70:8e:23:16:74:6b:24:4d:
         ef:9f:d6:82:dc:e0:55:ab:6a:fa:8a:4d:b7:2e:16:19:96:ff:
         87:5e:8a:6c:dc:c4:37:83:25:c7:42:c3:45:a5:b2:6d:53:81:
         98:8e:d6:13:9c:9d:28:20:90:64:d5:87:97:a3:f3:29:cc:44:
         31:30:5d:27:0c:0f:29:b7:10:f6:a9:a7:54:45:2d:7d:e4:1f:
         3f:a8:ed:3a:53:2b:ae:a8:7e:80:e5:e2:0f:e8:46:4c:df:f5:
         be:f6:33:ca:c0:ce:c4:4a:be:80:bb:13:e9:c6:68:f8:c0:27:
         db:62:52:0b:1d:62:d3:d8:43:b9:2e:bd:33:4c:7d:58:16:29:
         93:94:83:2c:3a:e9:e8:15:91:12:b8:75:7a:04:1b:85:ce:c6:
         48:75:92:63:45:c7:cb:96:84:a8:9c:89:dd:c5:9f:2f:f2:e3:
         cf:a7:42:7f:33:dd:c2:58:49:66:c1:3c:68:55:e9:a5:90:03:
         92:4f:6f:49:db:aa:e5:7e:22:ad:6d:ea:e6:40:dd:35:5a:60:
         fb:da:26:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIETz3mlnbsIzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZGZhNzYwNDItMTUxZi00MzU4LWIyYjUtMjg0MDQyZjkwZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1NOqkEmMFRS+lWz1aCpBU0tlBTLnAo7Sj4I
IfXObIoykXoqZm/SVGHXCJ+OLvSoDHKFY6IRkFWYVHMZB5h9NxMxk9KWFXgr/xdp
kcWLr7RDdnhd3LWm0calKgrqwUECMatYYl4wQsPwJhjx1kteeIinm53eBjza6wm2
pU4y4+wn4UF9aoGAHQ9SFhMy6/eAeQbd25QLUPBR5MczX/g2ic+KeI2UBebDMSad
goaBG4xdblS7F2PukqbSQ/omIhDKoDiM0LyvqytUaqJTcApkRocAgzEwQyQM8MbX
4gkj9XqKXjWY2wCZRtQ9kbrzbrvacg5+iQyOUoLqdO5iVqqteQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAwZBgeWx0wVmlEEol/CzjDcDjP0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2RkNTViNzktYTNmYS0z
MjA2LWE2ZDEtODk2YWQ0NzNiMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAKEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAYUEXiCL1UBkF/kmDNtTkk1aQGmpwPFnZwh8FxYYr5GOdsUHGVf
fVlfB7CVq3JwjiMWdGskTe+f1oLc4FWravqKTbcuFhmW/4deimzcxDeDJcdCw0Wl
sm1TgZiO1hOcnSggkGTVh5ej8ynMRDEwXScMDym3EPapp1RFLX3kHz+o7TpTK66o
foDl4g/oRkzf9b72M8rAzsRKvoC7E+nGaPjAJ9tiUgsdYtPYQ7kuvTNMfVgWKZOU
gyw66egVkRK4dXoEG4XOxkh1kmNFx8uWhKicid3Fny/y48+nQn8z3cJYSWbBPGhV
6aWQA5JPb0nbquV+Iq1t6uZA3TVaYPvaJpc=
-----END CERTIFICATE-----