Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa
File:                     e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa (raw, json)
Hash identifier:          Ih5WVriOWkjB+qrTrITwJpgX/Dib0rZ5xf7Gpi5Q7Fg=
Subject key identifier:   EE:3F:F9:E7:56:7B:17:BB:18:E4:5C:36:E4:A0:8F:5E:A3:4C:34:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A156F2458CBFAB7C78780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100a:b1d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:15:6f:24:58:cb:fa:b7:c7:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=931450f9-3354-430e-b423-2a79413381da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:de:0b:c0:f9:bc:8c:14:22:a3:78:62:6a:
                    da:5a:a1:4f:08:30:e4:9c:f6:79:c5:a0:53:87:a6:
                    29:46:7a:14:cd:f4:0d:ec:17:b8:bf:db:1e:92:3b:
                    55:3c:34:b6:dc:5d:b3:79:d8:ff:18:ac:a3:0d:60:
                    7b:e5:c0:25:8c:34:5a:12:73:ea:14:25:7d:08:48:
                    21:45:32:c3:5c:70:bf:91:6e:a9:df:53:72:74:74:
                    b5:fd:de:fd:67:a9:97:55:31:60:2d:a5:99:2d:b4:
                    ae:37:db:bd:0f:5c:0a:c5:fd:fe:ee:9d:8a:bd:64:
                    e3:20:bc:3b:0c:23:73:f5:68:04:cd:0e:3b:45:dc:
                    3e:06:76:ff:87:50:eb:24:d9:4a:f6:9f:5c:03:2c:
                    c6:41:16:66:a7:c6:08:b9:93:8d:67:44:15:88:71:
                    8d:62:ed:cb:f8:9b:2c:27:b4:44:1f:f5:94:6f:14:
                    83:d0:cb:7b:ad:3e:24:eb:6e:74:9a:41:7d:1b:13:
                    82:98:b7:ae:b5:c4:41:83:46:87:0c:35:94:a5:29:
                    49:eb:20:97:0d:69:bf:e0:f3:5d:6a:64:ab:ae:c2:
                    32:4a:76:b6:ac:1c:99:16:b5:e2:a7:9a:1b:da:6d:
                    75:0c:f4:fb:bd:7b:94:63:73:56:58:24:21:82:36:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3F:F9:E7:56:7B:17:BB:18:E4:5C:36:E4:A0:8F:5E:A3:4C:34:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9ab99fd-54e5-394a-aefa-fe45b3bf8d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:b0:92:b8:04:da:07:1e:de:af:8f:d0:8d:2b:26:50:13:
         af:fd:e7:a4:da:1e:be:37:0c:9f:6c:e7:67:73:83:46:9a:14:
         6a:19:9e:73:62:37:77:03:56:53:ee:61:c3:ce:71:1d:5b:49:
         72:72:e9:c1:e5:e7:00:26:41:5a:dc:ca:f0:2c:c5:8b:75:d5:
         4b:eb:73:c4:9a:ac:91:ac:e6:1f:1f:b6:e3:a0:c6:ff:04:51:
         42:e3:7f:bc:81:e7:fa:ed:1d:35:da:34:08:79:b9:ae:bd:84:
         11:e8:5f:5c:df:98:64:1a:fa:f8:a6:ab:2f:42:3a:e0:ef:24:
         42:d4:8c:ef:30:13:84:4e:1b:af:cb:71:5d:24:c6:40:e0:24:
         9f:40:9b:76:e2:85:7b:c8:c4:89:f8:84:e8:19:c7:8b:a6:9b:
         95:d1:b3:a6:c6:fe:6b:31:ca:3b:91:63:8f:05:10:a6:f5:f7:
         0a:6f:e4:f4:af:3b:61:6c:52:fa:9f:69:8e:86:5c:5d:a8:3d:
         c1:83:14:d7:c6:b8:3a:67:a9:c9:7e:1c:d9:66:5b:89:10:ea:
         8c:07:50:78:f3:77:4a:72:22:f6:4f:29:b7:2e:ad:a3:2c:ba:
         f8:29:6a:b0:5c:e9:d2:c6:89:4a:84:92:f4:f1:77:7f:2c:65:
         c4:13:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----