Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa
File:                     dd9742a9-5480-3c44-88b9-77c978ea7900.roa (raw, json)
Hash identifier:          nrnnf2LZB51Ac2ok7dVepy2gw7NxWvQ0o3hIKBkhwu4=
Subject key identifier:   59:4A:DA:88:80:97:6F:35:B5:23:F8:6D:C6:F6:D0:8E:7D:F1:2A:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2484B35C336F1CFA637680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1001:b140::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:84:b3:5c:33:6f:1c:fa:63:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7e0fe52b-cc58-417f-be5d-ff2dcdb4d155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:fb:da:81:c0:29:fa:e8:62:18:25:17:fc:
                    fb:64:18:27:71:bb:1a:9b:69:62:bd:10:e0:05:0c:
                    9e:00:f3:27:b6:ab:a6:34:ce:56:5a:c5:f6:3e:f8:
                    3a:69:d7:c7:de:15:4d:75:22:ee:42:bc:05:5a:9c:
                    e9:36:5a:96:24:82:4e:8c:49:66:84:d7:55:59:34:
                    23:0c:ae:b5:a5:bd:a4:cd:d7:59:5c:c0:98:ff:fe:
                    80:0f:5a:df:6e:0d:85:d2:26:f1:db:5f:97:0c:1b:
                    32:83:99:2e:63:5b:32:d8:c1:23:4e:38:63:c4:c9:
                    20:d7:80:10:0f:0d:66:5a:0a:db:1b:82:22:67:75:
                    8e:de:ee:1e:10:15:6c:6a:ca:f9:64:ae:61:e5:c7:
                    54:44:99:d6:f1:5b:7f:10:12:97:e8:8f:d0:ed:45:
                    f9:a3:55:56:6d:21:f0:55:6b:d0:7b:ca:89:ba:82:
                    3f:e1:0e:0d:e8:b2:52:b1:a7:6d:4e:63:36:29:69:
                    f4:b0:e2:35:3a:18:b6:49:c7:4d:11:94:fb:ed:76:
                    6a:86:c0:f6:44:84:32:c2:a0:6f:89:97:0e:28:fa:
                    b3:65:31:79:54:39:54:8e:64:ae:1a:b3:52:d2:26:
                    bc:6d:58:78:85:dd:28:39:f1:52:af:91:a6:e9:21:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:DA:88:80:97:6F:35:B5:23:F8:6D:C6:F6:D0:8E:7D:F1:2A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9742a9-5480-3c44-88b9-77c978ea7900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:69:85:fd:ca:70:08:ac:8b:8a:bc:d1:f4:27:16:08:e2:f8:
         79:04:d0:ee:6b:bb:6d:dd:c1:4b:af:58:fb:34:86:e6:0d:2e:
         4b:69:0b:c7:3d:15:95:ee:24:24:46:6f:fd:7a:4d:99:87:dd:
         16:ed:52:23:2f:9f:ab:22:25:df:3c:1c:e7:62:5a:c8:84:db:
         d5:2c:df:db:40:88:24:9f:7c:8f:55:ac:9c:ce:93:7e:bd:93:
         05:3e:87:73:6c:fa:7a:9d:21:e8:46:03:34:be:db:bf:ed:15:
         06:bf:a2:79:89:9d:ae:fc:67:e1:17:f8:c9:6a:0a:c8:80:fe:
         5c:c7:3a:fa:93:0e:51:72:32:11:d7:87:67:da:d4:25:51:e9:
         9f:28:17:db:e3:90:b9:81:02:79:f8:62:02:b3:41:fe:1c:ec:
         05:28:a1:72:e9:0b:bb:6e:1e:14:d7:78:67:ae:6b:9f:09:90:
         cc:1c:03:29:96:da:6f:ea:52:e5:1b:a7:29:d8:8c:e5:df:76:
         c0:73:f6:c9:e5:c8:bd:44:06:b3:c1:d3:ea:79:51:17:ac:8e:
         77:a2:ea:2b:30:9d:62:91:e8:87:c5:35:df:d8:4a:45:c1:a5:
         91:61:9a:57:d7:30:90:1d:1e:7f:15:1c:0e:07:6e:7a:b8:80:
         66:53:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----