Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9288c79-c57b-3934-b7be-cbcb9b670ff5.roa
File:                     f9288c79-c57b-3934-b7be-cbcb9b670ff5.roa (raw, json)
Hash identifier:          6F39wx28RCWl364L36M35KoY9hn07arjZBP8CSrw31M=
Subject key identifier:   66:5E:A1:2F:D4:C7:B7:93:42:1F:3A:AA:9C:89:1F:EE:62:D8:33:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2463CC2CBA1BB829726500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9288c79-c57b-3934-b7be-cbcb9b670ff5.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1008:b080::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:63:cc:2c:ba:1b:b8:29:72:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7918676b-a998-43b1-8566-8b7bdb0642cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:e6:39:ea:b1:40:a0:2f:f7:2a:c6:95:b4:
                    c7:0b:66:62:9c:71:a2:73:32:14:8c:b9:e2:23:75:
                    60:f7:2a:f6:bf:00:01:7b:9d:38:3c:84:e6:18:74:
                    c1:2f:44:28:f4:c1:06:79:b1:0d:84:0f:8b:3c:dd:
                    06:82:c3:10:08:31:c1:5b:11:6a:17:6c:32:58:ec:
                    17:0c:b5:e8:65:a1:52:94:d2:89:41:71:a9:16:d6:
                    fd:5a:c7:e3:c9:da:e9:a6:86:b2:c4:47:5f:2a:85:
                    c5:f1:09:9a:90:06:98:58:9b:56:d2:e7:b5:19:cc:
                    74:48:86:98:78:e1:fe:95:f9:e7:a9:0c:e5:b0:b4:
                    e3:1d:e9:17:13:51:d4:bc:db:e3:ad:b8:83:61:bf:
                    1c:b5:f7:7e:42:a7:d9:ab:cf:40:84:98:c4:99:0a:
                    78:f5:91:f5:a9:76:c8:fe:65:17:b0:16:ea:ee:00:
                    1b:ff:db:6e:ab:ff:59:dc:03:f1:4b:82:da:b9:c3:
                    56:24:91:43:5c:ae:34:ac:7d:1b:18:f7:2f:97:33:
                    d1:32:1a:b3:2e:2d:20:71:8f:0e:2e:f3:41:ef:a6:
                    70:28:6c:8a:a4:4e:0c:c2:b5:46:62:24:fb:e2:f7:
                    26:62:9a:d1:17:17:4d:d0:a9:1a:ef:34:33:f0:5c:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:A1:2F:D4:C7:B7:93:42:1F:3A:AA:9C:89:1F:EE:62:D8:33:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9288c79-c57b-3934-b7be-cbcb9b670ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:f1:a0:58:b5:ac:8a:1d:c3:2c:77:0e:c8:60:62:88:5f:
         07:cd:32:cf:32:76:65:51:09:df:56:48:af:db:8d:ab:c4:e0:
         1b:c0:f1:38:13:ca:e3:77:4e:ee:6b:2b:0b:b2:b9:b5:7a:8d:
         06:42:04:b2:fc:52:95:db:a1:49:a3:3c:8f:e6:cb:d8:57:f4:
         59:c8:6a:14:cb:39:f2:30:80:d7:92:d3:e8:4e:db:29:ba:6a:
         4b:36:04:1f:38:45:39:47:46:3f:7d:ac:8c:d6:eb:d9:7d:b2:
         00:0c:a7:53:8f:35:65:a8:eb:05:c0:bc:26:44:76:d2:0d:52:
         3a:b6:28:a2:08:d8:6f:60:b4:42:80:4d:0c:8b:4b:33:0e:55:
         fd:cb:cd:6e:03:19:3c:c0:d7:36:a4:ef:32:c9:7c:2a:57:9d:
         74:92:38:df:b2:d4:d6:72:ae:c5:66:8e:15:e3:a0:d6:db:8f:
         31:49:11:44:06:22:97:38:69:99:7c:26:38:c4:75:d1:60:22:
         61:62:f4:4a:e9:84:a5:76:5c:de:e8:ec:6e:19:a9:7a:21:2b:
         9e:06:2d:3b:34:68:55:40:7d:8b:8a:f4:e3:42:87:3c:35:31:
         7b:a8:fb:45:ea:58:93:86:b3:23:71:ef:6d:d0:4f:83:c1:34:
         7a:6d:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----