Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/910eb0ea-a49e-37be-9432-c522b25e8d5b.roa
File:                     910eb0ea-a49e-37be-9432-c522b25e8d5b.roa (raw, json)
Hash identifier:          6vyomq0B+9GnJ3LspZ3s/Ms+NV2bfpPg1Zdoc7MtVSo=
Subject key identifier:   B7:0F:AB:C9:D9:01:B6:B7:C0:23:F1:9A:5B:C4:F2:71:A2:4D:26:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24893AE844AE48DCE21500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/910eb0ea-a49e-37be-9432-c522b25e8d5b.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:b110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:89:3a:e8:44:ae:48:dc:e2:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=fcd2be3e-797f-4905-ae0f-5124e8f9397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d8:d7:ec:96:af:93:00:25:80:f6:d9:b0:aa:
                    c5:70:7a:46:8f:6b:a5:ad:6c:c3:53:a3:cb:9d:01:
                    24:da:11:46:a6:59:28:da:2e:f7:45:f7:d4:35:d4:
                    07:3c:47:c9:7d:f9:a8:9a:9f:de:4b:b2:6d:68:7f:
                    42:d9:8d:9f:be:c8:06:59:96:31:fb:ec:2a:cc:3a:
                    70:f2:4d:4a:f7:b4:2b:1b:fa:42:f5:1b:9f:6c:b4:
                    db:eb:5f:59:a8:06:4d:9b:32:31:dc:cc:82:0f:96:
                    ef:71:fb:00:81:d9:ae:47:b9:61:f1:1b:35:7a:68:
                    e3:36:b5:95:0f:88:50:bb:17:90:1d:cc:65:50:e0:
                    2f:d7:f9:89:1a:fe:e4:3a:14:bc:58:49:19:ad:f6:
                    3e:58:54:ce:00:c7:7c:7e:54:a1:11:a2:e2:0d:f1:
                    e7:c1:d4:be:10:a4:74:41:e7:61:57:50:63:65:81:
                    d9:96:cc:21:ad:0c:49:74:dd:0a:8c:5e:49:27:6a:
                    99:9e:7e:76:79:e2:2b:f9:b1:97:c5:18:3f:5d:da:
                    5a:4f:a2:91:46:32:63:65:ad:6e:b6:58:e9:ca:e8:
                    e3:ab:ac:4a:0f:40:1f:43:a9:72:f6:17:c8:c6:4e:
                    b0:13:b3:67:8d:63:5a:a0:ec:23:9c:97:43:58:8d:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0F:AB:C9:D9:01:B6:B7:C0:23:F1:9A:5B:C4:F2:71:A2:4D:26:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/910eb0ea-a49e-37be-9432-c522b25e8d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:17:03:2e:7e:c2:35:76:dd:1c:6c:33:75:3a:19:f8:6b:45:
         44:08:52:f6:41:b5:ba:26:ac:9d:d4:5d:bf:f3:07:db:ae:25:
         10:7f:89:fc:06:69:24:f5:ae:9f:90:78:7d:1a:a9:85:c5:0b:
         de:21:fe:24:22:b1:0f:f0:60:7c:f5:3a:84:85:f1:8d:b7:4f:
         68:63:83:fb:fc:96:0e:13:e9:9b:2b:33:75:43:1e:b8:56:06:
         e9:bf:26:67:04:2e:07:ce:75:9d:a3:07:a5:4a:ba:ac:7a:f7:
         37:25:9d:83:43:6c:3b:19:42:c6:7f:73:13:2d:a9:9f:80:11:
         d6:9b:ee:0e:56:be:09:cb:b4:09:a0:fa:e0:f9:02:85:e4:e5:
         02:2b:00:cd:28:54:38:c2:41:db:a2:31:09:1e:d3:99:4f:cf:
         22:1b:60:8a:1c:9e:59:71:7a:76:08:43:e1:9e:7b:71:40:2a:
         ad:0f:e2:06:9c:7e:bb:75:8c:57:bd:9b:71:41:b8:e8:ac:d6:
         3f:06:ec:0f:cd:49:cc:8e:64:55:39:0d:70:db:ef:39:31:56:
         a1:f6:9b:10:cd:3a:72:fa:41:76:d5:8e:8c:ae:99:7f:96:73:
         f0:64:0e:3b:e0:c2:58:cb:46:ab:38:f2:b8:b1:8b:6b:b3:db:
         81:6c:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----