Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/595d0ce9-cb4a-388f-aa6c-ef46aaabbd66.roa
File:                     595d0ce9-cb4a-388f-aa6c-ef46aaabbd66.roa (raw, json)
Hash identifier:          fb/pYr/Z1KkfG3/xpj/2TQFvrWTS0ILZgls9wRvagkY=
Subject key identifier:   22:9D:1E:3A:D4:4E:30:42:CD:13:44:39:08:F2:11:19:E4:06:4D:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849626044600C82F52E5D3F6AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/595d0ce9-cb4a-388f-aa6c-ef46aaabbd66.roa
Signing time:             Tue 01 Apr 2025 18:37:01 +0000
ROA not before:           Tue 01 Apr 2025 18:37:01 +0000
ROA not after:            Mon 30 Jun 2025 18:37:01 +0000
asID:                     6167
IP address blocks:        2600:100a:a012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:60:44:60:0c:82:f5:2e:5d:3f:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 18:37:01 2025 GMT
            Not After : Jun 30 18:37:01 2025 GMT
        Subject: CN=3825d472-ecb3-4416-b9cc-93aa5a6e21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:86:10:1b:f6:3c:cd:59:e4:7e:0c:fd:4f:
                    df:80:96:68:3c:81:ab:59:8f:51:2b:bb:cc:cb:77:
                    de:d1:0f:7f:ee:6a:29:df:15:73:7e:43:cf:18:99:
                    b2:e2:b4:13:6e:2e:b4:50:87:d6:20:f5:ea:5d:d8:
                    87:ce:1e:40:da:7d:71:fb:3f:c7:a2:ab:12:b9:1a:
                    08:59:be:4e:c5:c7:dc:ad:60:8c:a0:ab:b8:1d:3f:
                    6b:34:c3:74:f1:e1:f7:00:52:79:3b:bf:41:c8:59:
                    25:ff:6c:7d:da:8e:10:34:46:79:94:c9:90:c9:c7:
                    c2:70:1b:38:49:e8:ad:b2:1e:7f:b4:cd:b3:88:94:
                    05:01:0d:1b:e3:ef:c5:24:ad:32:af:a1:95:99:b9:
                    14:2e:a7:93:bc:fa:41:57:fb:48:00:bc:4e:a2:af:
                    da:50:f8:1d:4e:f8:a0:47:c9:a1:92:1e:98:60:a0:
                    50:21:89:91:bf:75:24:20:fe:bf:ea:eb:40:87:57:
                    17:b8:d3:bc:f3:06:11:8c:88:fb:09:b0:24:04:3f:
                    ee:2a:8f:1e:71:01:13:5d:7e:10:8b:ce:f4:da:28:
                    0f:d3:a1:a6:5a:10:42:d1:2f:38:63:72:00:ed:23:
                    4d:29:1c:9a:3a:ca:9d:e6:a8:dc:68:f4:73:2f:f6:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:1E:3A:D4:4E:30:42:CD:13:44:39:08:F2:11:19:E4:06:4D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/595d0ce9-cb4a-388f-aa6c-ef46aaabbd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:35:12:70:78:c7:3d:1d:a7:85:13:0a:2e:21:4e:50:84:97:
         b6:e6:6b:95:67:4d:0d:e9:05:f0:d5:84:6d:73:37:f7:da:e3:
         eb:a4:8c:19:6f:f2:f4:33:8f:e9:58:8b:22:95:5d:52:30:df:
         9c:d4:d8:5a:d7:1b:7d:ec:2c:94:23:60:e5:75:42:c5:ca:42:
         e6:e4:2a:32:3e:1e:05:68:40:29:9d:05:ba:48:57:2b:64:a6:
         15:5e:25:94:88:3c:90:73:3e:f2:94:bd:29:3f:b1:6e:c1:59:
         20:e5:4f:d5:13:03:28:f0:0b:48:d5:e7:61:25:d9:24:c4:b7:
         e1:27:d0:d2:20:83:17:7b:21:d5:dd:d0:39:6b:22:32:7f:9b:
         af:80:c6:df:c4:c8:c2:57:f8:e1:b2:d4:71:c0:74:d4:79:64:
         84:43:76:09:fd:de:61:2c:d8:28:b8:82:86:39:36:83:29:8e:
         87:b2:ee:94:1e:10:13:d4:ba:7f:82:c6:ae:84:75:21:5f:68:
         24:95:4e:d9:1f:0a:b1:fe:14:4f:4b:be:bb:ba:dc:39:57:64:
         2e:de:65:34:9b:1a:c0:5d:6f:c4:0d:c1:0a:37:8e:b8:4e:2c:
         ff:a2:33:45:77:08:fe:6f:33:3a:27:8f:2a:53:66:ad:86:a6:
         fc:32:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----