Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa
File:                     dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa (raw, json)
Hash identifier:          3Ra9Ta7C7zKwBrjeJt/rRXXhbaaS9Ky4GhcH5doJzGE=
Subject key identifier:   63:D8:D7:6E:1D:E5:A1:FE:9B:C5:08:4F:60:0D:9C:FA:86:6D:1F:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A082EAD809F30A3B9DD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100f:b220::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:08:2e:ad:80:9f:30:a3:b9:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b908f1d3-5579-4396-9479-e236ed8229cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:aa:9e:82:a4:1f:ff:69:63:6a:29:e1:34:
                    44:cc:53:ed:09:0b:1a:ac:3c:8d:26:3c:46:80:16:
                    c5:0e:31:87:58:7f:21:14:4d:47:5a:9f:46:2c:8e:
                    a9:43:c6:cb:f0:a9:96:0e:12:4e:84:1d:34:3f:d6:
                    50:d5:95:0d:73:5d:97:5c:91:7b:fd:59:25:9f:b1:
                    82:0c:22:19:58:14:12:70:01:c8:c3:3b:93:10:90:
                    61:fc:e6:5a:59:d4:60:ae:cc:c4:46:b2:a2:6d:22:
                    72:c1:ba:d6:0e:37:b9:dd:0e:dd:f2:4f:ca:ca:39:
                    b5:cd:4e:dc:cc:34:62:24:2b:60:10:46:dd:bc:ff:
                    95:5d:f1:92:b4:56:43:ed:d3:6e:34:aa:f2:da:7e:
                    e1:1b:f6:a0:57:58:0f:fd:d7:c5:1b:b2:2e:a0:39:
                    54:3f:ae:4d:55:14:69:e6:22:1e:67:35:35:c0:fc:
                    88:25:69:96:0e:b2:24:05:24:9a:63:cb:ff:8f:b4:
                    1d:53:5c:da:f5:1e:89:d9:f9:95:a6:09:04:ab:26:
                    69:e0:ef:60:4e:37:a7:e4:cd:cd:d5:4c:55:f6:a3:
                    f4:d2:12:7a:c9:f8:eb:34:32:cb:4f:83:d6:fa:7a:
                    16:86:6b:8a:f8:aa:c0:42:3c:e6:8e:75:e0:63:64:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:D7:6E:1D:E5:A1:FE:9B:C5:08:4F:60:0D:9C:FA:86:6D:1F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbe1e5b1-c296-336a-8998-9b3a78f2fcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b220::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:09:ab:bc:31:cb:9f:31:08:1f:e6:d0:f2:4f:76:ad:08:00:
         5a:ab:9b:8e:21:11:ce:78:4d:f2:b1:33:bb:bf:2d:66:32:dc:
         4d:8e:cb:b5:2b:d7:dd:7c:8d:9f:bc:32:23:e5:c3:9e:71:97:
         7a:5a:e9:f2:53:fc:cd:5b:61:2a:1c:91:ba:20:f4:82:ff:5e:
         7c:b3:90:10:c8:9e:aa:ca:e9:49:b7:2b:25:37:a4:88:81:00:
         c4:06:2f:01:bf:13:ca:af:e0:a5:e2:7e:9d:1a:fd:b6:70:9c:
         61:60:58:14:62:06:58:13:f7:5d:db:85:97:57:43:72:0f:13:
         18:19:1e:8b:62:7b:c2:e5:06:39:83:90:96:2b:e0:69:8e:f2:
         47:68:f7:90:f9:44:85:00:fb:d4:37:a3:bc:ec:be:dc:25:39:
         a2:5a:70:5b:17:71:7a:a9:80:ea:a3:68:c5:43:80:c8:af:43:
         ce:56:a3:26:95:7e:2e:fd:26:70:9f:33:81:94:21:ca:59:0b:
         be:ab:93:34:3a:50:98:0d:8e:7b:a4:f3:83:3c:ee:c2:9e:b2:
         22:fd:5f:04:03:2f:dd:d4:38:da:e9:2e:be:64:93:28:31:9c:
         d7:50:24:53:38:3d:d5:fa:c5:fe:8b:f7:c7:0f:03:d2:4e:d2:
         d9:4f:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----