Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/828c1c11-cafa-3d23-9b00-68cf725365cb.roa
File:                     828c1c11-cafa-3d23-9b00-68cf725365cb.roa (raw, json)
Hash identifier:          mmAKe71akivm9LfKBJ7NhoV5X3BOCekjEvLBoSSSrR0=
Subject key identifier:   76:0F:46:2B:74:FB:68:06:A7:95:0D:76:8A:7B:5E:07:A5:66:1A:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A045379CDF32C3C9E2180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/828c1c11-cafa-3d23-9b00-68cf725365cb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b228::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:04:53:79:cd:f3:2c:3c:9e:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f865b578-a689-476a-a271-25d9072c10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:e7:4b:1c:38:56:0d:9f:1a:bd:0e:4a:c2:
                    64:35:f7:25:8f:68:bb:ad:a5:7c:96:92:dd:7b:5c:
                    0f:fa:36:78:5b:c1:1b:c7:a5:bf:4f:f8:a6:f0:49:
                    6b:39:c0:07:37:36:94:54:26:5c:0c:84:00:95:63:
                    46:5a:a4:77:be:8c:ed:03:31:d1:4e:a8:e0:8d:50:
                    7d:a0:1b:e8:a4:e6:01:0b:1f:8c:b7:82:d6:bb:e0:
                    2c:46:47:df:c2:30:a4:a9:09:b6:f6:c6:a2:2f:e1:
                    03:01:6e:37:e7:36:a3:e8:6d:dd:70:c8:37:63:37:
                    d3:78:e2:b0:00:58:3f:13:15:08:28:4d:02:f7:11:
                    b9:84:f6:33:26:0e:17:2a:90:39:f4:70:1d:37:18:
                    42:8f:81:e8:dd:b8:4f:ed:1a:3d:d7:be:78:5d:39:
                    45:46:12:af:8f:0f:94:64:eb:9b:b4:89:bd:06:38:
                    63:5c:48:29:cc:06:1c:0d:70:d9:42:78:11:4a:37:
                    23:9c:97:21:e3:b1:38:44:62:55:82:ea:59:ee:fe:
                    80:19:fb:61:5f:14:60:0c:81:6b:30:af:61:95:e8:
                    81:09:fd:00:7f:94:e4:12:ed:e9:45:f8:70:e7:f3:
                    66:cc:80:1c:86:f4:b5:96:fd:18:26:fc:03:85:68:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:46:2B:74:FB:68:06:A7:95:0D:76:8A:7B:5E:07:A5:66:1A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/828c1c11-cafa-3d23-9b00-68cf725365cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b228::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:ac:95:58:d7:ac:88:c5:4b:00:4a:40:ac:74:93:9c:81:
         bf:2e:4b:1d:d3:44:3a:50:cc:02:de:70:42:bf:9c:0e:9a:e3:
         c8:be:4e:26:41:2a:f2:b6:93:2f:1f:4a:a0:e3:a1:21:df:a1:
         a8:e2:87:99:98:d7:0d:8d:91:5d:88:37:ce:54:f6:62:e7:90:
         85:2d:be:e1:83:58:32:95:d7:42:51:76:95:db:b4:2b:e3:32:
         a7:40:e0:c8:cf:e5:18:6f:f9:2c:a0:94:24:69:4e:65:99:a1:
         69:83:86:4e:8a:e6:d4:54:53:29:cc:70:2a:ee:9d:35:ee:f1:
         d1:8e:7b:31:f2:64:a0:f7:1b:6b:74:91:46:1e:1a:57:c6:77:
         78:ec:52:f0:e1:f0:99:70:69:c5:c5:c3:a4:48:2f:7a:4c:ad:
         6b:95:64:93:8c:02:f5:b8:db:06:56:99:3b:9c:87:d8:2a:7b:
         99:31:9c:ca:af:f5:65:e6:c9:3b:76:71:cf:98:15:d6:39:73:
         57:7f:cc:83:22:31:95:21:1a:e6:06:38:31:10:26:36:c7:a8:
         c4:7b:bc:7e:b4:d4:0d:ee:17:15:4d:21:36:85:1b:aa:4e:d9:
         44:72:6e:00:71:6b:40:61:28:25:75:15:39:cf:f1:de:3b:b3:
         5b:49:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----