Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
File:                     f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa (raw, json)
Hash identifier:          hw7yr4CT6neVihxq7O4TzhLcUHIWHP1lZ/Thv1zR4x4=
Subject key identifier:   C1:35:DC:C0:E4:83:19:E8:19:57:E1:A6:18:85:ED:F7:CE:5E:28:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A07D5BE059A585762E5A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100f:b1d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:07:d5:be:05:9a:58:57:62:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b5a23ae8-9cba-40c9-9c4b-a51005f9823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:3f:31:bb:3f:c5:b6:51:93:d3:ce:11:8a:
                    ed:5a:87:bb:e7:12:56:e3:06:6b:db:ee:72:ec:b5:
                    4c:5f:df:4b:70:77:84:f9:6e:33:80:7d:58:9e:3f:
                    cf:22:c6:6c:26:f4:92:28:9d:f5:39:bf:da:8e:02:
                    be:19:7e:76:45:4a:56:b1:2b:29:a0:d8:ab:a7:8e:
                    6f:32:0d:e9:1a:9c:0d:fa:47:02:a2:4d:42:4e:19:
                    1f:10:a9:8c:cf:bb:22:26:25:b0:2a:9c:d1:3d:f4:
                    6f:5b:56:88:4e:04:fe:6f:c7:3c:8f:65:88:15:00:
                    62:2d:03:67:61:0a:a8:66:e1:c8:9e:42:b5:c3:a3:
                    f7:08:c0:5b:48:42:ad:2f:13:14:b8:6f:fe:76:a9:
                    6c:9f:51:49:c3:c6:d0:07:61:97:8c:81:14:2b:bc:
                    62:b0:96:a1:63:51:e6:ac:31:5b:79:45:06:92:cd:
                    c5:44:84:62:63:d8:f4:0c:66:f1:d5:b5:80:05:e4:
                    10:f1:bc:31:e5:6a:5a:4f:3e:00:c3:aa:c5:3d:64:
                    0d:cc:65:7d:bf:55:1e:b7:aa:3b:15:39:8a:76:96:
                    a8:16:0d:08:62:75:e8:4c:32:5e:50:c8:6c:16:25:
                    90:8d:97:65:9f:a6:90:c9:d4:be:c0:4e:47:ba:7a:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:35:DC:C0:E4:83:19:E8:19:57:E1:A6:18:85:ED:F7:CE:5E:28:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:27:28:d1:d1:cf:03:0d:da:77:ae:9e:42:f1:0f:48:39:
         0d:ec:d9:f4:4d:3a:ad:54:c7:90:cb:16:e3:c5:b7:a5:80:49:
         a8:6a:6d:6d:20:ae:13:48:8d:f7:63:e1:92:f7:71:ed:a8:57:
         96:62:13:6c:d6:a6:58:02:73:3e:2a:be:7e:1e:1b:0b:97:f8:
         80:f0:e7:08:50:48:99:11:03:fd:91:58:3b:45:f1:c2:54:85:
         bb:ea:c4:d3:4c:61:44:a7:0d:08:86:2f:00:8b:52:39:86:5a:
         37:a8:3c:ad:76:c1:95:aa:ac:8c:46:e1:6e:59:a9:f7:b1:62:
         aa:b0:75:7e:df:ff:b7:5b:1a:42:8d:3e:c6:40:05:d3:cf:9b:
         85:38:94:24:5d:1e:75:5d:50:88:96:24:cb:00:5b:da:0a:df:
         f8:71:cb:76:bb:37:5a:c1:8c:f2:fa:b1:1f:41:8f:52:c5:27:
         26:ec:0e:f5:ff:66:d4:b2:c2:08:6f:7f:e2:64:71:4e:20:e5:
         f1:68:a4:e8:8b:5b:2d:07:58:f8:d3:31:94:50:d1:4c:d2:25:
         96:36:8e:6d:ef:b2:83:f9:dc:2d:f3:cc:88:42:0c:e9:fe:6a:
         50:94:18:31:fc:5c:02:74:35:99:86:23:30:7d:7e:4a:d6:4f:
         bc:41:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----