Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa
File:                     aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa (raw, json)
Hash identifier:          5XQRSlSJpYcXPtIzye5QRSvhYNHXmNEFgjYJS/8iiFE=
Subject key identifier:   34:77:A3:D4:8A:0D:8B:54:84:C0:FC:39:C5:D8:BF:97:DE:15:8A:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498339FF95347849CF38D16C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b1d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ff:95:34:78:49:cf:38:d1:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=064b131f-8bd0-4c84-bdee-6abb151af409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:00:84:0f:df:06:cb:d7:62:91:c1:70:9f:
                    ba:c2:0d:ea:b7:dc:64:d9:bf:df:e2:77:29:1b:be:
                    7c:ac:74:41:d4:f3:cc:18:ea:d5:19:b2:8b:8b:e9:
                    69:6d:ff:41:29:54:71:69:cb:52:c3:64:3d:32:cf:
                    92:b8:53:a4:f1:ed:3f:ba:25:46:68:1f:4d:92:23:
                    de:11:65:50:76:20:94:a9:c4:25:b5:7c:08:57:4a:
                    59:1c:74:8f:1e:9d:12:0a:dc:68:60:ef:af:ad:cb:
                    c8:6c:c1:28:ee:27:6c:8f:d1:7b:89:9c:d6:51:84:
                    b7:bb:c7:59:9a:dc:80:bb:a2:a0:7a:28:d7:f7:ce:
                    14:3a:2b:80:1d:2a:61:c1:1d:63:b5:91:01:a1:9f:
                    fd:b6:c5:3d:08:43:de:24:25:6b:9e:f4:5e:c4:af:
                    14:12:8c:09:28:ad:dd:44:c7:2c:5d:31:23:2d:64:
                    5e:0d:ef:a0:df:c8:c1:df:7a:5b:dd:62:e3:06:e5:
                    33:40:1e:09:7c:54:9d:27:63:21:18:5c:b6:01:2c:
                    94:f0:06:fc:11:71:c9:5d:e2:80:7a:f4:fd:df:19:
                    09:17:60:92:74:ff:6d:50:ad:32:78:e8:7a:e8:65:
                    04:92:0d:4e:27:38:6b:69:1b:e5:b7:f8:52:61:16:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:77:A3:D4:8A:0D:8B:54:84:C0:FC:39:C5:D8:BF:97:DE:15:8A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:a7:72:cd:e6:0a:69:4e:4c:e1:41:be:85:70:2a:7a:15:
         65:d4:95:a7:23:35:03:4c:7e:2e:ba:ff:21:ff:b7:13:4c:0f:
         2a:54:29:32:89:e0:e6:4f:7f:26:20:da:0d:ba:bf:43:ce:8c:
         67:53:0a:50:c3:67:8a:8f:db:55:61:70:c3:78:a5:5e:ba:90:
         79:3e:3e:b6:90:c5:4c:e7:8a:3e:9d:a3:f1:ed:cc:79:fe:bc:
         7e:09:84:2f:2d:2a:18:46:5e:fc:de:df:13:09:e4:7e:b9:fd:
         f1:ca:88:c2:34:d8:b6:c3:c7:fe:e8:c0:42:5c:b6:31:c8:a4:
         d3:96:be:b3:2a:c5:a0:6b:bc:e1:47:41:f5:e4:1d:8d:64:b0:
         5b:72:c3:4b:f2:c3:f5:10:bf:eb:07:d9:a9:c8:03:da:0c:01:
         2b:ff:7a:f2:88:ca:fb:52:14:21:56:8b:6b:c2:92:48:ca:82:
         e7:1b:30:7a:29:a3:df:b0:bc:d0:78:62:7d:a4:bc:6d:84:a2:
         78:ee:6f:e4:6e:82:e0:df:54:b0:45:36:2e:ae:08:85:9f:aa:
         10:1b:45:69:da:ab:e6:62:62:d7:81:23:dd:ce:0c:a5:c5:52:
         83:a2:44:64:66:99:17:2a:fc:bd:d8:25:24:45:65:c2:b4:87:
         12:ac:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----