Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa
File:                     9c8b0ca9-9779-3f01-bd28-2273720071b3.roa (raw, json)
Hash identifier:          v4Na3QFWEHR0bFK0Z0LDfNVbvl0WbyHrh9Jesy8F3Vg=
Subject key identifier:   E6:10:C4:B7:E1:1D:D3:F1:8D:EC:AB:E0:76:31:9A:AD:59:75:96:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2461DD3CEF41997893A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1007:b158::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:61:dd:3c:ef:41:99:78:93:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=da2c863f-49c3-4ec0-9ae8-e69ffd701642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:35:78:c7:56:12:e2:8b:47:97:6d:8b:3a:
                    03:84:1c:a5:08:07:e0:a6:a3:95:27:eb:72:e4:98:
                    a8:4e:4f:c7:17:6c:ae:4e:11:15:95:c2:26:64:3c:
                    19:75:a0:af:b4:da:db:7b:8a:b6:13:3e:c1:ea:aa:
                    d1:74:bd:0a:55:fd:e6:2d:6d:78:b2:39:28:ce:b1:
                    4f:41:29:60:48:48:1c:1d:c5:05:96:24:c0:ba:37:
                    b6:d8:c0:78:96:b6:03:1e:fa:aa:9e:00:1e:2a:e7:
                    2d:63:69:2e:66:c5:87:d3:8b:a3:7d:c0:12:b2:33:
                    4b:23:13:f1:93:eb:7a:6d:4d:25:57:51:77:17:b4:
                    50:7a:53:30:d3:40:72:72:fc:fd:20:af:9c:34:d3:
                    d9:7e:7d:6f:91:3d:ae:d6:63:52:cb:71:c9:33:4a:
                    24:75:1d:71:6a:fb:ba:07:f4:46:07:7f:96:46:31:
                    b0:cc:ab:4d:65:96:2d:e6:61:2f:98:ab:6b:46:ac:
                    ff:20:f6:4e:1c:01:ca:bf:17:7d:b6:46:18:49:64:
                    47:55:a1:0f:b3:1a:a9:05:39:05:ba:0e:49:cf:eb:
                    40:5e:48:98:96:36:2d:ef:31:4f:1f:05:a8:17:8f:
                    af:60:4a:dc:f1:6e:bb:46:77:6f:0e:82:b5:66:9a:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:10:C4:B7:E1:1D:D3:F1:8D:EC:AB:E0:76:31:9A:AD:59:75:96:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:4b:0b:70:c7:14:74:2b:80:ce:19:5f:10:78:e9:63:84:
         b6:35:9b:62:fc:57:c2:90:0e:71:42:0f:ab:88:32:e4:6b:5e:
         32:fa:a2:85:30:db:3c:02:b2:ac:e8:ec:7c:a3:66:6e:aa:1b:
         93:58:70:15:36:88:01:fb:32:0e:3f:6e:b0:0c:ba:7e:8a:85:
         56:6b:c8:5e:6a:2b:0f:d5:95:6e:40:68:b7:1b:18:02:8d:83:
         0c:ab:07:28:ef:2b:45:d1:7e:55:d8:4b:76:17:82:93:9e:2c:
         66:9f:bb:0f:b3:24:08:dd:ed:c4:39:60:82:86:06:9f:de:14:
         fb:9b:e3:3c:bd:b6:f1:cb:2c:39:8f:b6:a8:b7:d9:28:f9:e1:
         07:02:c1:a6:50:24:e7:8f:ab:b9:a0:cd:61:34:fb:85:9c:f0:
         75:f4:67:a5:75:0d:4b:0f:27:88:f5:2c:41:4f:ec:65:6b:18:
         5f:62:10:c9:10:2a:35:7b:17:1d:d0:ea:c2:78:15:4c:fb:ec:
         73:4a:8a:ab:d6:5a:ae:11:12:ec:24:31:03:08:8d:fc:b7:82:
         0b:c8:f5:cb:85:13:55:43:9d:dd:26:72:5a:3c:58:75:25:15:
         00:27:6f:71:31:f5:c6:cc:87:22:42:d0:06:ea:d7:57:b8:0d:
         8f:df:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----