Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5da2740-8680-3227-8861-3f9fdb423ba3.roa
File:                     f5da2740-8680-3227-8861-3f9fdb423ba3.roa (raw, json)
Hash identifier:          XOglV6v4pVv4PClbfUwUcXhIEvKGRUT8E7svzgSnXbM=
Subject key identifier:   1B:06:8F:B4:12:F3:41:37:CA:02:BC:50:8A:8D:F0:23:DF:66:37:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A16F009A2D79594726980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5da2740-8680-3227-8861-3f9fdb423ba3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100b:d000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:16:f0:09:a2:d7:95:94:72:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=7591df71-88ac-4448-9b45-44f3da501c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:3a:d4:18:8f:21:b7:e0:6b:81:6c:de:74:
                    17:69:eb:8b:89:c9:96:b6:c0:9e:12:c2:c0:bf:0f:
                    33:f7:57:62:2a:01:28:04:f5:9e:11:25:d9:15:59:
                    9a:35:84:20:92:9b:bc:1e:ec:03:da:e1:9e:bb:22:
                    12:eb:9f:9c:ad:82:11:1b:90:2c:09:ac:2c:bf:9a:
                    67:a3:d5:c9:68:f6:17:e6:ca:06:35:7f:97:aa:76:
                    42:78:f3:a7:f0:a9:7a:de:a7:fd:e2:d1:09:87:0c:
                    b1:f6:7f:2d:6f:12:70:c1:00:48:f5:2e:72:6d:c1:
                    2f:f9:b7:79:37:61:a7:f4:27:28:17:a9:27:37:7c:
                    e4:f1:d4:11:f2:20:07:61:28:f1:ec:dc:58:10:21:
                    02:fa:e5:0d:7b:91:c1:dc:75:6a:8a:90:ac:39:85:
                    7c:e1:13:b8:89:9e:70:c4:e0:20:3e:02:57:cd:bb:
                    fc:33:5f:94:ae:7e:49:11:29:e5:e4:c1:eb:56:d8:
                    39:73:2d:12:b7:b5:39:be:ee:6a:ad:5b:87:a5:d2:
                    04:2b:43:dd:67:f6:67:c2:18:43:ab:74:92:5e:5d:
                    1f:ad:52:5e:7f:da:44:4f:05:14:96:6a:9b:a2:33:
                    78:e0:86:d6:1e:30:86:ea:1c:58:16:fa:82:f6:e8:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:8F:B4:12:F3:41:37:CA:02:BC:50:8A:8D:F0:23:DF:66:37:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5da2740-8680-3227-8861-3f9fdb423ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:3d:ff:67:d9:ed:cc:80:a2:2c:95:3b:01:cb:d8:4a:57:
         ab:be:e8:21:57:ae:d7:6f:e0:f6:01:76:dd:d7:a4:b4:c4:00:
         b8:a3:46:8d:93:1e:1b:89:36:ef:42:d4:3c:f8:90:cd:ca:c3:
         18:70:86:3a:53:7f:e8:d7:a9:6e:63:70:14:2a:0a:e7:f4:6e:
         21:e0:27:39:3f:e1:2b:95:6e:14:62:bf:78:6c:8d:bd:5c:ea:
         d2:62:dc:4e:32:5f:71:4c:8c:d9:a7:58:ab:62:b5:9a:b4:d1:
         61:24:e8:69:70:82:06:46:5e:bd:35:15:c2:42:09:18:f1:e2:
         a7:5b:5f:30:5e:4c:df:33:3a:7c:11:16:e5:7a:7f:1b:f1:d0:
         65:d1:4c:dd:9e:1f:bd:89:1c:a2:1d:42:8a:1a:f9:17:6c:fb:
         cc:81:17:15:eb:77:c4:2a:fe:45:aa:4f:63:19:8d:ae:48:3d:
         10:44:33:81:74:e9:6d:97:4a:16:3f:c0:ae:85:fd:0e:a0:70:
         ef:ce:68:36:74:80:6a:60:ed:fb:71:2a:05:b8:c7:62:0f:39:
         30:4a:e1:5e:7a:5b:4d:1f:a7:18:13:ab:2a:dd:da:4d:74:fd:
         d3:87:2b:5a:21:b0:b6:cd:47:94:80:87:09:94:fb:9b:34:6a:
         7e:a6:d7:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhbwCaLXlZRyaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
NzU5MWRmNzEtODhhYy00NDQ4LTliNDUtNDRmM2RhNTAxYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk861BiPIbfga4Fs3nQXaeuLicmWtsCeEsLA
vw8z91diKgEoBPWeESXZFVmaNYQgkpu8HuwD2uGeuyIS65+crYIRG5AsCawsv5pn
o9XJaPYX5soGNX+XqnZCePOn8Kl63qf94tEJhwyx9n8tbxJwwQBI9S5ybcEv+bd5
N2Gn9CcoF6knN3zk8dQR8iAHYSjx7NxYECEC+uUNe5HB3HVqipCsOYV84RO4iZ5w
xOAgPgJXzbv8M1+Urn5JESnl5MHrVtg5cy0St7U5vu5qrVuHpdIEK0PdZ/ZnwhhD
q3SSXl0frVJef9pETwUUlmqbojN44IbWHjCG6hxYFvqC9uhwiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBsGj7QS80E3ygK8UIqN8CPfZjegMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjVkYTI3NDAtODY4MC0z
MjI3LTg4NjEtM2Y5ZmRiNDIzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC9AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJyIPf9n2e3MgKIslTsBy9hKV6u+6CFXrtdv4PYBdt3XpLTEALij
Ro2THhuJNu9C1Dz4kM3KwxhwhjpTf+jXqW5jcBQqCuf0biHgJzk/4SuVbhRiv3hs
jb1c6tJi3E4yX3FMjNmnWKtitZq00WEk6GlwggZGXr01FcJCCRjx4qdbXzBeTN8z
OnwRFuV6fxvx0GXRTN2eH72JHKIdQooa+Rds+8yBFxXrd8Qq/kWqT2MZja5IPRBE
M4F06W2XShY/wK6F/Q6gcO/OaDZ0gGpg7ftxKgW4x2IPOTBK4V56W00fpxgTqyrd
2k10/dOHK1ohsLbNR5SAhwmU+5s0an6m1+U=
-----END CERTIFICATE-----