Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e536fa4-0040-32b1-aa1c-9ad619b6ccfe.roa
File:                     9e536fa4-0040-32b1-aa1c-9ad619b6ccfe.roa (raw, json)
Hash identifier:          33u2gz7JaVcE9R2awo55WtRnKsMD7UeMohSNnyD2AeY=
Subject key identifier:   A4:2D:11:E2:FF:21:77:8A:27:20:87:79:78:01:B1:E3:94:43:E6:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A14DBB4141CE53F338B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e536fa4-0040-32b1-aa1c-9ad619b6ccfe.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100a:b050::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:14:db:b4:14:1c:e5:3f:33:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=adab9d5c-49c9-4444-87f1-8c534cd3d817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:fc:fc:2c:cf:74:14:5b:55:5e:3a:58:c6:
                    05:3b:7d:e5:52:cf:e9:9e:2e:46:6c:35:09:c0:12:
                    89:40:8f:ba:57:4b:e1:d8:34:2e:02:62:0b:bc:22:
                    eb:02:df:e7:64:b5:4c:c9:dd:6c:54:50:ca:60:3e:
                    aa:d5:05:bc:cc:79:80:f8:a1:7e:72:55:6c:f2:2a:
                    8d:9b:dd:12:b7:86:6e:c2:9e:0b:e0:46:ec:4c:48:
                    fe:91:fa:a5:98:e2:10:9a:03:0f:c7:ae:2d:42:d5:
                    05:2d:3c:05:46:e2:e1:f2:39:61:39:aa:08:02:7b:
                    fd:9c:87:cf:d3:ad:97:99:30:de:53:73:ce:d2:74:
                    9d:9d:86:72:06:74:a5:07:3a:97:e6:91:d6:13:86:
                    1f:4e:7c:02:c3:94:74:4f:97:d4:3f:0d:10:da:66:
                    2a:2a:a7:f6:02:f3:60:4b:27:d4:62:5e:f7:36:28:
                    7e:aa:bf:e3:94:ea:dc:59:de:e0:12:30:24:4e:0d:
                    b6:3a:af:22:b3:3a:91:6b:8a:57:af:b4:39:70:82:
                    63:30:65:91:40:eb:fc:ef:d4:e3:61:9d:ea:bb:56:
                    82:de:ba:10:95:ce:91:49:a2:f0:ce:94:7d:a7:cb:
                    bf:e8:4c:c0:4b:43:3a:6e:55:bc:80:bb:60:0b:58:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2D:11:E2:FF:21:77:8A:27:20:87:79:78:01:B1:E3:94:43:E6:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e536fa4-0040-32b1-aa1c-9ad619b6ccfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b050::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:23:d2:e1:13:b4:43:8c:55:0c:bd:f0:28:57:4d:63:fe:f9:
         43:d5:71:ae:ce:48:e4:d4:6b:92:74:41:f6:63:34:4c:6d:ea:
         46:cc:9c:61:2a:9a:56:5a:45:b8:b8:3f:f3:cf:9c:78:95:b2:
         88:16:86:d9:0b:19:37:0c:2d:7c:ef:e2:69:c9:b9:88:22:eb:
         02:cc:79:34:46:f4:29:3a:f9:27:7e:a2:49:42:ca:85:d0:9a:
         a0:ce:50:1d:d7:61:84:61:fa:3b:03:b2:2a:11:58:3a:1b:34:
         21:45:51:0b:f7:5a:aa:9f:2b:ea:4e:8e:7c:25:cb:fc:4d:07:
         50:2a:7c:07:58:27:4e:44:c6:0a:ca:5b:7e:c4:6e:51:04:6c:
         06:60:2a:53:51:a2:08:e3:3d:3f:eb:5d:e5:b4:79:e3:ad:07:
         e2:19:81:38:c0:b6:5a:ee:b3:f2:d3:bb:bb:46:57:6e:50:aa:
         17:24:ad:5c:79:9c:20:b4:f4:2b:6a:a2:76:b3:f5:4a:41:38:
         c4:47:8d:b9:89:9f:71:8a:7c:2b:54:e8:28:26:91:34:c3:eb:
         7e:ab:a5:e6:e7:94:55:85:9a:ee:7e:ab:e0:e2:4a:80:2f:6d:
         77:95:4a:32:27:35:93:83:63:bd:58:02:9a:95:a5:72:2a:fe:
         22:20:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----