Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
File:                     6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa (raw, json)
Hash identifier:          N4mx3otf5pTDy00DvksxK/NIQXSVCJu0QItbi2sBqTI=
Subject key identifier:   89:E0:F0:B4:FB:4B:82:FC:EC:95:94:21:E3:EE:1D:27:A9:A1:F2:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A140C0C5BA4FD5AB7ED80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:b1c0::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:0c:0c:5b:a4:fd:5a:b7:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6283e243-4051-48ac-9154-1e76d6ba50f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:0a:7b:d7:e0:44:76:17:5b:05:02:fe:8a:
                    85:58:e6:34:49:89:ab:2d:ff:da:64:da:df:23:3c:
                    17:7a:9b:93:5c:7f:fa:94:f5:ff:a8:19:09:47:0c:
                    e5:ba:32:26:24:2f:dc:ff:34:88:63:f8:15:7a:6c:
                    43:f0:ef:66:d0:13:1a:d9:41:3f:4d:9d:74:f8:0b:
                    8d:3d:d3:d2:38:aa:03:e5:72:06:dc:a4:9b:3f:26:
                    a7:7e:2f:1b:3c:9b:94:a4:a8:99:c0:d1:34:85:64:
                    fe:99:7d:41:06:0f:8c:9e:4e:f3:c5:9f:83:33:b1:
                    5c:50:67:d7:e1:0f:98:fd:2e:22:e3:9b:50:18:4f:
                    f0:80:42:c0:6b:e2:a2:ea:df:78:d2:89:35:d9:39:
                    c2:c4:36:b4:b9:2e:81:0d:d1:31:1d:f1:d9:74:2c:
                    7c:29:9c:d2:d8:1b:81:72:6b:8d:2d:1c:fa:cb:aa:
                    f4:65:08:75:ff:50:80:dd:aa:c0:b8:ef:46:b5:31:
                    e9:61:f6:24:41:51:2a:cc:da:49:11:11:1c:07:e1:
                    be:b5:be:6b:21:76:a8:6e:6d:d2:1f:b8:56:01:88:
                    2e:f6:f3:10:37:95:09:e6:8d:d7:92:c5:f3:a4:55:
                    4c:09:35:51:7b:23:84:02:8f:c1:29:50:f0:94:44:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:F0:B4:FB:4B:82:FC:EC:95:94:21:E3:EE:1D:27:A9:A1:F2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:2e:7d:1f:d7:d2:4f:ab:94:9a:59:4b:b0:d0:37:ab:1b:
         02:b4:5f:2e:f0:06:07:a1:33:63:e1:e7:c5:f8:f9:d1:6d:e6:
         f3:cb:49:48:71:c1:c2:0f:02:d2:b0:42:a1:07:99:e3:91:52:
         c7:79:a2:62:c5:e8:12:ea:a9:cd:d8:98:05:63:d1:67:c1:27:
         38:2e:3e:36:ee:9d:42:73:e4:a2:11:00:e4:eb:4a:bd:5b:4c:
         9a:64:c8:e9:e0:b2:d4:40:e7:ba:8c:37:5d:80:d2:ee:5e:ea:
         b9:d9:ae:f8:d3:ba:d0:c2:85:b5:91:a0:ab:7f:08:8b:6e:05:
         49:a1:02:67:08:45:dc:bc:ac:72:e4:b0:f4:57:b1:82:44:2f:
         ec:9b:51:0b:f6:01:44:09:d2:24:6b:b8:c8:5b:1d:74:1e:9d:
         19:88:6b:ec:2d:bc:9c:71:2a:ed:32:b3:9a:93:bb:84:9d:af:
         f3:ee:84:fc:d8:f3:b1:8c:3f:00:19:a7:86:d1:6b:b6:bf:d9:
         28:af:ae:d8:cb:ea:30:11:95:8e:b5:85:af:fe:ec:66:6c:01:
         1d:ed:d3:a5:2d:9e:03:49:c9:49:4b:06:a1:63:e9:79:1a:63:
         e9:9a:eb:91:89:6c:06:4d:d5:41:33:3f:41:91:34:f3:22:4b:
         3b:b1:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----