Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2131052-c7a1-3042-95ee-a0ee838ed76c.roa
File:                     b2131052-c7a1-3042-95ee-a0ee838ed76c.roa (raw, json)
Hash identifier:          +sVzYyLxsQg/8j/cC8RH8+IUFbNY6zjuztKNjcfSxYA=
Subject key identifier:   79:01:A2:5C:21:1B:52:62:A5:96:2B:63:94:AB:D6:5C:A2:34:6E:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEABF65AE163EFF27D5900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2131052-c7a1-3042-95ee-a0ee838ed76c.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1015:b1e0::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ab:f6:5a:e1:63:ef:f2:7d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=254a9825-6727-470a-b34e-3b93ce4efe33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:df:2b:ee:61:df:1c:ef:0c:7a:48:1e:82:
                    ce:78:a4:b2:b1:7f:e5:7e:d3:53:3a:0f:2a:f7:e4:
                    f7:7d:63:09:30:a5:83:5d:c1:6a:14:39:51:de:50:
                    be:8b:46:c1:59:ab:e9:dd:90:ad:f7:08:f1:8f:2b:
                    7c:9d:65:e7:5f:c7:4e:05:60:7a:61:b5:04:b4:50:
                    07:bb:09:df:f1:3a:24:1c:ca:cc:ed:24:c3:3f:ed:
                    5b:2f:f1:9d:7c:7c:e0:87:14:d3:6a:73:e0:56:88:
                    1b:74:49:50:58:88:34:a4:6b:d4:9f:0a:62:16:44:
                    a8:52:17:12:a4:5e:a0:c1:a1:0f:53:be:75:ad:e1:
                    67:fe:69:10:dd:d7:ca:55:ea:6f:20:ce:ff:46:20:
                    b4:e2:69:4b:4f:08:34:e1:0c:e8:07:f5:24:ab:ac:
                    bb:ee:92:5c:bb:b6:0b:d6:86:9d:db:d2:f4:f3:e5:
                    77:9d:49:7b:56:25:4d:e6:26:fd:c7:36:0a:77:4c:
                    78:33:7d:09:27:49:21:94:6a:fc:3b:22:09:f4:bd:
                    52:79:11:06:5d:11:8d:06:40:5d:07:ba:8b:72:27:
                    f0:dc:30:8f:8a:56:92:c2:6a:bb:32:8d:25:21:55:
                    77:05:35:fd:ea:58:d6:5f:3b:d5:2d:2e:8d:6a:76:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:A2:5C:21:1B:52:62:A5:96:2B:63:94:AB:D6:5C:A2:34:6E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2131052-c7a1-3042-95ee-a0ee838ed76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b1e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:4e:44:f2:2c:47:9b:77:cc:ac:62:37:99:e3:5f:51:f7:
         91:20:24:23:90:5e:f8:6e:23:80:25:fb:40:d2:39:71:44:c3:
         5c:9b:34:a9:b7:7c:ef:5d:f2:8a:ab:ef:fa:21:34:12:3d:c8:
         73:04:2b:a2:c9:88:73:c0:48:3a:44:ee:14:02:1c:b6:74:5f:
         e7:d5:96:f4:38:87:9d:10:96:c4:a8:ad:77:ae:df:97:ac:d5:
         2e:b6:77:b2:ce:e0:0a:3f:a7:c8:80:95:61:37:8f:e0:eb:5a:
         07:7f:6f:52:20:65:04:71:c6:f3:b8:92:db:41:8d:36:ea:18:
         c4:eb:6a:df:a9:e8:a7:9f:83:aa:0e:c8:4c:ec:1d:51:ec:8b:
         ce:95:dc:b3:53:7a:56:39:2a:9c:c8:6e:17:99:14:43:8c:46:
         c4:0e:36:d5:e1:b8:7f:41:c1:f8:64:d8:9e:3d:df:64:89:8e:
         41:c8:c1:f1:08:0f:c8:6e:90:51:cb:33:fe:f6:2d:a9:e4:6d:
         89:15:a9:67:82:f8:e1:41:0e:c4:73:92:bd:17:a4:f7:b0:a4:
         ad:89:f3:72:8f:d6:ea:ad:c3:d8:d8:e3:29:a7:ee:2a:56:5a:
         f2:04:6d:03:a9:0a:b2:d8:78:a8:4f:ee:52:a3:75:74:b4:ab:
         9f:24:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----