Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e29da89-e735-395b-a4b9-9e1e3c347cd4.roa
File:                     4e29da89-e735-395b-a4b9-9e1e3c347cd4.roa (raw, json)
Hash identifier:          eNrXcXZwNyDawuvMZj6kXBqn6dkRPaxL3945Dldum3w=
Subject key identifier:   0A:41:A3:5B:21:48:CD:35:93:7C:21:7C:8F:0E:04:86:16:BF:44:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245C660D5D71BCD9A88BE1
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e29da89-e735-395b-a4b9-9e1e3c347cd4.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1005:b190::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5c:66:0d:5d:71:bc:d9:a8:8b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=af5555b1-4d3d-49a9-88ad-0baed0ea4b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:18:fe:31:87:42:a4:42:c9:98:5a:32:75:
                    4d:b5:e9:45:f4:3a:49:f5:dc:5f:7c:0e:27:17:2a:
                    38:ef:fa:26:f0:31:ac:1a:29:c4:1d:64:67:c8:0e:
                    ac:19:26:28:53:b8:05:29:c3:15:47:3d:ae:01:71:
                    18:73:d7:65:5a:4c:83:15:24:e8:9c:9d:16:05:17:
                    f1:9e:52:06:80:f4:1f:7d:30:32:b9:d7:80:6d:da:
                    4f:f8:95:2b:a7:dd:b5:30:85:71:59:f9:8a:d8:8b:
                    e5:02:74:12:d0:2e:9e:eb:39:5a:03:11:64:d9:18:
                    96:d8:9e:f2:ce:4a:68:d2:9c:4d:9d:8d:6a:27:be:
                    39:14:e8:ad:cb:54:9a:31:0a:94:4c:66:e6:44:b9:
                    3a:36:6a:5c:52:46:07:18:b0:1f:63:1f:ce:04:4b:
                    54:03:ba:b0:2b:54:f8:f7:54:0f:11:4f:fe:c4:78:
                    5d:f5:36:cb:1b:a5:ef:8e:8b:ef:9f:0f:0b:29:9f:
                    77:f6:86:9f:cf:18:f0:41:75:c5:ee:54:e0:12:2a:
                    b4:b9:d1:22:97:e2:31:6a:29:c8:fb:51:84:87:c1:
                    f3:05:c6:6b:e2:c0:2e:39:d7:99:3e:eb:63:8e:67:
                    b4:03:e5:19:cd:64:85:b5:5b:ba:b0:0c:9e:31:83:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:A3:5B:21:48:CD:35:93:7C:21:7C:8F:0E:04:86:16:BF:44:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e29da89-e735-395b-a4b9-9e1e3c347cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b190::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:66:af:ce:9e:0a:64:d4:4f:d7:b2:9c:ce:5a:0c:79:c9:
         b2:06:93:c1:ce:70:cc:7b:1b:ae:0a:9c:89:8b:9a:87:6e:b9:
         9e:63:8e:9e:6f:cb:52:8f:44:7f:e5:38:53:f5:c8:66:5a:28:
         fa:de:1a:05:32:70:b9:04:fc:8c:82:e1:fb:f1:16:64:f5:8f:
         8a:a9:a5:95:74:c3:c2:ba:a3:e5:04:61:78:7f:81:16:ab:18:
         43:ae:de:4a:9c:b0:71:2a:80:63:57:29:3e:5d:24:75:82:10:
         b3:84:63:6a:dd:60:1d:23:90:d7:55:40:ad:04:fc:15:b4:75:
         fc:dd:37:19:b4:14:7e:fe:9e:b9:70:5e:87:44:f6:e8:1b:66:
         1e:5f:86:82:de:7e:57:4d:ed:af:84:63:db:65:00:b1:af:43:
         dd:28:f7:a6:c8:08:49:44:46:e3:49:26:03:29:74:4a:aa:8c:
         cb:a4:09:cd:24:94:95:c0:a1:c8:d2:60:b1:e8:73:e6:d0:1a:
         50:a5:e2:08:6a:53:f3:f8:b5:c1:81:e4:e3:cd:82:39:e3:b5:
         80:eb:72:87:94:46:d1:8e:ee:11:28:52:dc:d7:23:01:aa:40:
         cc:b4:0e:8a:9a:77:be:72:7d:aa:c5:7e:27:99:89:34:e3:7d:
         aa:f2:95:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFxmDV1xvNmoi+EwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YWY1NTU1YjEtNGQzZC00OWE5LTg4YWQtMGJhZWQwZWE0Yjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VEY/jGHQqRCyZhaMnVNtelF9DpJ9dxffA4n
Fyo47/om8DGsGinEHWRnyA6sGSYoU7gFKcMVRz2uAXEYc9dlWkyDFSTonJ0WBRfx
nlIGgPQffTAyudeAbdpP+JUrp921MIVxWfmK2IvlAnQS0C6e6zlaAxFk2RiW2J7y
zkpo0pxNnY1qJ745FOity1SaMQqUTGbmRLk6NmpcUkYHGLAfYx/OBEtUA7qwK1T4
91QPEU/+xHhd9TbLG6Xvjovvnw8LKZ939oafzxjwQXXF7lTgEiq0udEil+IxainI
+1GEh8HzBcZr4sAuOdeZPutjjme0A+UZzWSFtVu6sAyeMYMUMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFApBo1shSM01k3whfI8OBIYWv0Q3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGUyOWRhODktZTczNS0z
OTViLWE0YjktOWUxZTNjMzQ3Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBbGQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPkZq/Ongpk1E/XspzOWgx5ybIGk8HOcMx7G64KnImLmoduuZ5j
jp5vy1KPRH/lOFP1yGZaKPreGgUycLkE/IyC4fvxFmT1j4qppZV0w8K6o+UEYXh/
gRarGEOu3kqcsHEqgGNXKT5dJHWCELOEY2rdYB0jkNdVQK0E/BW0dfzdNxm0FH7+
nrlwXodE9ugbZh5fhoLefldN7a+EY9tlALGvQ90o96bICElERuNJJgMpdEqqjMuk
Cc0klJXAocjSYLHoc+bQGlCl4ghqU/P4tcGB5OPNgjnjtYDrcoeURtGO7hEoUtzX
IwGqQMy0Doqad75yfarFfieZiTTjfarylaQ=
-----END CERTIFICATE-----