Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
File:                     563dda30-845a-3129-b5da-6bddf2ab9520.roa (raw, json)
Hash identifier:          gObTy0vLXkpjvM1DxUKA29rInWSdeh5aBZQMFkOISHc=
Subject key identifier:   91:B5:CE:2B:B5:4C:EC:E8:F4:4D:86:D7:C4:2D:63:B2:94:51:CE:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1CAFCF57FCBCC1CF8D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     22394
IP address blocks:        2600:100c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1c:af:cf:57:fc:bc:c1:cf:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=2e025b1d-594e-40a1-8a03-c397e8134e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:9b:3c:6c:f8:b9:89:26:7a:a6:89:10:a5:
                    ef:10:f3:8d:04:56:68:75:61:e3:e7:3c:2b:42:19:
                    0d:96:77:b4:22:83:b6:6e:3f:8d:7c:87:2d:5a:1e:
                    67:17:f3:3c:c3:21:f2:82:56:c7:02:81:ad:c7:5d:
                    4c:79:27:bf:1d:8c:af:17:82:79:f8:8b:86:13:10:
                    71:6d:5d:61:e9:1c:f2:51:08:b3:60:88:66:c9:45:
                    68:1a:58:43:1c:a1:b5:92:03:cc:c9:a6:1b:3b:2c:
                    db:2d:5e:a5:15:4b:03:53:f7:b8:d3:e5:f9:c1:70:
                    39:22:59:1f:25:12:36:4c:3a:f3:d8:1b:83:3e:ab:
                    37:d4:c2:ce:b4:06:c5:5b:46:10:fb:82:63:7b:f1:
                    b1:9a:36:19:18:f6:04:3f:cf:9b:fe:3b:5b:9c:e5:
                    e1:17:ca:5d:9b:a3:6e:60:ea:15:22:97:da:ae:ed:
                    8f:53:7f:79:d6:f9:ce:be:08:73:68:44:4e:da:cc:
                    44:a3:c5:2b:9e:58:09:3a:58:f0:49:41:de:25:15:
                    bf:7d:cf:21:47:01:dd:77:44:7a:68:8f:ae:81:7b:
                    14:35:3c:22:13:21:f7:f1:b2:44:3e:cf:65:57:9a:
                    7f:a6:81:37:76:28:ac:f7:8f:90:cd:2a:26:71:fe:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B5:CE:2B:B5:4C:EC:E8:F4:4D:86:D7:C4:2D:63:B2:94:51:CE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:45:76:93:a1:33:38:f0:69:d9:32:f7:1e:77:18:8e:4c:
         bd:5f:dc:3e:6d:2f:94:59:83:d6:6a:06:56:de:44:b7:7e:b1:
         95:d6:f5:1b:60:ce:59:cf:be:85:69:02:5d:6e:a8:0d:5d:1d:
         bd:6b:b3:90:de:88:a2:29:ec:28:81:7f:da:8b:62:4d:88:44:
         33:3d:1c:d0:d4:ea:63:d4:d8:2c:dc:53:be:8e:7f:41:d0:33:
         7b:2f:1c:b3:e9:44:a1:8e:91:f4:9e:10:03:f7:f6:a4:5e:e2:
         b7:71:5d:47:1d:79:0c:5f:d5:8d:d2:44:b2:78:5f:11:13:6d:
         a4:cd:66:4c:2e:48:ee:c3:38:72:15:60:32:8f:5f:ee:de:69:
         68:cc:1e:84:2e:6a:57:3e:51:99:5e:f3:f7:13:e9:ce:f4:74:
         e7:49:b7:f1:9f:95:11:16:84:b3:06:c1:4b:62:0d:0f:fa:71:
         80:34:b9:11:12:4d:53:a2:ba:6e:b0:f3:54:eb:01:be:03:4a:
         dd:d3:c4:cc:9a:9f:83:b4:a3:de:9d:6f:1f:08:51:90:d4:fa:
         bf:08:75:b4:4e:e8:b4:7e:27:1f:d8:0c:c3:36:23:d1:07:87:
         4d:b5:1d:35:87:75:38:48:d2:1b:97:83:d3:ad:65:78:e2:26:
         38:43:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----