Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d8b874-1968-3f7f-b2e2-ba4e5301f162.roa
File:                     92d8b874-1968-3f7f-b2e2-ba4e5301f162.roa (raw, json)
Hash identifier:          TaA+FRrII0125M3lcZShwZOb/WGCxInYfopeLvUsLa8=
Subject key identifier:   EA:FF:D8:D4:14:0E:7E:22:B5:7D:04:78:1E:52:CB:9C:6A:26:ED:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A11DF4A6F42F6DCBF2768
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d8b874-1968-3f7f-b2e2-ba4e5301f162.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1005:a126::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:11:df:4a:6f:42:f6:dc:bf:27:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6f3201aa-ab04-44e5-a786-7942441774be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:5a:ee:9a:31:b3:f0:f3:db:9d:97:43:77:
                    e0:d2:ca:77:ad:50:7f:1b:36:27:5c:70:55:f7:20:
                    c7:39:5f:f4:74:c4:2b:fc:eb:3c:9a:d2:ba:df:2a:
                    6d:56:46:60:33:65:c4:bf:6b:8e:b2:69:a6:82:41:
                    8d:eb:44:53:87:01:f8:73:9e:41:8e:de:4b:1e:39:
                    6e:5f:df:15:f7:52:e1:d6:ac:a0:e8:46:c1:0d:63:
                    2e:19:52:85:0f:9b:4c:1b:c2:8e:27:2f:e8:23:3a:
                    d3:81:b4:0a:77:85:c0:b6:93:65:70:18:d5:e0:61:
                    3c:4f:52:2f:43:23:c7:63:07:4e:56:d1:28:46:5b:
                    d2:86:b4:0e:b4:91:01:d0:d7:05:8e:f7:33:aa:3a:
                    6c:d2:30:90:62:95:0c:d6:00:37:88:1b:14:30:6d:
                    c8:e1:98:0f:38:db:2b:ed:5a:0f:95:e1:88:0e:47:
                    56:d0:75:c3:3b:6e:82:9c:b2:3e:21:f8:d1:64:21:
                    56:60:03:3a:91:54:08:6f:c7:17:a9:a4:93:af:df:
                    fd:fc:fd:73:86:7d:9d:53:5e:03:1d:40:ae:22:fa:
                    dc:1d:82:7d:8d:9d:4e:36:e0:ee:84:df:82:dd:34:
                    0b:23:94:7a:7d:8f:ef:ed:db:de:17:39:c5:4b:87:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:D8:D4:14:0E:7E:22:B5:7D:04:78:1E:52:CB:9C:6A:26:ED:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92d8b874-1968-3f7f-b2e2-ba4e5301f162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:69:be:1d:bb:f5:dc:21:32:59:f4:59:12:4e:e7:a5:4a:
         a2:da:f9:c1:f4:50:55:68:eb:0d:aa:a0:c6:56:0a:1b:e9:7a:
         f4:dd:cf:ad:d9:f2:01:2c:5d:e4:e7:7d:6e:2a:1a:49:d6:67:
         b5:5d:87:d2:94:54:a1:c2:95:96:85:54:73:a6:67:2f:34:43:
         49:7f:de:a3:ed:9b:4d:18:94:a9:4b:76:c9:58:06:db:0f:51:
         a6:be:25:76:9b:48:bf:21:cb:4b:84:cb:ec:18:42:b7:8f:d7:
         f3:2b:6a:f7:93:d2:23:63:f1:46:7f:20:97:61:55:f6:2e:c6:
         9c:91:32:0e:2e:07:6c:ea:45:37:69:9a:b4:cd:e6:68:a3:1a:
         59:07:cb:1b:d2:6f:cd:37:86:ac:41:a2:18:34:9c:2c:65:72:
         15:10:52:f8:e1:54:a5:f6:d3:08:b3:7a:6a:e5:88:48:fd:92:
         20:95:e1:db:06:0d:21:d0:ac:3d:2b:d0:9b:d9:76:36:ab:a5:
         9f:49:17:89:ae:6c:67:28:4f:df:28:80:13:b3:8a:a8:4d:4a:
         09:65:28:9e:15:e4:3a:e9:27:eb:59:d1:ec:36:f0:6b:e2:85:
         16:8c:d5:6b:b9:0a:c5:84:64:81:ee:b5:bf:62:c5:b8:3e:ef:
         31:65:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----