Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46558207-6b17-3466-b29e-25a9816884c8.roa
File:                     46558207-6b17-3466-b29e-25a9816884c8.roa (raw, json)
Hash identifier:          gjcTnhv51CSFJj/1FaPttnUFMt/7WY4WQf8Hsudi44c=
Subject key identifier:   CD:49:7C:A2:6E:A6:CD:AE:27:88:C2:B4:B0:2F:31:14:C2:AB:8D:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1AF00A41F019627DE300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46558207-6b17-3466-b29e-25a9816884c8.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1a:f0:0a:41:f0:19:62:7d:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c22be640-29c1-4723-8b0f-23fe2191e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:4b:bc:89:cf:66:5d:71:c8:c3:79:4f:c3:
                    7b:05:4a:a9:fb:0b:aa:e1:b9:31:37:e4:d9:60:89:
                    19:eb:2a:4a:80:9b:76:9a:71:06:bf:fc:2d:86:9a:
                    35:70:a4:dc:95:af:db:49:56:d6:ee:2b:b3:48:7a:
                    c4:93:20:6e:1d:ce:e1:6f:03:e2:60:b8:0d:9a:98:
                    ca:fa:8b:8a:9a:c2:e4:4f:61:d7:ec:ee:a9:2a:60:
                    66:44:43:ef:9a:ac:f0:a0:a7:fc:f7:c3:5f:7e:92:
                    eb:8e:69:a8:b5:73:7c:d0:df:7b:97:b1:01:c0:41:
                    98:31:d8:95:e9:48:80:fb:87:32:e0:45:10:99:e3:
                    41:e1:21:59:ae:20:35:b6:60:29:e1:2b:b2:23:58:
                    bc:cf:77:b6:a3:80:04:3d:9b:8f:19:b6:c5:9e:0c:
                    3b:f4:7b:a6:7f:84:de:78:ba:fd:f6:01:20:47:92:
                    24:f5:50:85:19:f6:0e:42:25:b0:94:92:bf:1e:a1:
                    5f:ba:48:ce:d6:c0:b1:56:33:5e:00:64:33:bb:7f:
                    0a:d1:9c:e4:72:0f:81:d0:97:07:09:a2:0a:9b:60:
                    ed:4d:5e:cd:86:10:c8:85:db:85:52:5e:36:e0:90:
                    ca:0d:63:61:5a:af:ce:68:38:c5:6b:39:91:cd:80:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:7C:A2:6E:A6:CD:AE:27:88:C2:B4:B0:2F:31:14:C2:AB:8D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46558207-6b17-3466-b29e-25a9816884c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:fe:b8:9b:c9:8a:6c:40:c9:37:48:94:6e:de:b9:6e:4e:
         37:9c:1a:e2:21:a4:67:64:c9:27:eb:b8:1a:31:66:4d:a1:df:
         f0:67:cd:8f:cd:86:39:2f:0c:2b:3d:17:e4:dd:f3:da:64:00:
         af:8a:f8:a7:4f:5d:ad:8e:37:4f:82:91:29:11:f1:a2:f2:55:
         9e:bf:d2:0c:1b:d0:32:68:bb:6e:02:f6:25:79:6a:3f:aa:34:
         17:a6:99:0f:8b:2b:42:17:c8:a1:95:3e:78:1e:e8:d7:9e:b6:
         b5:11:b3:68:4e:b8:89:c4:8b:2f:c9:fc:f9:6d:59:d3:02:da:
         65:56:ef:44:b6:bb:cd:e3:4f:52:cd:3b:13:a2:5f:c5:43:0c:
         04:7b:08:98:fd:d0:8e:0c:22:db:c6:de:c9:e5:e1:5f:59:f2:
         7b:b9:ea:ca:fe:eb:54:a3:ce:b0:81:a4:39:c1:ed:e8:94:83:
         b8:01:b9:1d:f0:55:eb:a6:0f:c7:7b:1d:9d:43:0a:33:9a:9a:
         d3:4a:a1:06:ea:7b:b6:25:51:36:33:c2:e8:24:58:55:73:69:
         81:ac:ab:3b:1a:7e:46:93:c5:9c:2f:36:2e:78:b5:e0:ff:b6:
         65:f2:0c:bf:22:b7:1d:d3:3f:64:9c:b7:a1:7b:fa:05:cf:22:
         61:7b:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----