Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4800d33a-6ba9-3420-9ff1-d426b508c18f.roa
File:                     4800d33a-6ba9-3420-9ff1-d426b508c18f.roa (raw, json)
Hash identifier:          t8GlAx0VAZtPIOSM/cTz8dJb8GBAslDrn4nghwcms7c=
Subject key identifier:   13:FF:76:B8:2B:18:EA:0C:25:B1:9D:98:0B:BE:AE:B2:06:9B:C2:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A18A69AFE5439C4034100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4800d33a-6ba9-3420-9ff1-d426b508c18f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100c:b210::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:18:a6:9a:fe:54:39:c4:03:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=130f0819-1878-42df-9871-7cae46e370a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:ac:52:db:0e:a2:bd:33:c5:e5:0b:ab:31:
                    e3:ff:92:2d:c2:06:43:52:86:83:44:73:17:8b:a3:
                    fb:5b:76:07:97:cb:e3:6f:1e:d8:69:d9:b3:28:6b:
                    c8:21:3b:f1:19:46:3b:e5:79:96:4c:7a:c2:07:11:
                    37:e5:55:ce:83:d2:35:02:3e:42:84:bf:0e:7a:1f:
                    ed:55:21:ea:1c:46:37:71:53:8f:ea:c3:54:9c:c2:
                    b4:8a:1c:15:5b:f5:d3:4b:5e:4d:26:91:ef:16:92:
                    da:89:6e:90:36:cd:78:c8:9f:23:3e:4b:e4:9c:73:
                    85:ce:47:15:55:a1:f1:14:d5:e2:c9:9b:0c:7e:f5:
                    52:f4:c5:4d:04:ed:b4:96:a5:18:ad:df:30:76:e9:
                    a8:c1:06:f1:66:c7:c3:2f:6d:c1:42:88:cc:a1:f6:
                    81:d2:aa:07:4d:18:b9:1f:88:ec:6a:86:84:b2:44:
                    e8:2a:d1:98:ad:eb:4c:66:cf:8e:38:5f:10:8c:ef:
                    e8:4d:f0:29:f5:95:84:60:f4:07:db:1d:4e:e0:e3:
                    3f:c1:96:99:88:80:80:de:98:cb:d4:eb:ae:c5:b8:
                    f6:d0:13:9b:d3:bb:ad:32:90:1b:61:1e:82:9c:01:
                    73:82:16:c8:80:f9:4a:59:0c:f3:36:36:9b:ad:99:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:76:B8:2B:18:EA:0C:25:B1:9D:98:0B:BE:AE:B2:06:9B:C2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4800d33a-6ba9-3420-9ff1-d426b508c18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:10:1f:6d:c8:12:68:02:35:8e:7b:c7:ff:1c:23:c3:b9:74:
         1c:68:d2:02:ec:2c:19:e9:9f:28:94:cf:2e:de:c0:10:34:3e:
         23:63:27:03:2b:e4:4b:24:98:e6:a5:32:23:71:d0:ca:b1:ac:
         a8:8d:46:f2:60:67:a8:81:e2:74:8c:12:f4:26:38:06:eb:21:
         f7:59:47:4c:7d:22:70:60:bf:9a:b4:8a:a4:bb:01:60:6b:ad:
         b1:bb:16:09:7e:1d:3f:ab:fe:cb:e1:e2:3e:c7:8c:c0:c3:51:
         5b:6a:02:65:8b:8d:35:00:52:e7:47:b7:a1:b0:36:3f:60:3c:
         e5:c1:8a:e3:fd:2e:17:78:af:7b:c5:c1:ac:9c:d9:bf:7c:bd:
         52:45:77:35:b7:ab:9d:ff:44:67:82:0f:30:9d:fd:b0:71:80:
         95:4e:eb:bc:00:67:99:1f:90:f3:9b:42:0f:ed:f4:98:f6:3f:
         ad:23:32:35:a7:8b:e2:59:d4:02:f1:08:cf:21:6d:1e:b6:fb:
         7c:db:a6:bd:fe:41:c9:68:65:27:c3:7e:ec:13:0a:10:49:50:
         87:88:7d:ce:f5:00:cf:d9:9b:7f:59:5c:25:51:de:c6:ec:77:
         47:0b:35:3f:62:57:cd:84:d0:26:85:a6:79:27:dd:a6:7b:c2:
         b5:6a:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----