Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7514b21-6b98-3404-b79a-af397f1be815.roa
File:                     c7514b21-6b98-3404-b79a-af397f1be815.roa (raw, json)
Hash identifier:          nBa0lxXFIQrujYeSbnXAMaIjov+zYum6OHdQ3b4j+Ac=
Subject key identifier:   7A:78:6B:25:B1:9A:E2:95:9A:C7:8E:56:EC:04:1C:83:E1:C4:11:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24864B8C40891E2B020F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7514b21-6b98-3404-b79a-af397f1be815.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1003:b440::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:86:4b:8c:40:89:1e:2b:02:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=41c21517-8546-438b-b2db-227293e7c155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:28:f1:9e:a0:b8:13:d3:33:1e:c9:5c:0a:
                    9b:ff:92:1d:eb:31:ea:d6:02:c4:e0:96:38:00:30:
                    78:ec:ec:39:b1:25:f9:da:54:f2:36:2f:e3:53:c8:
                    c7:14:f8:69:e6:2f:33:82:d4:48:5c:3c:cd:c9:3a:
                    d1:de:6a:ff:b2:08:b8:cc:73:1f:14:95:09:25:fe:
                    cf:60:40:4d:26:86:c7:a7:f3:43:42:e3:42:7c:49:
                    08:47:ad:2b:cb:e4:07:39:13:8c:e8:8c:5a:bc:4e:
                    27:30:5d:c7:13:6a:c5:4b:8a:7e:de:07:5e:7e:b6:
                    44:92:77:5f:cd:14:63:c4:b7:55:a0:9c:a6:87:f0:
                    9b:11:89:86:84:d8:01:9c:63:08:85:bb:51:4e:6c:
                    a2:fa:4f:33:5e:1e:3d:49:5c:f4:8f:e9:b6:e8:c8:
                    fd:00:de:65:38:d3:3f:70:54:4c:bc:e1:b1:dc:35:
                    59:bf:99:d0:58:14:7b:c5:aa:fa:a4:f1:80:3a:6e:
                    19:16:ee:23:b9:35:34:fc:a4:dc:1b:10:e8:65:c8:
                    a5:11:77:b0:ab:ac:33:4b:4c:8e:2c:a4:15:48:77:
                    04:60:45:eb:31:1f:f8:37:79:3d:51:4c:9f:8c:9a:
                    2b:52:80:1c:09:fb:c9:7c:78:93:ed:59:95:ac:2c:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:6B:25:B1:9A:E2:95:9A:C7:8E:56:EC:04:1C:83:E1:C4:11:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7514b21-6b98-3404-b79a-af397f1be815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:85:9d:9f:80:d0:26:b6:fd:77:2a:af:c7:59:8b:0d:bf:
         66:aa:76:a5:ea:17:f3:78:65:16:6b:70:f2:81:7d:ac:25:fb:
         51:2f:0f:2e:63:ea:14:30:6d:ce:f3:8a:f9:ca:5c:12:34:2d:
         c8:d1:dc:c4:13:e5:fb:bc:c5:50:1b:0c:28:8f:52:db:62:7c:
         75:5a:16:18:00:c3:6d:00:b0:1a:1d:9b:8b:f2:79:42:a6:d3:
         8e:7e:74:09:49:c5:3a:4c:01:09:fe:2b:70:26:04:63:81:38:
         a5:12:cb:3f:c5:f9:8e:45:dc:76:ef:a8:6d:c4:cf:4d:4f:15:
         d3:b0:a4:ce:3e:f4:d1:b1:09:2b:05:c6:ba:fb:11:f7:94:6b:
         78:2f:b3:2f:8d:7d:74:4e:46:72:2e:a7:de:64:9b:93:94:0d:
         f7:1b:63:8e:72:e5:40:5d:00:fc:95:fc:45:e4:e4:9f:31:48:
         37:cb:03:12:f4:24:ae:4f:93:2d:27:56:69:8b:c7:a2:00:cb:
         ce:08:97:fd:25:98:a9:58:4c:2e:8d:8a:af:56:89:ea:4c:ad:
         66:65:f9:ac:f1:55:7a:91:99:e5:c2:89:d9:0b:6c:df:a9:cc:
         38:31:e7:f9:53:18:45:cc:be:ce:b6:1a:5a:e4:64:91:75:f8:
         3c:1a:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----