Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa
File:                     e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa (raw, json)
Hash identifier:          mjOZxFqQDj68sDhWwr1usNeTPMvGArjPec59wXu1h/Q=
Subject key identifier:   4B:88:FB:11:E9:8C:A9:DD:28:9C:56:77:F1:7F:C8:63:B8:60:24:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A16A647B58D6F6166D2E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100b:b1c0::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:16:a6:47:b5:8d:6f:61:66:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=2d71b30d-e051-402b-9540-218bdc80f617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:a0:52:a5:8e:b4:86:cb:af:e5:56:7d:7f:
                    62:08:dd:7e:df:b0:ed:76:d2:ae:11:94:52:67:44:
                    20:2f:80:8c:73:61:a4:df:6e:f7:3c:31:33:e6:e3:
                    6f:6a:92:ff:a5:6b:a5:ac:e7:a3:e7:f0:6c:5d:f0:
                    d3:82:ee:c3:ca:2f:89:69:c6:f0:8d:d2:9f:73:a4:
                    2f:8c:09:a1:26:89:2c:f6:48:6c:33:04:21:ee:46:
                    f0:67:48:6e:23:1c:e1:52:34:61:6e:64:53:f7:7a:
                    f9:a0:b4:95:56:70:1f:97:8d:6e:31:04:ef:9e:29:
                    dc:75:2d:f9:b2:90:f0:6e:c1:de:09:98:96:61:3b:
                    0e:68:c6:8f:c4:ba:91:13:5d:09:d3:d5:e6:60:a8:
                    2b:09:69:e6:29:63:64:92:53:e9:fc:dc:e3:93:c8:
                    6e:54:3d:3e:fc:1a:7a:1b:ea:b3:f5:b2:ab:6c:ec:
                    77:0d:43:97:fe:4f:3d:1a:83:53:ae:c0:04:44:60:
                    5a:07:d5:f9:a3:58:7c:33:c9:50:84:c5:02:3c:dc:
                    37:1e:c8:64:4d:db:e1:45:47:40:3d:45:79:5c:8c:
                    01:1c:31:6f:f9:ba:d4:7b:52:7b:56:da:a2:7f:de:
                    c0:d6:d3:b0:4d:1f:87:14:09:b2:09:01:f2:cf:7c:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:88:FB:11:E9:8C:A9:DD:28:9C:56:77:F1:7F:C8:63:B8:60:24:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:6c:9b:6e:af:b9:9c:1b:a5:76:81:e7:e4:3a:9b:cd:06:
         d6:ff:8e:f8:1b:63:1d:36:80:1a:2d:21:6a:ed:5e:37:6e:51:
         73:7b:80:27:d0:0a:4a:ac:f1:8f:84:b8:cd:1d:c4:a7:52:a6:
         3a:4d:3f:f5:38:cd:c5:c5:bd:2d:09:ab:4b:33:7b:f0:9b:19:
         74:6f:0c:57:43:00:ae:8b:a3:44:16:1e:d6:0f:79:e7:e2:44:
         5f:7d:13:e2:08:e9:37:17:8c:51:19:20:53:de:b3:5f:f9:85:
         6b:ae:1b:25:8b:de:37:48:c0:e3:d1:21:d4:67:2f:57:5f:63:
         00:d9:aa:8b:e6:8c:5d:6e:da:56:8e:db:83:40:56:e2:f7:f1:
         27:20:f2:86:ef:19:42:39:9d:4e:53:5a:53:4a:f4:03:a9:c2:
         95:af:45:41:0c:5c:25:95:84:5d:99:28:9d:bf:59:15:c4:af:
         50:f0:72:49:ac:06:f5:d1:08:1b:b6:4c:fc:fa:3a:cf:69:f8:
         27:16:ed:01:c4:d4:b8:17:59:c1:8c:2f:fb:2e:2d:56:22:f8:
         e5:fb:31:93:01:5b:b2:e0:82:ad:ec:68:f5:34:d0:36:2b:f7:
         73:66:31:00:92:be:2a:54:8f:0c:ff:41:7f:6c:f0:68:5a:a4:
         19:e5:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----