Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfb683be-2857-33b4-8d13-b2eafaf8be79.roa
File:                     cfb683be-2857-33b4-8d13-b2eafaf8be79.roa (raw, json)
Hash identifier:          Wva4bBN82MyVWylHhapbfHL3ngKHClT2pJ0A5aXXZtI=
Subject key identifier:   03:88:3B:C0:CC:4E:01:BB:73:42:44:D3:D1:64:0C:94:93:DA:C0:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A03F8674E5BE192A32220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfb683be-2857-33b4-8d13-b2eafaf8be79.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100e:b1ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:03:f8:67:4e:5b:e1:92:a3:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=08f21fd0-d9cc-4017-b5c6-10afc28a17ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:ef:3f:8a:2b:28:df:f0:fe:97:3e:4b:b1:
                    e4:8f:0b:ff:20:4e:2b:71:3a:ab:70:fa:5b:6c:f2:
                    b0:ad:b0:30:ff:c6:04:21:18:ed:54:1b:59:90:07:
                    7c:6a:8b:75:e4:0c:ad:96:f7:05:de:43:a0:6d:4e:
                    9a:47:7e:d4:d8:8b:38:b0:e9:c5:6e:8d:ba:e5:d1:
                    af:44:87:91:42:ad:cd:47:f8:b3:9c:04:c1:fb:95:
                    9e:81:34:9e:bb:ff:6f:57:06:4b:fe:f3:1c:22:e1:
                    e1:f2:41:2c:c0:5c:80:94:94:8d:0c:a2:18:3a:cb:
                    f2:cc:90:08:5b:d8:6f:90:28:91:17:94:d5:e5:43:
                    5c:53:b1:a2:42:8d:c1:4e:4d:7b:a6:09:b0:d1:66:
                    c0:34:ca:ce:a4:68:03:08:64:31:28:72:a5:06:a4:
                    00:2e:9a:61:52:d0:2c:5a:d8:ed:51:60:bc:88:78:
                    9a:9e:8d:58:dc:a4:d0:71:c3:42:10:20:b1:40:fe:
                    73:67:db:32:bc:a7:27:2a:56:ea:10:11:04:78:80:
                    9a:ad:0e:f8:77:cc:de:40:c9:dd:66:ae:bd:38:1c:
                    2d:04:47:d3:dc:6e:5e:49:48:f1:ff:11:f9:1e:9f:
                    26:7c:fd:c4:88:3c:d8:8a:95:c2:5b:8f:cc:2a:68:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:3B:C0:CC:4E:01:BB:73:42:44:D3:D1:64:0C:94:93:DA:C0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfb683be-2857-33b4-8d13-b2eafaf8be79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:56:31:89:ba:9a:df:a0:7e:53:2b:4a:a4:88:87:49:3c:
         c9:f1:c7:2a:86:b7:ef:f3:5a:08:36:9a:c8:db:b2:ec:99:2b:
         40:d9:f4:55:73:af:d4:68:2e:d8:30:cd:7d:3d:4c:55:31:3d:
         0f:9f:3c:b6:a2:87:1e:f9:09:a5:70:f0:87:45:13:1e:8c:ae:
         f8:95:0f:d9:48:39:ec:43:88:ee:06:0c:65:8d:58:67:fe:c2:
         be:e9:c7:76:dd:5a:56:9f:6b:2d:4e:d7:7e:64:7d:cc:34:b5:
         1c:3d:e3:66:c7:33:18:b2:e3:93:bf:c2:44:74:dc:bf:91:87:
         ab:f8:2d:43:a5:b7:14:84:9f:a8:52:b8:87:91:95:b5:ef:ac:
         0c:36:14:e4:3c:6d:03:27:63:b2:4c:01:cb:2f:21:c1:23:8a:
         d5:39:e3:97:99:5f:50:6c:95:48:0e:e1:0d:68:bb:6c:1a:c7:
         51:03:38:10:53:81:81:93:df:4b:03:27:cd:57:c8:2a:8e:e9:
         72:d1:64:40:3d:4a:7f:f6:27:cb:72:fd:0c:67:85:3b:2d:6d:
         ab:a1:2c:b6:b2:0d:99:ed:39:3d:d6:58:93:6b:c1:13:03:b5:
         cf:16:33:f5:38:90:13:71:43:a5:59:97:ce:f2:af:84:39:b1:
         51:45:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----