Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
File:                     dee5b4c9-16a9-3873-8941-c417a9236e9f.roa (raw, json)
Hash identifier:          B2KcR5wK/Za71KZsYWNpf7LKdv3xIX4aS+whPCXImyA=
Subject key identifier:   C9:16:17:45:23:FF:45:2F:C2:87:06:F8:9A:25:33:06:F2:33:A8:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1C601F3D1B00CA68B7A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b170::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1c:60:1f:3d:1b:00:ca:68:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=0a1a2ef4-e1f9-4b9a-8a22-b179228360a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:ff:fc:d7:02:f2:f8:b1:47:a3:f1:7f:c3:
                    08:cb:c0:ad:51:fd:14:03:2d:b2:5f:83:07:ec:f4:
                    97:a2:0f:74:f1:db:b5:2c:6b:0e:ac:f8:20:fd:92:
                    3b:1f:d0:ec:4e:e7:13:0f:e0:63:d1:3c:27:2f:7d:
                    cd:63:03:42:b0:7f:cf:c5:84:01:5a:ca:85:04:bd:
                    37:c6:2b:2f:ca:92:e6:36:c1:7a:72:0e:9e:c7:f3:
                    14:38:4d:a4:ea:04:db:b2:35:c9:8b:43:a5:47:8b:
                    4d:b1:14:48:6d:8b:23:1a:2e:b1:29:c0:88:37:3f:
                    21:12:7e:0b:95:0a:68:bd:77:f8:2c:57:28:0a:b2:
                    ae:c5:79:6f:5d:54:a6:8c:e2:a2:ea:e9:7b:52:43:
                    ca:e0:6a:af:be:52:02:ec:16:53:78:2f:9c:fa:9c:
                    13:92:c2:ad:65:82:8c:09:eb:96:bb:7c:a8:c8:18:
                    40:56:6b:fb:4d:ce:20:c7:bb:f0:a9:43:bd:d0:28:
                    28:b8:d0:e8:a2:db:03:67:b9:d3:20:38:35:70:86:
                    42:08:0b:ce:ae:7a:d7:ab:6e:e2:f4:76:de:75:eb:
                    57:2c:81:10:48:c8:2b:e2:8f:87:77:7e:80:86:eb:
                    06:56:3f:9b:33:c1:30:3d:ec:94:7d:fc:9d:5a:34:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:17:45:23:FF:45:2F:C2:87:06:F8:9A:25:33:06:F2:33:A8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b170::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:95:67:aa:bb:91:d4:7b:20:b5:02:57:a0:2e:d6:01:41:
         dd:50:85:52:4d:11:61:5c:6d:b1:20:11:a3:4b:d7:cd:15:2d:
         62:11:be:a9:df:bb:10:ce:55:45:54:68:ea:28:ad:ca:0a:ab:
         bb:c3:1f:63:3a:22:a5:33:3f:83:6d:d4:f7:06:e4:d8:09:69:
         f1:69:1d:69:80:b6:ca:1f:b8:2c:6b:b4:bc:1d:80:2f:0b:ff:
         a3:fe:c7:e3:b2:2a:80:ab:20:a3:7e:26:ae:d1:31:20:49:54:
         9d:01:cc:68:d8:4a:06:ee:7b:d4:35:56:49:a1:5e:ce:38:21:
         53:ce:a1:60:bf:82:dc:0f:d5:20:f8:de:05:73:5b:7a:e1:81:
         a8:ed:29:89:e8:12:74:25:77:86:e2:1f:5e:a2:b5:b4:ce:bf:
         2b:e8:78:06:f5:42:9f:93:61:c2:52:19:c6:d2:88:01:2a:6c:
         06:ee:71:ea:9e:95:db:bc:d3:3b:af:2d:fa:67:dd:cc:8b:05:
         ed:d6:de:67:3d:07:eb:5c:5d:a3:1c:1b:fe:e3:51:a7:3e:87:
         02:3a:bb:2e:47:b6:53:97:84:7f:6f:48:41:11:ab:81:6c:68:
         43:16:28:91:f4:9f:98:e3:f8:f3:f5:79:06:c8:7e:e4:0d:5f:
         4a:b7:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----