Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa
File:                     cfcc50c5-85a1-3171-9f0f-8655231e6995.roa (raw, json)
Hash identifier:          I0kDyo4ub/P9VYMrORnpggplk4TvLdphAd4bQ+xleX0=
Subject key identifier:   33:76:EB:31:3D:12:F1:35:77:9D:A6:6E:1B:5A:79:EF:8C:F5:A2:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24575670D6CCC70E4CF6E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1002:b020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:57:56:70:d6:cc:c7:0e:4c:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7c9efdd0-6508-47ad-9c20-6e4bdb310954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:15:95:c3:9a:de:29:06:9d:41:41:25:d0:
                    89:7e:90:3f:4a:b8:2f:aa:fd:d6:05:cb:10:4e:97:
                    11:13:01:41:96:27:7e:c2:15:b9:74:cc:23:79:c8:
                    24:e2:f6:3a:fe:64:d1:41:d1:a4:cb:e9:e8:98:8e:
                    5f:9a:01:ac:ad:95:ea:a9:a2:32:a7:59:6f:e8:bc:
                    e7:4b:52:95:a5:dc:f0:2c:eb:54:45:45:63:2d:1d:
                    b9:22:87:5f:1d:e7:2d:6e:32:22:34:47:08:4d:7c:
                    76:35:ef:92:5e:c3:15:fc:19:2b:a2:15:ae:5f:3d:
                    44:66:b1:0b:b1:49:2f:6a:2e:d6:d4:2d:c9:32:1e:
                    c6:62:8d:0d:fd:ce:8c:0c:5d:8e:a9:df:2b:4e:33:
                    3c:78:06:f3:78:7e:92:40:39:fd:a5:df:27:3e:11:
                    5d:48:b4:ac:82:0e:19:c1:68:78:5d:fa:56:db:e4:
                    63:77:00:1c:c7:2b:82:f4:10:92:21:c1:ec:2a:ba:
                    6c:a4:a7:9e:29:7f:31:7f:48:55:5e:18:a1:52:ba:
                    30:f4:56:d6:75:b3:2e:74:f5:03:81:8b:e2:37:ee:
                    6b:5c:54:dd:d8:8b:08:7f:93:cf:6a:9b:95:b4:e9:
                    04:8d:4c:0c:96:2c:12:d0:f7:97:7f:f9:a1:a0:ac:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:EB:31:3D:12:F1:35:77:9D:A6:6E:1B:5A:79:EF:8C:F5:A2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:80:01:a1:09:e3:06:d8:3e:71:1b:67:dc:96:ed:bb:e6:
         83:b9:95:88:67:86:68:37:e5:b8:c6:b2:c2:ae:b1:86:b2:77:
         f7:bc:25:d5:13:e3:32:a4:0e:5b:cd:8f:ec:42:51:af:6d:c6:
         f8:6f:8f:58:30:bf:62:0d:9d:df:80:23:81:d5:1a:f2:ac:5e:
         d6:80:c2:27:f7:f1:a9:4a:50:a7:b2:be:98:c0:45:c1:e7:d9:
         89:aa:f0:3e:74:56:41:8b:05:2a:d0:91:73:d6:ed:26:3b:68:
         98:24:bb:3a:56:26:b5:53:c7:57:70:02:f1:eb:1b:72:fc:b6:
         46:7e:9b:ef:8a:d7:77:99:79:5d:06:9e:08:72:68:83:0b:46:
         c9:59:5e:9f:d4:5a:b3:f1:52:bc:19:83:1c:bd:48:c1:67:a7:
         40:30:1b:c2:33:1f:2b:5f:f9:ce:50:82:ad:26:eb:4b:27:92:
         cb:99:28:87:fb:6f:5e:4d:37:47:7c:d7:fd:16:42:16:6b:f0:
         19:08:e1:d1:da:d9:c4:45:ba:65:92:79:76:f4:73:84:15:5c:
         30:1c:3c:0e:06:79:6d:c3:d6:79:c9:42:e5:21:86:a7:ad:a6:
         41:be:e3:26:55:a9:f1:fe:25:78:b8:27:1a:c4:79:27:a9:6a:
         22:c7:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----