Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873565ad-b3ed-3c1b-a51b-3dad1f83fc22.roa
File:                     873565ad-b3ed-3c1b-a51b-3dad1f83fc22.roa (raw, json)
Hash identifier:          rn+VCHNzrb7Nr0amEKjN3td5lpS1lyGaBtVNLFsrZrU=
Subject key identifier:   84:19:40:20:DF:B7:3B:06:23:EF:C1:7E:11:4C:66:AA:E5:65:A0:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A127A5A4DE5515DC976C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873565ad-b3ed-3c1b-a51b-3dad1f83fc22.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:a023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:12:7a:5a:4d:e5:51:5d:c9:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=94e8e99a-d9d5-4779-9dbf-b39f88b7c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:ad:d6:6a:4e:c0:fc:96:5c:27:6b:61:f8:
                    92:15:d5:b9:0b:1f:ca:d7:0e:2d:d2:0b:83:d0:04:
                    d0:a0:0b:59:8c:98:6e:53:42:1e:e7:a6:9e:74:c7:
                    de:f2:2f:d5:0e:07:d3:4d:08:ad:dc:c8:5c:86:c5:
                    20:6e:9c:34:15:5a:65:05:2f:8f:ce:ef:33:2a:a0:
                    3a:fc:26:8e:d7:5f:4c:e0:58:f3:4e:82:fd:61:31:
                    8b:f1:11:c1:e2:88:de:dc:37:0d:58:7d:7b:ef:2d:
                    f7:89:77:87:01:42:f1:3b:f4:fb:47:40:7f:cc:53:
                    45:cb:40:2f:15:25:62:f0:9a:c0:c5:7f:c3:63:cc:
                    e3:bc:47:c8:ca:dd:2b:07:7c:b1:0d:91:79:b8:9a:
                    91:13:8f:1a:a6:5e:c3:cd:77:f3:02:54:3a:08:8c:
                    53:57:0d:82:d0:1d:38:ad:44:15:f1:4b:26:8a:17:
                    97:dc:d3:00:c0:51:e3:a5:4e:1e:8a:cf:83:29:15:
                    c5:07:58:ae:d5:7b:c7:cf:f9:5e:94:2a:1e:a1:85:
                    27:df:85:fe:a5:a2:65:d6:35:c2:86:a4:32:52:db:
                    2f:33:9e:9b:6d:62:24:cd:de:df:4a:07:41:d5:76:
                    1a:f2:34:78:f9:d1:82:85:47:48:3b:98:bc:24:bf:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:40:20:DF:B7:3B:06:23:EF:C1:7E:11:4C:66:AA:E5:65:A0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873565ad-b3ed-3c1b-a51b-3dad1f83fc22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7b:09:1e:61:cb:8c:a3:51:46:f4:df:31:b6:f8:2b:cf:93:
         4d:a3:57:ca:75:0a:c8:64:84:89:4e:e8:fc:b9:d2:56:be:bf:
         3c:16:9b:19:e9:40:9a:6b:36:1f:82:5f:84:2c:5b:98:3d:da:
         ab:fb:78:97:31:0d:9f:dc:34:57:2b:41:96:64:bc:74:56:b0:
         cd:4c:aa:5c:f7:04:bc:88:74:82:cf:c4:c1:69:f7:37:9f:37:
         d8:17:f4:a2:0b:9b:a4:38:ce:ba:16:40:7c:13:e5:b9:24:08:
         f6:d5:f1:42:51:86:78:c6:97:1d:9d:32:fd:30:4d:9e:99:26:
         25:f9:42:2b:d6:a2:8c:52:84:52:3b:2e:13:ec:4c:3b:98:0d:
         eb:e7:90:e7:40:65:93:55:c1:4a:29:c4:fe:3c:98:f1:4c:89:
         f6:05:72:36:87:40:2f:db:9c:c1:fb:49:a4:e0:15:27:1a:48:
         12:8f:bb:cd:58:a9:22:e4:73:69:ee:69:73:4c:b7:34:f9:10:
         95:00:8b:ad:5f:76:98:02:92:95:56:8f:30:9c:cf:a1:05:9b:
         2c:e1:2d:7b:2a:b3:e5:78:71:23:d3:60:3a:2d:85:52:7f:ef:
         76:cf:16:19:3e:e4:71:60:f4:37:33:74:e6:bf:15:b7:9c:a6:
         46:d7:8f:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhJ6Wk3lUV3JdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
OTRlOGU5OWEtZDlkNS00Nzc5LTlkYmYtYjM5Zjg4YjdjODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6t1mpOwPyWXCdrYfiSFdW5Cx/K1w4t0guD
0ATQoAtZjJhuU0Ie56aedMfe8i/VDgfTTQit3MhchsUgbpw0FVplBS+Pzu8zKqA6
/CaO119M4FjzToL9YTGL8RHB4oje3DcNWH177y33iXeHAULxO/T7R0B/zFNFy0Av
FSVi8JrAxX/DY8zjvEfIyt0rB3yxDZF5uJqRE48apl7DzXfzAlQ6CIxTVw2C0B04
rUQV8UsmiheX3NMAwFHjpU4eis+DKRXFB1iu1XvHz/lelCoeoYUn34X+paJl1jXC
hqQyUtsvM56bbWIkzd7fSgdB1XYa8jR4+dGChUdIO5i8JL+6mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIQZQCDftzsGI+/BfhFMZqrlZaCHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODczNTY1YWQtYjNlZC0z
YzFiLWE1MWItM2RhZDFmODNmYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaAj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACl7CR5hy4yjUUb03zG2+CvPk02jV8p1CshkhIlO6Py50la+vzwW
mxnpQJprNh+CX4QsW5g92qv7eJcxDZ/cNFcrQZZkvHRWsM1Mqlz3BLyIdILPxMFp
9zefN9gX9KILm6Q4zroWQHwT5bkkCPbV8UJRhnjGlx2dMv0wTZ6ZJiX5QivWooxS
hFI7LhPsTDuYDevnkOdAZZNVwUopxP48mPFMifYFcjaHQC/bnMH7SaTgFScaSBKP
u81YqSLkc2nuaXNMtzT5EJUAi61fdpgCkpVWjzCcz6EFmyzhLXsqs+V4cSPTYDot
hVJ/73bPFhk+5HFg9DczdOa/FbecpkbXj8U=
-----END CERTIFICATE-----