Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82fe5233-b45e-3887-b49f-472ac0a44321.roa
File:                     82fe5233-b45e-3887-b49f-472ac0a44321.roa (raw, json)
Hash identifier:          xLljVZUc/SNQ7t9xvTbT9t3HodpuDB6yIcwvTnPqb00=
Subject key identifier:   71:09:D6:2A:79:8A:A9:7F:A5:5C:5A:88:81:74:89:46:A8:F4:10:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2485D78D22293E438C4500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82fe5233-b45e-3887-b49f-472ac0a44321.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1003:b0fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:85:d7:8d:22:29:3e:43:8c:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a440d000-8b8f-47ff-91fe-1c7d7fc6e8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:a3:fe:cf:5f:37:f4:03:c2:77:49:b6:be:
                    51:22:0c:35:26:e3:2a:1f:74:6c:9d:ab:ca:46:6f:
                    07:38:5f:7e:ee:be:55:29:78:ee:23:2d:56:b5:4e:
                    6e:63:fc:c9:20:1c:42:79:1c:43:30:ca:16:89:ca:
                    07:31:71:49:3b:d9:b2:2b:d8:0b:d6:79:95:9d:27:
                    0a:65:4d:98:84:e2:f7:c6:19:d3:6c:40:1a:c9:74:
                    5a:57:e1:ac:1a:86:b8:3d:6b:18:6f:e5:ef:7c:b5:
                    15:58:d4:39:0d:94:ef:45:b2:b4:b7:b6:42:07:68:
                    4c:2c:5e:17:dc:39:41:aa:cb:01:2b:da:92:35:42:
                    f0:21:71:00:87:7b:76:5a:8c:d4:6a:b6:2a:65:9a:
                    7e:48:10:9c:e2:cc:51:a0:b7:0b:17:37:68:d8:3c:
                    29:8b:0d:c0:7f:3f:f2:23:d8:e8:b8:0e:15:9a:a1:
                    23:4a:3f:03:9a:50:34:58:8b:c8:f6:a6:84:54:67:
                    54:c9:a9:96:cd:8c:28:72:3d:58:ca:e5:a8:01:28:
                    4d:0f:4f:5e:0b:97:38:59:01:8b:b5:00:a4:24:d9:
                    bc:79:95:ad:94:18:49:6c:e6:87:61:e3:74:f0:8b:
                    b6:ca:bd:67:1a:51:e7:6c:43:21:b9:b6:58:19:14:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:09:D6:2A:79:8A:A9:7F:A5:5C:5A:88:81:74:89:46:A8:F4:10:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82fe5233-b45e-3887-b49f-472ac0a44321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fc:6c:b6:db:e9:7d:ba:3a:47:69:2a:e1:aa:04:7b:e2:1f:
         a1:c4:e5:b7:da:c3:df:a3:b2:09:53:b0:e1:e1:d7:c0:87:62:
         3f:e4:2c:c4:88:ee:b0:5f:1d:df:d2:49:d6:18:61:20:89:c6:
         b7:03:f9:35:7e:3c:99:4d:91:c8:af:42:ea:e5:1c:7e:2d:92:
         11:80:20:13:3c:be:88:86:da:ba:75:78:e1:4e:fe:f3:e5:de:
         96:87:1a:7e:c5:1d:67:f7:fd:46:b0:97:34:19:a4:44:a6:5d:
         ff:63:ef:24:7e:3a:b6:a8:7d:05:3f:41:11:85:e6:05:be:b7:
         55:6c:e3:7d:bb:54:a2:55:86:42:d7:d6:bd:d2:91:dd:98:2f:
         ad:8d:51:cd:50:58:20:66:f2:d7:42:06:0e:39:94:25:42:49:
         f0:62:41:e9:b3:82:38:f4:bf:e3:b9:ee:f1:65:a5:ba:b9:5c:
         a4:61:6e:32:97:ce:f9:c9:81:bc:6c:0d:a2:d0:c1:0b:58:8c:
         64:18:e5:d7:2b:dd:32:a9:c1:b0:a1:f8:58:c6:dc:91:bb:1c:
         19:42:4d:56:c2:07:aa:04:76:b3:05:44:53:f8:00:91:e3:13:
         6d:85:ee:ef:d7:9e:63:09:a0:17:cc:37:46:2c:55:8e:f0:63:
         5e:f0:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----