Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa
File:                     9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa (raw, json)
Hash identifier:          Uwtxqfmpkr3zokgnBKRwvJJiC4R3g0b3Boue+3M4eUg=
Subject key identifier:   EE:1F:93:FE:50:6F:F7:0C:ED:79:AA:8A:2A:88:0C:20:64:C7:DE:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A04BB942E7B4297DC4240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:be16::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:04:bb:94:2e:7b:42:97:dc:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c853d578-0edf-4b33-ac68-f14938f778c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:71:69:85:2e:64:89:c5:75:b2:77:f5:4f:0a:
                    e0:df:21:46:ce:80:69:45:0d:79:68:76:14:0a:c6:
                    fc:6a:6c:d1:5f:98:44:16:35:1f:60:1b:8b:c9:08:
                    2e:d0:6a:e0:c5:4d:6e:b8:2e:f0:7d:ce:0a:e4:da:
                    87:73:3f:50:0f:86:80:7e:4e:d4:ba:d9:66:8d:ca:
                    93:e8:94:eb:aa:da:5e:a7:00:be:5f:b0:65:be:6b:
                    11:fd:e6:d3:b9:df:ca:e2:69:14:19:a0:2b:18:2c:
                    c4:b7:73:06:af:bb:22:88:bc:93:d9:0a:e3:74:41:
                    5c:69:de:bb:83:2a:23:dc:f2:f0:3f:bf:c1:01:d3:
                    9c:fa:0c:5d:b9:89:99:9b:d7:bc:6a:f7:2d:9a:8b:
                    b8:84:38:d5:0b:7f:11:4a:b6:a7:9c:34:78:1b:e3:
                    44:ea:5f:5c:25:4a:23:40:38:18:f9:a0:e3:4c:83:
                    29:1f:4a:75:90:99:95:6b:aa:a7:f9:a0:34:56:39:
                    1d:af:34:3f:ec:ed:6d:46:8e:ae:1f:5b:ed:1b:c7:
                    51:94:59:cb:46:db:02:6e:24:95:82:86:ee:77:18:
                    e2:d0:0f:cc:49:59:0b:15:07:26:00:dc:47:37:41:
                    df:46:c9:43:10:0c:d4:3c:84:d7:bf:55:a5:cc:b1:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1F:93:FE:50:6F:F7:0C:ED:79:AA:8A:2A:88:0C:20:64:C7:DE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf2e41d-1de4-3b09-800a-5ebdac11c000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7d:1e:25:65:0c:8d:52:d4:96:3d:11:9f:ca:7a:41:e6:ae:
         62:fc:a9:47:49:88:40:05:4e:1f:10:f5:46:cc:b3:1c:86:c4:
         14:f9:8e:71:68:e0:64:65:78:22:94:80:c5:39:ad:e1:e9:e2:
         03:79:17:06:1c:4c:94:6b:d6:a2:fa:be:8d:5a:c9:24:23:3c:
         f9:07:c9:f1:3c:43:7d:58:62:20:33:b3:e5:33:b3:ad:05:7e:
         df:6c:d4:ed:d2:de:a3:3b:5e:4d:15:af:3e:c7:d5:18:b6:b5:
         de:3c:2e:db:b5:4c:b1:08:b7:27:35:9c:98:68:3f:a1:45:b8:
         99:57:12:86:d8:44:62:73:0c:6c:03:75:70:64:78:42:83:1b:
         4f:d3:b7:91:96:e0:4e:09:f0:42:9a:ec:33:53:fe:ae:a5:7f:
         ac:76:3c:63:2a:57:60:21:42:da:55:65:1b:93:af:4f:57:0b:
         b6:ef:c2:48:75:e0:87:b7:a1:1e:2d:50:36:e5:fd:0a:81:e7:
         fb:9b:e1:ff:27:2e:6f:c1:2e:97:8a:a8:bb:a6:66:ce:db:9d:
         24:e2:73:02:da:37:1d:b3:fb:cd:94:c9:1f:f4:46:1a:f2:4d:
         21:40:12:60:e0:5a:54:2c:34:13:cb:6a:db:ba:4b:be:01:5e:
         27:51:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----