Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf272c3e-c250-38d1-8f2f-e823a80945e7.roa
File:                     cf272c3e-c250-38d1-8f2f-e823a80945e7.roa (raw, json)
Hash identifier:          Ve5HbeqjE6Swi/S9AcQNimbnjHNExQeX2wbmgX4rTTc=
Subject key identifier:   E0:46:35:DD:84:B0:AF:6B:E5:A3:82:CB:0D:93:D9:59:61:C3:06:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9D4E7903D7E14B9CD500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf272c3e-c250-38d1-8f2f-e823a80945e7.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1010:b150::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9d:4e:79:03:d7:e1:4b:9c:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=6da7f10c-24bf-4c1e-a5ad-6e9351bc4c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:c0:ab:23:13:e3:fb:5b:c1:b8:ac:84:eb:
                    83:da:14:be:9a:d8:96:e8:c0:89:d3:7b:2e:d8:c3:
                    23:c4:72:26:d4:2a:50:8d:51:b5:a4:de:83:43:04:
                    e1:2e:cc:91:10:1f:e7:f5:bb:76:2f:82:cc:f6:50:
                    bd:e5:26:08:6a:0b:43:b2:8f:ec:3a:27:6b:b8:23:
                    ce:0e:fb:8e:7b:cd:3c:ca:56:10:c8:a4:8c:26:ee:
                    f7:10:28:4d:6f:27:35:0a:6e:4c:62:ba:96:99:a9:
                    e3:ab:4e:17:14:16:4f:50:74:fd:72:e9:d2:b2:4d:
                    cf:39:2c:11:e4:b7:54:85:e8:b2:1a:6b:39:31:2a:
                    00:ba:1f:7c:d9:23:39:59:45:a6:15:2d:09:7a:55:
                    61:cf:8b:50:ab:86:8c:59:c3:cb:6f:72:a0:79:e2:
                    38:66:30:76:4f:60:4a:05:72:aa:c8:bc:cc:88:3a:
                    e5:f9:1d:84:c5:66:c1:49:24:f0:17:c4:02:86:ea:
                    f0:c0:7f:f0:b5:a9:0f:bc:cb:b3:26:ca:80:94:0c:
                    77:d3:70:38:8f:96:e9:39:cb:9e:a1:0c:88:e7:2b:
                    5c:06:3f:43:8e:c2:ca:50:d8:f4:cd:43:f2:c7:35:
                    1b:2b:e7:07:f0:f6:23:47:2f:fd:d0:fb:e1:b2:73:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:46:35:DD:84:B0:AF:6B:E5:A3:82:CB:0D:93:D9:59:61:C3:06:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf272c3e-c250-38d1-8f2f-e823a80945e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:86:09:f2:8f:09:91:88:43:1f:29:96:0c:a8:d3:df:af:51:
         cd:de:82:82:4c:78:ff:3a:4f:f4:54:d8:b8:7c:3d:ae:8f:03:
         0a:8a:ad:35:3b:63:6f:46:19:ae:38:e2:82:bd:51:15:88:2c:
         dc:77:3e:d7:15:8e:e9:30:81:a8:61:65:40:d6:78:f5:24:f9:
         e5:8a:ee:7e:d0:63:d3:52:15:b0:93:9c:ac:8c:8d:d5:fe:17:
         61:c7:c8:3e:43:23:95:6c:45:1a:0b:00:2d:e7:77:bf:7c:7d:
         68:9f:9e:d3:03:26:1e:19:e6:ab:bd:8f:23:fc:41:31:f7:85:
         39:dc:ed:f3:fe:ce:76:bb:ce:27:d8:e3:dd:a7:3a:6b:48:c8:
         e1:80:25:1d:21:05:00:f4:15:04:27:fa:a1:ff:00:63:fb:fe:
         60:87:07:d3:ed:fb:ba:3f:54:f7:23:32:bb:af:4d:1c:2a:af:
         98:b1:db:77:0e:c0:c9:c0:b0:6b:67:c6:ec:c1:e8:e3:25:83:
         14:c9:df:e2:d8:8f:63:7f:3c:be:aa:a7:ef:25:10:ed:1f:cc:
         72:d8:16:69:a1:69:a9:4e:51:a9:1e:af:fe:24:bb:95:18:1b:
         62:23:d8:96:47:19:6f:c7:1f:7c:6a:aa:4c:83:d0:5d:79:50:
         28:74:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----