Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa
File:                     db7c544e-e72a-3a59-823a-1bd625dd8358.roa (raw, json)
Hash identifier:          uoEbjv3Oi5/uhtBmS3flFh1iGMWahHg8cLzNysDdO2s=
Subject key identifier:   61:6D:C8:8B:80:A3:80:7B:C2:57:B1:AF:68:2C:F8:60:2E:EB:28:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A05EE6AD0FDA3AD96A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100f:9100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:05:ee:6a:d0:fd:a3:ad:96:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c329a2fb-d840-431d-9f54-bc97ebde5e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:dc:6d:8c:17:2b:5b:9f:5d:79:6f:c1:ae:
                    0e:13:cc:47:73:6b:a6:6d:14:6e:9a:47:9c:f8:91:
                    2d:da:fb:39:9a:2c:9f:ca:9a:52:ee:03:82:79:03:
                    8e:d7:5f:36:16:a8:d9:86:d1:cb:a3:1f:31:da:1d:
                    5c:c3:c7:88:7b:50:48:a1:4f:fe:cd:15:80:96:9b:
                    e2:e5:77:86:95:d3:2a:92:e5:58:9a:86:fb:2a:5d:
                    da:ef:dc:ce:07:cc:a2:3f:86:af:f9:f5:d9:21:c0:
                    24:0c:67:73:06:ed:42:ae:d3:e1:1b:2b:22:ad:29:
                    3e:67:47:79:ee:7f:ce:29:92:1f:94:49:9d:32:48:
                    98:c1:ea:6f:62:1c:b7:10:4a:a1:99:ab:16:61:76:
                    e6:6b:22:cc:ff:87:6f:26:15:13:57:f2:59:19:d9:
                    3f:07:0d:fa:32:5f:58:9f:02:13:56:99:a3:6f:28:
                    ca:b8:8e:85:ae:0f:2e:87:3b:b8:e2:7a:09:4b:53:
                    10:7a:ee:d2:36:b4:a1:67:b4:88:fb:a4:44:f1:0b:
                    42:6e:62:5e:23:66:06:41:29:dc:56:2a:78:96:1d:
                    7c:c3:29:0b:0c:e0:27:74:5d:59:92:d2:cf:01:10:
                    95:7c:2e:2a:e7:7f:d4:e9:2c:83:e3:65:6a:8f:72:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:C8:8B:80:A3:80:7B:C2:57:B1:AF:68:2C:F8:60:2E:EB:28:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7c544e-e72a-3a59-823a-1bd625dd8358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:c6:27:9e:cb:f5:4f:79:29:be:ea:c3:5c:72:96:1c:fd:
         22:e9:8f:c6:f6:23:5c:97:61:0e:e6:38:dd:33:05:50:71:90:
         62:d4:78:10:52:01:4d:2e:ea:90:47:ab:84:0c:6b:1c:bc:1f:
         7d:7e:81:d7:eb:e9:43:66:de:3f:e4:f7:51:a5:6a:9e:0d:33:
         d3:59:5a:4a:d9:ab:f9:c6:f2:d4:8a:18:f9:c6:e7:b3:c4:74:
         fb:a1:91:bb:83:d2:b9:09:c5:74:c9:37:a6:67:74:f3:3a:d3:
         70:53:24:4d:aa:9b:34:48:dd:e6:5f:cd:c5:cd:58:d1:ba:56:
         1d:44:0b:c7:21:e0:61:10:16:fa:bb:85:06:91:ad:71:ce:a3:
         e5:16:d3:66:8d:36:84:a3:4d:c1:c8:dc:c0:7e:7b:0c:58:68:
         cd:a5:87:8d:9c:b4:39:db:a7:3f:18:3f:78:5c:b1:59:09:07:
         c5:72:15:04:02:72:5d:48:ad:40:b7:af:95:db:18:3b:7c:75:
         86:d9:82:51:37:2b:bc:e6:7f:1d:a6:00:46:ff:81:67:e4:a6:
         7b:54:b7:f7:a6:b6:63:eb:3d:ce:78:37:c4:52:ef:a8:b4:92:
         fc:a2:f1:0b:df:18:4a:2f:55:2d:be:1c:16:8f:2a:d0:36:3e:
         bc:71:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----