Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa
File:                     c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa (raw, json)
Hash identifier:          tFdDDNyy32ul+rgrF9bSnwER2l4lN/8TJEmqp6syuZI=
Subject key identifier:   20:BF:5A:77:13:5E:D0:16:F0:6F:76:E4:FD:24:72:B7:F7:0F:28:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1A2F0F187AF5B6FE2D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:9010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1a:2f:0f:18:7a:f5:b6:fe:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c4b3e1c5-1354-4b54-a9c0-cbaf6b8d8b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:03:52:a5:c8:06:9a:88:fc:c3:8a:15:10:
                    4d:e1:a4:b6:57:56:fd:48:db:8e:62:0e:9f:3e:a2:
                    a9:d8:ed:82:02:56:f4:cf:0c:8c:01:f2:36:51:23:
                    60:59:92:10:26:ae:00:75:61:f1:7d:b5:bb:68:7e:
                    03:ef:c8:58:78:61:d0:af:9a:81:d5:43:7d:6c:7f:
                    d4:32:95:96:52:da:51:ce:18:97:c8:76:c7:5e:a6:
                    4e:71:2c:6b:28:b4:95:ea:67:cd:25:5d:85:7e:44:
                    e5:3a:b1:dd:1f:02:13:99:07:ee:05:02:73:32:fb:
                    80:c7:73:6b:00:17:a7:f4:ea:39:f5:86:55:c4:8a:
                    16:28:57:bf:b3:cc:56:a5:b9:bb:f4:9c:ce:14:4b:
                    ad:85:67:9d:4d:8f:ae:50:93:ac:2c:93:5a:0d:a6:
                    c3:7b:33:b6:57:b1:75:9e:b4:49:8c:eb:cb:e0:17:
                    c3:8f:51:aa:32:fc:06:64:e8:ab:73:6f:57:17:b5:
                    9d:74:a7:32:ce:7d:4e:0c:0f:dd:0c:45:04:95:32:
                    4d:fb:e7:7a:14:ee:b9:4e:6f:8b:15:d6:6e:e2:eb:
                    fd:36:1b:22:c3:28:bc:4a:97:12:62:f8:cc:e3:57:
                    e9:90:30:1c:6a:57:76:ac:09:78:01:b8:e1:8a:82:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BF:5A:77:13:5E:D0:16:F0:6F:76:E4:FD:24:72:B7:F7:0F:28:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:cd:93:88:a2:44:85:a6:60:84:c4:cb:01:0e:48:c7:95:
         20:08:52:e9:42:fe:c9:69:7c:f5:db:92:f2:d6:35:40:cb:14:
         d0:12:3e:53:16:8e:12:5f:79:42:fd:df:dc:45:ae:78:9d:6e:
         1e:f2:22:d5:3d:56:61:81:23:d4:04:ac:76:00:4d:bd:3f:3a:
         1b:50:80:ba:b9:7f:9c:e3:e8:a3:c2:b7:bf:b5:dc:09:0d:cc:
         49:41:93:b1:c7:d0:f9:ce:fa:29:6f:52:c3:73:15:2c:67:75:
         c2:96:29:19:96:3e:0f:e3:3a:24:13:9f:ea:cc:50:31:02:fe:
         ea:9e:45:61:c6:31:c2:e3:16:c9:69:0e:94:c8:f3:e0:cb:d9:
         97:a9:f9:50:db:f3:21:58:d0:4b:23:98:62:d6:9b:6f:27:7e:
         e7:ce:04:1b:46:0e:37:3d:36:3e:59:2e:02:b5:05:97:91:4c:
         7f:64:be:0c:a5:5e:6f:8d:32:b9:6a:c4:99:6f:1d:ad:d8:de:
         44:12:a1:55:20:89:c0:fa:75:a7:63:d6:74:8b:67:99:31:1e:
         b1:81:60:16:d4:65:a5:a5:2b:8b:0f:56:c6:b4:07:ac:1d:9e:
         00:41:0f:29:69:25:60:b9:a5:7f:ee:47:0c:b7:a3:31:1d:cc:
         db:3d:44:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhovDxh69bb+LUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
YzRiM2UxYzUtMTM1NC00YjU0LWE5YzAtY2JhZjZiOGQ4YjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GEDUqXIBpqI/MOKFRBN4aS2V1b9SNuOYg6f
PqKp2O2CAlb0zwyMAfI2USNgWZIQJq4AdWHxfbW7aH4D78hYeGHQr5qB1UN9bH/U
MpWWUtpRzhiXyHbHXqZOcSxrKLSV6mfNJV2FfkTlOrHdHwITmQfuBQJzMvuAx3Nr
ABen9Oo59YZVxIoWKFe/s8xWpbm79JzOFEuthWedTY+uUJOsLJNaDabDezO2V7F1
nrRJjOvL4BfDj1GqMvwGZOirc29XF7WddKcyzn1ODA/dDEUElTJN++d6FO65Tm+L
FdZu4uv9Nhsiwyi8SpcSYvjM41fpkDAcald2rAl4AbjhioJRXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCC/WncTXtAW8G925P0kcrf3DyiBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRjMWFhZjctOTUxNC0z
MTQyLThiN2ItM2I2MDFiMmZmMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDZAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEV9zZOIokSFpmCExMsBDkjHlSAIUulC/slpfPXbkvLWNUDLFNAS
PlMWjhJfeUL939xFrnidbh7yItU9VmGBI9QErHYATb0/OhtQgLq5f5zj6KPCt7+1
3AkNzElBk7HH0PnO+ilvUsNzFSxndcKWKRmWPg/jOiQTn+rMUDEC/uqeRWHGMcLj
FslpDpTI8+DL2Zep+VDb8yFY0EsjmGLWm28nfufOBBtGDjc9Nj5ZLgK1BZeRTH9k
vgylXm+NMrlqxJlvHa3Y3kQSoVUgicD6dadj1nSLZ5kxHrGBYBbUZaWlK4sPVsa0
B6wdngBBDylpJWC5pX/uRwy3ozEdzNs9RGU=
-----END CERTIFICATE-----