Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a90a9ee-6b3c-3032-9a38-b59b39880f33.roa
File:                     6a90a9ee-6b3c-3032-9a38-b59b39880f33.roa (raw, json)
Hash identifier:          Lv/ufLpe8jOSoHEw6h/zrAStai20LGrI3A+iRwg2oVU=
Subject key identifier:   49:AE:D7:46:F7:B3:D6:1B:B6:D9:CB:5A:19:88:9B:26:E6:B3:B3:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24845ECA548A770B52A980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a90a9ee-6b3c-3032-9a38-b59b39880f33.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:b132::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:84:5e:ca:54:8a:77:0b:52:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8d016546-03f9-4891-9e24-928c6f6a4b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:a7:37:23:61:b7:82:a0:09:73:3c:67:09:
                    3a:ab:99:ce:c4:d0:ed:d4:44:ba:c8:1a:98:c1:53:
                    29:87:5f:06:c3:29:77:05:16:eb:8e:1b:00:ec:2f:
                    a0:ba:95:2c:9d:f4:6d:6e:8d:f5:38:53:3d:f6:d5:
                    f6:1d:a1:7a:c9:fa:50:19:c9:b4:79:2f:bb:c6:63:
                    9b:99:e9:49:58:f3:5d:4f:2d:c1:59:cd:76:ff:95:
                    69:d4:26:cb:ca:e4:13:99:9e:9a:b8:d2:94:fe:43:
                    ce:aa:ce:d8:77:4f:75:9c:c9:c3:37:72:ab:e3:ee:
                    e4:d9:a3:3e:6e:32:1c:08:7c:73:80:d1:a1:77:46:
                    5b:8a:99:f3:f1:da:9e:58:ca:93:ed:b7:38:cb:d3:
                    9b:e1:fa:47:bd:0e:b3:42:95:a2:e0:39:d8:97:70:
                    34:81:f7:d0:d0:8e:70:70:db:24:04:34:c0:d8:c4:
                    4f:77:2c:40:bf:09:82:e9:f3:3b:fc:b4:b3:2d:bd:
                    1b:8e:ed:82:af:06:23:18:df:bc:e3:cc:6e:8d:ce:
                    8c:80:44:e0:4d:72:78:9e:2e:19:4b:e4:49:b4:b0:
                    20:57:a3:df:cb:0d:7c:e6:df:a0:9d:41:01:48:57:
                    b1:e1:ff:e0:0e:3c:6d:df:61:07:0f:ab:84:81:b8:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AE:D7:46:F7:B3:D6:1B:B6:D9:CB:5A:19:88:9B:26:E6:B3:B3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a90a9ee-6b3c-3032-9a38-b59b39880f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b132::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:66:49:33:fa:35:01:1c:de:39:96:45:29:08:01:a4:1e:ad:
         5b:03:e4:54:8c:ab:c4:26:b4:c9:c4:20:d7:d1:e2:08:96:da:
         fd:74:82:90:36:19:f8:d4:28:00:1f:fd:5c:40:f9:b8:0c:b7:
         0d:ac:49:95:29:3a:74:63:a9:d5:70:3f:57:ca:cb:65:1e:7f:
         03:78:c3:52:6f:02:32:66:0b:63:38:76:ad:21:ed:a4:5a:7f:
         e7:67:6f:1f:44:3b:c1:85:36:f2:a6:34:d8:a7:2c:39:3f:e0:
         5c:08:d1:59:4c:c9:97:58:93:be:a8:11:5f:1a:5c:73:15:42:
         aa:7d:3c:b0:90:1b:a3:fb:0b:5c:55:04:fa:df:88:97:ee:2e:
         3a:43:d8:3d:a4:3d:09:59:76:7a:55:79:4e:af:7d:ca:e0:17:
         16:08:d1:2b:ab:e9:b9:2d:18:92:f7:8a:70:fc:81:19:12:58:
         64:6c:19:c5:2a:de:ad:23:86:bb:ad:a0:3a:89:7a:90:cd:15:
         a6:bb:04:aa:77:83:13:f3:4b:e0:04:a8:f6:c4:3e:e0:17:57:
         84:d3:cf:80:c0:c7:b7:1e:7f:16:26:fb:35:1a:5e:1d:a8:99:
         fb:18:65:46:94:09:54:3b:99:40:bf:1c:0e:c0:df:8b:ad:fd:
         f1:b9:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----