Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa
File:                     693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa (raw, json)
Hash identifier:          avx9u8jqPQ62cnGBjpe92dpQ6bupkKMcUnQpxlDaOjE=
Subject key identifier:   93:B5:76:50:D5:10:87:40:15:D5:2F:3D:1D:B1:2E:62:81:46:8F:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1A9C8E24F52491E010C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:a100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1a:9c:8e:24:f5:24:91:e0:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=e83b6ab3-bf0c-49fa-a1a0-0e75d2267c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:2e:e0:45:69:26:6f:3a:8f:8d:aa:28:d8:
                    4b:bb:08:fd:d7:a4:d2:c5:77:b7:fa:dd:e7:36:eb:
                    3c:d1:16:95:12:01:d9:07:dd:83:24:9b:50:cf:47:
                    7f:aa:10:fb:0a:0e:25:c1:63:35:e4:30:85:6c:5c:
                    1b:f3:f4:e7:65:b9:82:23:d5:1e:42:2a:7b:74:3c:
                    76:95:be:0c:34:a7:b3:47:9c:78:70:be:89:94:96:
                    7b:ee:a9:9d:4f:b4:7f:d0:d6:86:94:d7:10:fd:90:
                    37:e1:12:f2:55:0c:fd:90:9f:39:57:a5:44:4a:d9:
                    ba:70:a5:72:00:10:78:6d:39:bc:83:5a:6a:00:6d:
                    e5:66:c8:ce:1b:89:70:0a:3c:38:e5:fd:17:68:a2:
                    2e:47:8c:45:ba:64:d1:f4:30:cb:69:1a:f1:5a:ac:
                    33:99:c9:58:a2:f2:0e:41:69:49:41:6e:9a:67:67:
                    84:a2:4a:97:9c:7c:44:f6:d1:c8:cb:cb:83:83:5f:
                    39:69:d9:3d:e4:3a:08:3d:dc:07:72:72:3d:25:ff:
                    75:cc:86:33:6c:09:88:53:78:f1:3c:0a:04:5f:4e:
                    06:8f:99:22:13:30:15:a8:09:46:62:e2:73:16:57:
                    0e:66:1c:11:b6:91:c4:cc:e6:c6:b1:ce:05:ba:10:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:76:50:D5:10:87:40:15:D5:2F:3D:1D:B1:2E:62:81:46:8F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/693410d3-f1e0-3fe5-b5be-a58d15d5dbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:47:91:94:86:9c:a1:da:8d:f7:7a:17:d3:0c:a0:f2:15:
         f5:1c:ab:d8:9e:66:a2:2a:8c:cc:78:21:76:e5:83:ce:6d:7b:
         f3:46:b2:24:1e:1c:1b:24:df:90:69:2e:d5:a5:d6:36:19:85:
         9c:ea:21:a9:89:08:92:65:7a:fb:d4:61:49:d1:e1:ee:d4:3c:
         53:63:90:18:5e:8b:95:d9:52:71:2b:61:18:c5:0d:68:f1:15:
         1e:18:1e:87:95:15:98:c1:b0:b0:6d:d2:58:32:c4:f6:28:6a:
         e0:2d:32:21:99:aa:e9:1b:6c:de:88:de:9f:86:74:1c:26:89:
         28:bb:f9:10:06:1b:3e:bc:04:3a:4b:b9:ef:7c:35:7d:5f:1d:
         4d:19:94:86:fc:ed:0b:07:d9:29:2f:d9:19:21:35:92:f9:48:
         23:4f:db:a0:ec:ed:d9:6d:dc:21:b7:49:d0:49:18:c4:54:a4:
         6d:45:e7:d6:7d:12:4e:a0:f4:3e:50:03:58:1d:e1:c9:29:ca:
         cb:cb:19:52:34:5c:0a:36:78:06:4a:21:e6:c9:13:29:13:7a:
         c6:22:af:b5:44:b5:eb:1c:86:66:dc:e3:28:96:93:81:5b:0d:
         41:9c:9c:f5:95:92:90:30:e4:87:a5:f5:0f:c2:e3:a8:5e:e4:
         b0:2f:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----