Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
File:                     bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa (raw, json)
Hash identifier:          OY79Qh0T0x8DoHPfBMscISSHt4xB6D0cYr3WCPirL8s=
Subject key identifier:   17:04:F4:F9:42:A6:4E:A2:DA:31:04:98:59:BB:7D:8F:1C:39:69:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A0543A03BAF46F64CE850
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:bf18::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:05:43:a0:3b:af:46:f6:4c:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=56ab18a8-6321-4997-a515-c8490f227f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:e4:c5:84:a9:33:79:7b:ed:15:ae:97:6e:
                    2a:3b:14:f9:40:7d:f1:5c:0d:1d:65:12:0f:f9:6e:
                    26:ac:5b:6e:99:37:ab:16:ca:82:06:e6:58:d0:50:
                    9d:3f:7b:94:cb:5f:ab:93:32:c5:e2:bd:f6:d4:de:
                    9f:2c:b5:c4:8d:58:38:1f:a6:8b:5a:ab:b7:8f:d5:
                    56:e1:f9:98:e0:f1:ec:e0:b0:fc:da:81:e5:66:cf:
                    f6:82:b3:15:ba:8f:1b:8e:84:01:9d:93:48:0a:f2:
                    98:14:d6:d2:be:72:06:e8:fd:8f:04:80:ee:8a:a8:
                    3b:60:bc:85:ef:2c:b9:33:ca:b5:7b:bf:07:22:a6:
                    00:41:8f:9c:35:c9:a8:6b:b0:10:eb:7f:d7:3c:6e:
                    53:01:cb:69:3c:97:8f:4d:de:36:1a:30:06:64:9d:
                    e4:3a:83:2e:1b:1c:81:86:c5:0b:94:a8:f0:a0:a0:
                    49:68:1d:1d:da:cf:fc:f4:80:51:b1:24:82:85:98:
                    97:78:a2:8e:14:37:49:9e:e7:0a:8e:6a:b3:fb:40:
                    86:9d:30:33:ce:2c:c8:4d:98:d2:cf:27:c5:32:cc:
                    3d:c8:a5:c1:18:93:46:ce:5a:72:43:96:22:2b:6e:
                    e3:00:c9:44:8b:7e:99:de:45:8a:b0:38:c3:80:74:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:F4:F9:42:A6:4E:A2:DA:31:04:98:59:BB:7D:8F:1C:39:69:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:c4:1f:2c:7b:25:94:73:96:32:29:aa:fc:8b:e7:6f:8c:
         f5:2d:cc:4d:08:c2:37:05:13:5d:78:a6:4c:88:1a:db:62:68:
         a7:88:cc:88:ff:f8:a7:d1:6e:18:35:26:32:a1:2a:4f:53:7e:
         99:ee:a8:f7:9f:9d:03:c4:2e:4d:a9:90:67:f5:9c:c0:ff:1a:
         f0:fa:58:ff:08:29:53:1f:4b:07:04:a9:2a:f3:3a:6d:bd:7e:
         23:1d:72:90:74:b7:94:21:54:81:bc:b0:7a:b2:9e:0b:ce:00:
         f7:07:96:8a:26:71:0d:7d:2b:0e:20:27:0f:41:51:a4:01:fb:
         e0:77:0e:6c:a0:c6:50:4c:54:51:d8:2b:91:78:1c:ef:4f:cf:
         3c:24:11:4e:87:fa:24:04:bc:ae:ca:b9:53:99:67:b3:da:e2:
         42:12:ae:b2:7d:7b:c0:85:77:4b:18:bb:ca:cb:32:6a:c8:8e:
         33:c0:22:3f:a2:e3:4a:f6:19:0e:27:86:3c:fe:75:8d:75:1b:
         8b:0d:eb:80:5f:ba:02:70:48:fd:90:f1:c4:b3:29:b3:9b:16:
         9e:c4:47:b2:7e:47:53:a4:80:33:32:59:22:47:40:55:cd:b1:
         5e:32:58:ec:85:68:e0:1a:52:f3:f8:f0:06:09:c0:93:bb:a1:
         d1:a7:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----