Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa
File:                     a061107b-d693-3e1a-8d42-ac61256c21fd.roa (raw, json)
Hash identifier:          NpaXBrvYJKBYCBJ5Zo/IJtuqi8+bB8BzrslrlCfbTIk=
Subject key identifier:   37:5A:4F:31:0A:D0:73:B6:9D:42:41:44:7B:F5:E7:5C:0A:35:DA:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A160322ED54B9D179E580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100b:a111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:16:03:22:ed:54:b9:d1:79:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=16ad3720-3ddf-45e3-90d7-02fe786d90e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:b6:74:a6:be:1a:49:dd:a6:e8:a3:eb:aa:
                    9b:2f:ad:fc:4d:f5:da:8b:9f:45:84:f2:b0:92:cb:
                    08:13:e8:5f:89:2f:23:e4:24:98:ed:cd:4d:0a:fc:
                    1e:e7:18:9d:a6:12:92:8a:c2:d3:2e:bc:85:f0:81:
                    5d:e1:bf:97:1a:0d:3f:a8:cd:ff:87:df:4f:58:0a:
                    68:10:2f:3b:17:4e:02:9e:2e:4e:40:36:37:a5:b5:
                    ec:5b:a7:d5:86:9d:86:41:df:2c:87:8c:16:9b:34:
                    70:4f:a7:4d:71:c7:95:7f:0a:9c:78:30:d0:3a:08:
                    6f:03:0c:01:4a:7a:a3:2f:3c:ef:84:57:35:53:80:
                    74:34:ef:85:46:86:fb:0e:31:a5:40:79:79:17:d9:
                    c5:01:11:2d:10:25:13:7e:71:3d:43:ea:ae:a9:3c:
                    3d:db:5d:9e:ee:04:e4:1e:b2:df:10:eb:dd:9e:1f:
                    54:a3:ae:02:37:9a:a2:29:5c:c4:52:c3:48:b3:6b:
                    36:ae:a1:e6:e0:84:70:a5:41:99:c1:c6:75:ca:a2:
                    6d:0f:2d:0f:e7:b9:0a:d4:79:95:91:37:38:09:da:
                    42:cd:39:59:7e:0b:bf:91:6e:41:37:d5:82:a7:2d:
                    2f:fe:93:4a:76:99:05:da:1f:a6:ee:53:16:10:f5:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5A:4F:31:0A:D0:73:B6:9D:42:41:44:7B:F5:E7:5C:0A:35:DA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:a111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:a6:24:21:c4:04:a7:ab:87:57:2f:aa:eb:f8:96:ec:d5:
         01:71:c7:33:e8:06:4d:55:ad:83:05:0f:d4:90:a6:ab:d0:dc:
         19:de:5d:b3:9f:9f:6e:56:2f:ae:b6:82:50:93:78:12:e2:7a:
         0d:a8:a5:e2:5b:fd:74:b2:55:1e:0c:a3:3c:97:cb:f6:fb:f2:
         ad:fc:c3:fc:82:4a:a8:51:ed:7b:c0:c7:c6:18:f9:47:8b:69:
         34:4a:73:be:ba:75:55:a1:ad:87:92:15:bc:9f:2e:d2:d2:83:
         54:31:ad:ae:d7:2f:9e:5a:21:84:7a:9c:ad:2f:a2:ae:93:f4:
         1a:2d:c4:1b:ef:5d:34:dc:43:0c:cd:67:61:81:25:38:08:7d:
         03:4c:84:ab:5a:9a:ee:f1:da:b6:27:eb:cc:03:56:20:ba:31:
         c7:e1:3b:63:db:1e:d0:cf:33:b5:0a:dd:d4:d8:bd:f3:3a:d8:
         fb:c0:c2:7c:d8:5b:b5:28:c7:ad:21:b8:aa:6e:03:0e:74:5d:
         ff:dc:56:09:33:5f:b7:24:d0:18:46:66:25:8b:8e:13:6b:3c:
         c5:28:a3:dc:a9:f5:3e:58:a4:48:a6:47:26:2b:57:b4:ab:8a:
         70:80:50:82:99:24:3a:01:9b:c3:92:96:91:3c:d2:e3:6f:5a:
         42:83:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----