Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
File:                     95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa (raw, json)
Hash identifier:          OQkugjc5HS2pTCMAG1EuvuIVpBKkQvSMiHJfEoQB9xY=
Subject key identifier:   0D:0C:18:1B:98:10:33:FA:34:9C:93:93:2E:E3:A2:04:C6:E8:39:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498339FF68C0364EBDA73EE880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b1ca::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ff:68:c0:36:4e:bd:a7:3e:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=4015c476-c51c-46bf-857e-3902a280218f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:3b:aa:68:5c:88:9b:7a:40:08:a3:55:d1:
                    62:6b:c9:89:ee:65:bd:4a:a4:3a:ef:22:50:38:d1:
                    38:86:43:93:28:47:18:b6:15:55:1a:83:45:01:6d:
                    cb:44:42:52:85:78:7a:1b:df:f7:57:33:87:0d:22:
                    6b:7c:4e:26:55:02:d3:68:1b:ec:10:bf:b6:6b:19:
                    06:54:bf:a8:33:2f:c4:ff:73:f5:46:82:4d:58:d8:
                    5a:be:af:62:15:5e:25:88:4e:29:88:33:f3:9e:08:
                    3c:0b:a7:2b:a6:6d:aa:9f:21:1e:aa:56:a8:4b:9c:
                    ab:68:0e:d3:58:bf:95:33:58:d6:6e:96:ad:d2:3c:
                    77:18:7c:a8:69:a2:3f:0e:1d:d1:d0:4f:32:52:b2:
                    62:4c:43:a8:30:9e:02:bb:1a:2d:7a:5c:fc:cc:f8:
                    d0:b5:ae:8b:cf:3c:d5:01:23:97:b1:7e:c0:fc:06:
                    3c:d2:bc:45:7f:86:f8:02:fc:28:ae:1a:ae:4b:9d:
                    7a:ec:f3:ca:75:bc:c6:24:c2:df:f5:9a:57:bc:de:
                    15:07:4f:d6:6d:20:6a:62:83:3b:f5:af:a2:04:50:
                    42:a3:b5:30:93:4e:c3:b7:64:cb:69:88:1b:b5:b1:
                    ba:3b:c2:f3:0f:1d:95:4d:d6:95:75:ef:c6:42:24:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0C:18:1B:98:10:33:FA:34:9C:93:93:2E:E3:A2:04:C6:E8:39:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1ca::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:08:31:49:1b:ef:2f:f6:1b:44:50:d9:36:da:20:a6:ab:4f:
         40:c5:48:96:0e:17:04:fc:fa:43:5e:94:33:fc:0b:61:90:ff:
         33:29:75:62:8b:9d:a5:94:e9:12:db:13:ef:4d:da:cf:f5:90:
         1b:07:a5:ab:19:41:c9:b8:2d:b2:b5:e9:07:ee:50:e7:1e:24:
         83:0e:79:c2:9a:1e:87:54:cb:a9:f8:c8:84:11:72:ad:1a:0f:
         02:b9:7b:37:53:58:b3:b7:6c:18:e4:ac:bd:0e:73:7f:a5:ab:
         35:43:7b:55:92:a5:4f:9b:9d:3e:bf:59:c5:d3:8f:39:5a:8f:
         47:cc:a0:a6:8d:1c:d1:15:21:4b:98:06:9c:77:08:d3:fb:aa:
         6d:08:ec:60:07:a1:00:07:e3:d4:ca:51:87:bf:16:63:05:7d:
         0f:36:2b:4b:b2:c5:64:1f:08:43:eb:a1:f4:b4:20:71:fe:83:
         0c:bc:01:75:c7:f9:87:19:86:d8:00:04:a1:10:69:5f:10:c0:
         1c:9f:02:90:0e:00:e8:df:4d:60:d1:3f:57:8b:cd:b9:4d:bb:
         63:2b:db:7e:dd:03:71:02:ef:95:4e:72:a3:11:a6:eb:08:98:
         84:d4:b9:2b:1a:0d:8a:03:22:bd:56:87:1b:d5:10:fd:5f:3d:
         75:b8:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----