Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
File:                     5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa (raw, json)
Hash identifier:          aMaV3vu/nQeTJcLw0N9adFKP7EBIrFogUlUFROYyf+k=
Subject key identifier:   FA:64:54:06:0C:CB:CA:98:2F:85:62:45:73:26:9A:FC:0C:CF:EB:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1299C83721AB04D26460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:a110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:12:99:c8:37:21:ab:04:d2:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=80367cda-9ccb-49ca-9a4a-20fd1112dc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:c0:5e:e2:75:40:3d:80:b2:f4:01:34:72:
                    b7:85:23:01:12:87:ed:3b:cc:46:a8:f9:18:a5:55:
                    9e:d9:c6:d3:6b:31:e2:9f:9e:57:0a:0c:61:f2:1f:
                    1a:86:b5:5b:3c:7e:7d:60:58:66:71:3b:02:dc:7c:
                    22:b4:f4:85:36:b6:2c:f8:f9:d7:ac:7e:f3:5a:3f:
                    d5:68:aa:66:45:34:05:2c:ab:6f:33:a8:2f:c6:8b:
                    e9:20:0e:41:19:c4:d9:f3:95:1c:eb:6b:9e:5c:1e:
                    e2:e9:91:ae:ee:8e:74:dc:b0:e8:74:65:b3:03:ad:
                    7a:0d:b0:f0:31:b1:48:db:35:56:0d:07:83:2a:11:
                    68:13:88:29:23:79:72:f5:df:a2:1e:c4:6d:12:87:
                    a7:70:f2:85:2b:ed:36:76:04:39:f1:9c:7f:58:9c:
                    ca:6f:3f:6c:c5:e9:35:02:98:d7:e0:fd:f5:f4:c5:
                    4c:c5:60:1a:98:04:ff:62:6f:aa:ab:4c:a5:5c:ae:
                    be:46:95:9f:9b:e2:3e:8d:18:71:c1:1f:90:82:64:
                    06:f9:40:ea:40:e1:a6:ca:0a:83:12:22:d4:99:e6:
                    d7:97:63:2c:c8:31:88:9d:d0:5b:83:42:25:c6:16:
                    ec:e7:8d:1f:73:cc:84:2a:c1:f9:f7:df:e2:5a:0c:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:64:54:06:0C:CB:CA:98:2F:85:62:45:73:26:9A:FC:0C:CF:EB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:65:c3:ec:e2:2b:4f:f4:7b:db:51:f9:d9:86:1b:b8:67:23:
         cb:ed:d6:0c:4c:25:68:c6:f5:03:d2:02:61:32:75:f1:0c:ec:
         87:34:d3:22:24:51:7c:f6:d6:0a:45:18:ab:f3:25:c0:5e:f1:
         19:df:2e:6e:ae:5c:1c:26:16:03:dc:5b:17:fa:15:bd:28:17:
         8e:55:13:ca:1f:12:6f:95:05:d5:f5:6b:51:ed:43:53:6e:07:
         6c:fd:4d:3a:a3:5a:55:d4:bc:9f:6c:f4:ab:f9:6f:2a:f2:5e:
         90:d5:4b:4d:6d:30:6e:a1:2b:5d:43:e4:cc:ad:7a:28:ee:9d:
         7b:7f:6b:e3:ab:b8:99:34:7b:38:b4:da:bd:64:15:bd:23:a2:
         e3:67:a7:50:19:12:cb:b4:02:b3:cb:40:ba:7e:49:86:df:fd:
         4b:44:ec:c6:e0:e9:12:96:97:68:ad:a1:e6:2d:d5:9b:a4:7c:
         e6:c5:33:56:f4:6e:e6:5d:f6:1e:31:b7:08:60:2a:1f:71:3d:
         c7:51:9c:62:47:f1:16:68:40:1d:e4:12:fb:71:83:75:3d:54:
         4d:1f:36:32:b8:3c:cf:41:9a:59:f8:01:f4:68:30:3d:6f:c0:
         43:5a:1b:b2:8b:ae:d4:60:26:91:5c:6e:b4:de:6c:f5:81:77:
         3a:de:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----