Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ed981a1-6e6f-30d5-aa8d-7f8c4dc072a3.roa
File:                     7ed981a1-6e6f-30d5-aa8d-7f8c4dc072a3.roa (raw, json)
Hash identifier:          AXO2XFHbRBZ5ohxeQbHlepEchuv6MwKYmSkHsHHJ5kM=
Subject key identifier:   E0:9B:11:2E:F3:2A:08:C8:A5:10:0D:8F:A0:39:1A:33:63:BB:7C:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A00B252B3798F68864B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ed981a1-6e6f-30d5-aa8d-7f8c4dc072a3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:f010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:00:b2:52:b3:79:8f:68:86:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=124a9a84-6619-4110-a6d4-abc1cec25d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:60:7a:c1:b5:b5:ae:58:27:fb:8e:fb:a7:
                    58:1b:9a:42:60:df:29:35:2e:95:ec:6b:56:72:18:
                    41:2b:c0:21:bb:da:9e:2e:58:63:af:34:76:75:a1:
                    e4:d5:10:04:c6:9e:95:55:dd:c9:f4:55:dc:e5:f0:
                    c8:78:24:7a:fe:7d:c0:aa:ae:ab:a4:04:58:f9:6d:
                    61:c4:e7:fe:f7:e1:4f:a9:a4:15:8d:bb:c8:bb:d5:
                    36:05:16:02:79:3a:f6:21:34:39:2f:4e:61:49:1f:
                    34:30:d4:41:8b:de:c8:77:dd:7d:41:b7:e7:00:30:
                    4c:ae:cd:aa:c9:44:71:d6:7a:eb:47:bf:cd:ac:9f:
                    7b:e1:76:1f:26:3c:c6:65:f0:61:b5:04:c6:06:6a:
                    20:58:db:63:78:17:fd:e4:2d:38:90:b6:ad:33:87:
                    95:90:43:f3:3f:0d:ad:6a:ac:cc:c3:1b:c2:fd:ce:
                    26:32:bd:8b:fe:65:a1:85:0a:ea:3c:f4:9a:f5:40:
                    3f:fd:aa:a5:59:b8:dc:bb:e9:e0:a8:51:31:c3:61:
                    77:53:29:f0:30:d4:66:a3:76:9f:a6:08:0a:5f:72:
                    6c:f8:15:8c:59:d0:ce:ff:31:3e:96:cc:64:d8:3f:
                    ce:9d:8a:23:f9:d2:b0:5e:7b:97:3a:0a:e9:46:b0:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:11:2E:F3:2A:08:C8:A5:10:0D:8F:A0:39:1A:33:63:BB:7C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ed981a1-6e6f-30d5-aa8d-7f8c4dc072a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:45:01:cf:fc:1d:e5:cc:7b:82:04:5a:5e:90:5a:55:82:
         c9:13:8c:4f:13:bc:0f:f6:82:2e:b3:fc:f2:6e:c7:0d:74:eb:
         fa:ef:72:00:b9:b5:31:6e:ef:45:3d:99:83:f1:16:f1:a1:e1:
         eb:4e:02:59:e5:17:db:a8:ac:62:67:ef:94:76:8f:7a:a7:24:
         16:d5:c4:43:77:d7:b2:7d:f1:49:7a:f1:a6:ed:9b:aa:a7:59:
         f5:0e:f6:f0:77:bf:e2:eb:82:10:b7:78:7d:61:15:bd:35:94:
         e7:39:7f:e8:91:f0:3b:be:c4:3d:e6:d8:12:96:5b:d0:4d:8c:
         d1:e4:07:0a:79:a7:37:a1:6a:3a:5c:38:1b:9b:7b:9b:cb:65:
         2d:69:30:b9:95:da:0f:bf:9a:b9:38:55:15:a8:5d:ce:21:b6:
         09:26:a1:3e:16:34:ba:ef:60:b3:c8:f4:88:23:14:aa:28:e6:
         6a:ce:33:f2:e6:c3:b5:06:1f:3e:2a:aa:28:8c:ad:b0:6f:46:
         a5:ee:61:b5:c7:1a:d5:31:48:8a:cc:c7:16:0d:d5:d7:a0:25:
         db:2c:04:80:54:cd:5a:45:45:ed:cc:95:f7:97:49:d3:78:14:
         ca:6e:8b:82:38:87:92:36:b6:23:bc:3e:d5:66:46:15:7b:4f:
         0d:57:ec:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOgCyUrN5j2iGS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
MTI0YTlhODQtNjYxOS00MTEwLWE2ZDQtYWJjMWNlYzI1ZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMpgesG1ta5YJ/uO+6dYG5pCYN8pNS6V7GtW
chhBK8Ahu9qeLlhjrzR2daHk1RAExp6VVd3J9FXc5fDIeCR6/n3Aqq6rpARY+W1h
xOf+9+FPqaQVjbvIu9U2BRYCeTr2ITQ5L05hSR80MNRBi97Id919QbfnADBMrs2q
yURx1nrrR7/NrJ974XYfJjzGZfBhtQTGBmogWNtjeBf95C04kLatM4eVkEPzPw2t
aqzMwxvC/c4mMr2L/mWhhQrqPPSa9UA//aqlWbjcu+ngqFExw2F3UynwMNRmo3af
pggKX3Js+BWMWdDO/zE+lsxk2D/OnYoj+dKwXnuXOgrpRrBTmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOCbES7zKgjIpRANj6A5GjNju3xLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2VkOTgxYTEtNmU2Zi0z
MGQ1LWFhOGQtN2Y4YzRkYzA3MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDfAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFCpRQHP/B3lzHuCBFpekFpVgskTjE8TvA/2gi6z/PJuxw106/rv
cgC5tTFu70U9mYPxFvGh4etOAlnlF9uorGJn75R2j3qnJBbVxEN317J98Ul68abt
m6qnWfUO9vB3v+LrghC3eH1hFb01lOc5f+iR8Du+xD3m2BKWW9BNjNHkBwp5pzeh
ajpcOBube5vLZS1pMLmV2g+/mrk4VRWoXc4htgkmoT4WNLrvYLPI9IgjFKoo5mrO
M/Lmw7UGHz4qqiiMrbBvRqXuYbXHGtUxSIrMxxYN1degJdssBIBUzVpFRe3MlfeX
SdN4FMpui4I4h5I2tiO8PtVmRhV7Tw1X7II=
-----END CERTIFICATE-----