Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81dc8db6-a054-3a8f-83d7-329e71e81b61.roa
File:                     81dc8db6-a054-3a8f-83d7-329e71e81b61.roa (raw, json)
Hash identifier:          FAh736fugn4VleePl5IzRHu7Hu0KZvkP+slbC2OhgRY=
Subject key identifier:   EB:75:D6:2B:BF:72:88:EB:E9:9E:B9:C0:50:72:47:A3:F0:91:47:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498339FF860431B58BFEB10500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81dc8db6-a054-3a8f-83d7-329e71e81b61.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b1ce::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ff:86:04:31:b5:8b:fe:b1:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=5f88925d-a929-4994-a72e-e963a9d8172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:4f:e1:71:0c:eb:fe:7c:42:f9:1d:5f:a4:
                    6e:9a:2f:4b:02:b9:2b:b6:6a:a5:46:17:bb:85:44:
                    ac:60:27:e6:fd:6c:11:5b:1f:32:3f:ae:0b:57:59:
                    d2:09:ab:11:c6:01:e8:51:96:f8:04:28:da:c1:97:
                    a6:62:df:51:38:fc:0f:3a:8e:49:b2:28:9a:87:55:
                    a2:8f:4d:d7:5d:ac:7e:41:06:d1:65:32:c1:8e:9f:
                    56:5d:74:8b:90:35:2f:6a:d3:d8:80:09:59:cd:5e:
                    e7:fe:f7:eb:43:e6:48:57:22:77:d0:31:b3:41:2f:
                    f2:7d:11:9f:9f:ba:58:be:aa:f6:fb:82:5f:1d:fe:
                    0c:04:63:a6:94:aa:dc:71:f5:3c:4e:f8:d3:ac:e1:
                    e3:11:50:da:26:c9:43:9c:60:7c:b9:17:82:40:bb:
                    03:16:c2:0c:3a:88:67:98:8f:29:f7:60:52:0b:01:
                    4f:d7:5f:5b:a9:95:09:6e:f4:2d:20:75:62:83:31:
                    e2:96:c6:0b:8c:68:8e:d4:3a:53:3a:91:b3:31:6f:
                    b6:40:64:ab:02:be:ec:ca:de:ce:b5:ec:83:f2:fd:
                    5d:de:63:fd:7d:6d:82:d2:8c:bb:e3:58:23:7e:9f:
                    4c:40:39:8a:33:66:7e:16:09:74:85:94:b0:8a:3e:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:D6:2B:BF:72:88:EB:E9:9E:B9:C0:50:72:47:A3:F0:91:47:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81dc8db6-a054-3a8f-83d7-329e71e81b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:37:f8:fd:64:7b:f5:e9:09:56:53:63:0e:36:bc:5e:08:7d:
         58:f6:6e:fa:48:fe:69:fc:08:57:a7:88:3e:68:56:e5:c4:4e:
         fc:82:cf:ec:c1:c4:11:bf:40:ae:53:ed:fd:03:ca:3a:07:bf:
         14:3c:c7:b3:51:a3:7b:ad:95:33:aa:29:b7:5c:f8:94:e1:53:
         60:4b:0c:37:d9:2d:c9:a1:6b:9a:13:01:3a:cc:36:be:90:f2:
         e3:83:82:c3:1b:ed:a2:8f:98:61:7e:ff:75:4c:e6:bf:a9:b2:
         39:1f:5a:eb:b0:db:2b:c1:28:ad:f7:d0:43:38:3e:cc:26:25:
         0f:70:7e:da:d8:0e:1e:84:46:00:e1:20:55:1d:4b:f9:b8:79:
         ac:4f:f5:88:13:5d:77:b1:ed:c9:52:f4:14:e6:b4:c1:8d:28:
         ef:34:28:00:41:f2:3d:9d:4f:2b:c0:e7:5d:50:b0:6a:e4:d1:
         b0:f6:9b:0c:4f:5e:db:93:47:54:6f:9a:a4:2d:dd:bf:04:b8:
         d9:38:2d:04:e8:38:6b:be:a1:06:ed:c2:39:0f:99:ee:3c:ee:
         be:8d:71:20:a3:ae:46:a8:c4:76:0a:87:6d:0b:05:25:d1:d0:
         fa:d9:f8:4b:fd:33:35:0f:d9:ce:14:79:a3:ab:89:7a:51:4e:
         4a:34:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----