Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa
File:                     a85b5267-6a19-3bc3-ba14-d002b295be7c.roa (raw, json)
Hash identifier:          jV86mPhLOeSbkd8cDzZy+aN6/SbVnW2JnItqQxanLNc=
Subject key identifier:   68:15:F8:9F:BB:34:24:02:06:23:B4:F5:79:B9:94:C0:A9:30:86:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584981D446FB621631AB5AD8F760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     6167
IP address blocks:        2600:1012:a126::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:46:fb:62:16:31:ab:5a:d8:f7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=d689dbeb-7817-4670-861b-3bccd27890c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:47:87:d9:46:31:34:3e:c4:f8:e3:45:51:
                    4b:92:1a:59:f6:9f:97:f3:95:70:58:60:22:27:60:
                    b6:41:25:83:5a:b3:e2:b7:41:b6:ee:22:d7:83:7d:
                    7e:d9:58:31:94:db:3f:c7:cc:3f:4f:a8:78:b1:cb:
                    89:99:73:bf:55:f8:7f:ee:62:97:a3:09:e2:1d:f6:
                    91:17:48:53:5c:cf:b5:a6:fc:4a:e1:c1:a9:25:12:
                    8d:9f:f8:79:b1:48:d3:c6:2a:f6:ef:50:9e:a6:60:
                    40:50:51:17:17:23:1e:35:94:43:16:ad:6d:d9:33:
                    07:3d:a7:6a:99:d9:02:c2:f8:b9:b0:d6:53:c4:45:
                    35:2c:64:bb:f5:78:fb:b0:b6:3d:19:19:a6:79:43:
                    fd:27:da:ce:f4:ba:64:6d:e9:4b:83:4e:ce:00:b3:
                    a4:9f:14:e2:bb:e5:1f:da:5d:f4:f5:96:33:7c:30:
                    a3:f8:de:f3:bf:eb:8c:d9:9f:b4:24:3d:c9:1d:11:
                    70:f2:17:cf:5f:da:ba:12:86:74:fc:eb:13:65:e1:
                    e7:62:74:d1:c9:52:b8:84:a3:e1:71:b6:e7:97:a9:
                    e8:7f:95:c7:e2:ff:42:0d:e7:f8:90:1c:60:89:17:
                    13:ee:55:70:cf:f5:43:71:87:5c:67:aa:2a:4d:f6:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:F8:9F:BB:34:24:02:06:23:B4:F5:79:B9:94:C0:A9:30:86:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:fb:d3:c6:20:c4:8a:9d:e1:5e:d7:7b:18:0a:74:9b:94:
         28:bf:27:3f:d2:19:58:a7:97:ba:9d:f2:9f:f4:45:f8:ec:72:
         94:32:31:6e:59:cf:48:c4:93:f8:d7:9b:ed:11:62:e9:bd:7d:
         20:f2:bd:81:31:c6:9c:c6:b0:63:eb:77:6e:6b:37:3f:ea:71:
         81:0d:b0:4c:bb:f5:bc:fe:5a:d6:32:a8:c6:08:96:4b:d6:0c:
         20:0e:cb:a6:bc:04:af:45:f0:97:51:c4:ce:25:07:3a:2d:22:
         47:a7:32:59:5f:33:fd:db:99:12:24:35:44:ac:c1:7d:94:71:
         74:8f:fb:b4:32:11:b5:1c:e0:47:94:02:99:9a:f7:15:64:4d:
         bc:04:78:04:b3:47:da:02:3e:9b:94:fa:9d:1c:e3:ab:4f:e1:
         fd:38:eb:72:f3:9f:03:45:a3:1d:2a:5f:5f:ce:cf:36:7e:6d:
         83:e8:25:10:2e:59:53:fe:c4:aa:72:68:44:ac:9a:fe:e9:3a:
         c1:d6:80:47:87:47:95:9e:3a:63:06:a0:6a:7e:c3:fb:ec:df:
         be:ba:3c:5d:6a:16:04:fb:e0:09:6c:8a:d1:be:d8:13:cf:52:
         6f:1b:b4:d7:40:5d:f9:f0:c5:b1:b1:00:e7:4c:cd:05:25:73:
         72:b9:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----