Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f62d7b86-222f-3af0-ad06-57f16972ba7e.roa
File:                     f62d7b86-222f-3af0-ad06-57f16972ba7e.roa (raw, json)
Hash identifier:          Not+HhkO5P+7NIr1SjUMoNI9rD6nW371uBrxI0YrBpY=
Subject key identifier:   AE:99:CA:36:31:F2:A5:9E:23:C6:8B:BE:04:BB:7E:53:14:6A:C8:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2463DD831AA2EA09522340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f62d7b86-222f-3af0-ad06-57f16972ba7e.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1008:b090::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:63:dd:83:1a:a2:ea:09:52:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=ff51d895-d919-45cd-bbc3-f9a9647ed680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:73:72:07:c3:60:18:8c:ed:ac:81:93:c4:
                    d3:db:af:42:05:6b:a9:e3:68:0c:75:48:80:8b:a4:
                    77:c6:b8:3d:64:3b:25:9d:6a:c6:a5:f7:7d:e8:8b:
                    85:94:bf:7b:19:b6:9b:8c:40:3b:88:0c:9f:2f:d6:
                    27:73:aa:ec:0b:67:91:2b:9e:0e:5c:cc:95:b6:b8:
                    9b:36:5d:e7:3e:17:77:73:36:f6:6f:f2:52:d2:4d:
                    8b:c2:e3:0f:fe:48:6d:23:90:60:10:4d:5b:87:3b:
                    1c:27:41:7c:58:4b:c5:c4:a0:63:6d:9a:f3:8f:d6:
                    8e:d8:54:d9:05:ca:e0:db:db:1c:37:71:7e:c7:df:
                    1a:4c:25:bb:d8:a9:05:b2:0b:da:11:53:39:45:4b:
                    40:63:47:e4:d1:74:33:27:af:ab:72:24:21:2e:3a:
                    7b:eb:d0:be:11:14:b1:68:68:0d:9c:92:23:ca:4f:
                    7c:a2:3d:9f:fa:05:3d:37:b0:ad:27:76:79:80:9a:
                    84:cb:47:46:7f:d9:99:21:62:10:1f:71:6b:1d:29:
                    29:7a:3d:2c:33:cb:de:bc:04:51:2a:a6:e7:38:91:
                    18:b0:0d:a7:27:05:03:1e:dd:f4:48:e5:1c:29:69:
                    2a:86:fd:fc:d8:d5:da:99:95:60:4a:be:b3:47:f2:
                    50:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:CA:36:31:F2:A5:9E:23:C6:8B:BE:04:BB:7E:53:14:6A:C8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f62d7b86-222f-3af0-ad06-57f16972ba7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:7c:f5:bd:22:8e:15:f2:5c:fe:e4:4a:cc:cf:d9:95:2a:
         2b:4d:ff:4f:f7:00:e3:30:79:4b:11:6f:52:f4:4f:8a:c8:2a:
         40:54:de:84:fb:2f:e5:3c:e9:60:bf:6a:c9:5f:24:0c:e6:df:
         75:2f:4a:0d:c4:c3:b8:6e:8b:eb:97:0a:b9:21:a0:f7:92:c5:
         98:30:36:40:24:65:60:e3:18:95:79:27:56:ca:6f:61:42:13:
         dd:64:e0:19:e8:8f:47:0e:c0:37:fd:0e:0c:71:fc:d0:a3:14:
         15:8c:e5:57:de:6c:99:25:89:95:2c:e2:f6:24:0a:7b:67:cd:
         24:6c:c5:2a:9c:f0:27:f5:ba:ff:59:1b:a5:64:d0:6d:99:b9:
         0b:ce:73:e1:5b:5c:58:fc:38:7e:bf:77:fb:a0:1a:3b:a8:56:
         57:9e:a9:7c:61:70:d5:87:8f:47:5f:f7:c5:5f:d8:b8:15:f8:
         29:ca:83:39:3d:61:54:68:c5:4d:60:f9:da:c0:07:f6:42:bd:
         dd:8a:2e:fd:85:07:2a:a2:b0:e8:a0:9c:f4:29:8c:18:80:bd:
         d4:12:23:2c:1d:f9:3b:ce:1e:24:a5:bd:92:13:91:78:95:c8:
         fc:dd:79:f1:32:85:f7:82:bf:3b:0f:b4:5d:c4:73:53:12:2e:
         99:06:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----