Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
File:                     5c1adf31-9969-3673-b38e-984ece6b6e85.roa (raw, json)
Hash identifier:          +7y7eNaPDtSdz4UuNrGk4biLPJX1wFOReSduH4Pd9M4=
Subject key identifier:   8C:D2:E2:2E:8A:BA:94:FC:4E:DD:A5:05:1A:E4:1E:05:F9:27:32:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A01CEEF2C33217BB1DA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:01:ce:ef:2c:33:21:7b:b1:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=82bae321-5fe9-4228-acfc-2a8b5a535eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:24:a9:36:f8:90:6b:2b:ed:0c:03:39:c8:
                    db:4b:52:3a:f3:25:46:a6:67:e8:5b:79:1a:ab:12:
                    15:ab:50:93:a9:6c:fa:3d:1c:5b:4e:d6:ad:c9:dc:
                    0a:d2:f6:2d:8b:36:a7:82:5c:9a:df:9e:d6:bc:4f:
                    67:d8:dd:83:64:43:e6:5f:df:dc:d5:90:ce:d2:c8:
                    ac:3d:c0:71:e5:b1:59:63:f1:4c:ca:d3:3b:22:6d:
                    b3:15:e1:e8:f2:dd:5b:9f:30:a6:9b:23:1d:f3:70:
                    64:a2:80:b4:2e:ba:d3:4a:c6:36:5d:ff:f2:7a:67:
                    56:c1:21:3a:d9:6e:40:69:21:61:c0:86:92:0b:a1:
                    af:1b:9c:b5:64:9c:0f:48:f8:5b:88:a7:69:da:67:
                    ed:b7:e8:6b:7b:55:9c:66:69:e9:44:e2:bc:4b:23:
                    e2:91:ee:7f:07:88:e2:47:38:f5:60:c6:ef:f4:18:
                    0b:35:03:a0:9c:86:cc:45:7c:41:f4:f7:2c:96:27:
                    cf:07:2f:95:10:c9:81:12:16:b9:ed:41:5c:88:c8:
                    6d:4f:c0:ea:4c:d0:5e:34:56:8e:93:5e:be:24:22:
                    57:b3:a4:58:0f:df:ec:c7:32:f5:2b:51:88:7c:e5:
                    df:5a:f9:e0:c7:62:98:ac:a8:b5:64:9c:4e:9a:84:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D2:E2:2E:8A:BA:94:FC:4E:DD:A5:05:1A:E4:1E:05:F9:27:32:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1adf31-9969-3673-b38e-984ece6b6e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:30:9b:b7:05:7d:d1:34:50:41:87:56:48:68:3a:48:b2:00:
         4c:db:91:1f:ee:00:bd:1a:db:6a:22:54:81:9f:6a:b3:30:b4:
         8f:c5:15:b6:bd:bb:92:bc:3e:4e:80:2c:56:9b:60:4f:dd:eb:
         81:94:fc:cf:bc:d3:4d:8d:51:ab:60:91:4f:3a:a5:bd:f5:5c:
         96:17:33:69:36:44:6e:18:4e:fd:19:e5:d4:e5:7e:31:11:53:
         3c:e1:81:b4:e7:07:81:6b:a0:a8:c8:cb:ec:c6:27:5f:87:12:
         17:46:f2:77:43:3f:e7:a4:fb:51:ca:08:33:21:e6:28:2a:b6:
         e1:0b:bd:6b:59:fa:c4:19:de:f3:22:5d:b0:f0:bb:b0:92:23:
         3b:5f:60:ef:c3:3c:a0:bc:35:a4:5c:2d:b8:da:02:12:2a:55:
         fd:c5:da:a2:1e:a9:39:da:ff:a1:90:ab:78:50:85:5a:e5:2b:
         98:a4:9a:79:02:a0:84:d3:dc:eb:37:6a:91:eb:37:e3:ee:31:
         e2:55:b9:15:9d:30:7e:5c:61:65:b3:4d:14:03:26:86:a2:2a:
         b3:fe:e0:ce:98:44:5c:41:7d:0c:ff:7c:25:e3:a1:04:c4:f8:
         ea:f6:e0:81:ea:81:44:49:d7:34:35:ab:59:97:4a:40:79:b1:
         56:c7:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----