Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea6688c5-910b-325f-b7b1-2847ff345eea.roa
File:                     ea6688c5-910b-325f-b7b1-2847ff345eea.roa (raw, json)
Hash identifier:          ia4Cor3+l5aO8nt71KjP0WGH9BxC0yVxDhV9V4cnvZg=
Subject key identifier:   C3:71:D1:D5:91:BA:2E:A2:FC:DF:26:D6:7F:93:94:7E:83:23:37:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA7A016303A0D14E89440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea6688c5-910b-325f-b7b1-2847ff345eea.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1012:b0d0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a7:a0:16:30:3a:0d:14:e8:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=8145940d-4642-4181-9fbb-f83a50d5c4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:90:01:bd:e1:5d:92:d1:89:06:04:cb:72:
                    2a:60:e2:4f:6b:11:aa:6d:81:cf:33:fd:cb:fe:0e:
                    8a:58:32:d6:0d:c4:05:b5:aa:74:7a:f0:11:c4:d3:
                    aa:3f:66:7b:c0:85:04:da:7d:58:82:b8:d3:d4:aa:
                    30:12:5f:7e:53:83:1c:b6:cc:b0:aa:8a:81:8c:6c:
                    c0:c5:89:28:51:5f:6e:79:4d:ae:ec:35:19:cf:fe:
                    e8:b8:92:d1:a5:24:e0:6c:96:85:f3:44:2a:88:b5:
                    76:89:f5:4f:75:fc:31:48:95:ae:97:00:d8:0d:f0:
                    bc:b6:6c:50:c2:6a:da:44:80:50:07:a7:aa:29:c8:
                    6e:46:46:dd:c5:e3:95:b0:46:9a:87:9f:f0:d8:40:
                    ff:f6:fd:5c:a1:70:14:c8:e0:05:dc:85:8c:9c:b8:
                    a0:18:83:7d:58:10:2b:90:f4:37:c8:fe:0c:67:ce:
                    bf:28:a5:b7:89:10:4f:9a:ff:1f:0d:54:f5:d3:24:
                    af:62:92:5e:1d:dd:eb:97:db:68:29:b9:a5:9e:7a:
                    d5:c5:c1:d3:5f:b7:78:7f:bc:a4:ac:5f:47:b3:d0:
                    f7:64:5b:3f:f4:ec:45:a3:4c:22:a9:53:74:fc:4a:
                    db:ac:da:e8:98:61:6a:1c:41:58:30:eb:e1:8e:fc:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:D1:D5:91:BA:2E:A2:FC:DF:26:D6:7F:93:94:7E:83:23:37:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea6688c5-910b-325f-b7b1-2847ff345eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:f8:e9:d4:fe:e6:84:f7:33:a1:91:90:51:47:d3:2b:8f:
         d4:0a:f7:4c:e1:e8:d6:b6:d2:8b:49:58:0b:4b:61:70:18:90:
         af:92:88:bb:e7:01:ac:25:29:e5:8a:8e:37:c7:35:3e:4c:e7:
         b7:0f:a5:88:96:d6:2a:16:de:fd:7a:db:07:88:12:f3:84:61:
         db:d4:05:e0:87:42:41:94:6d:ad:e9:a3:7c:fe:2a:8d:e4:5b:
         f6:07:7a:32:e7:10:ab:25:eb:ed:54:80:11:db:86:79:dc:c5:
         2c:ad:27:e9:08:06:31:81:1a:9f:69:97:44:13:a8:74:61:4d:
         7b:c5:68:5d:66:36:a6:e0:fe:8a:83:3a:79:29:69:ac:d8:b2:
         b9:71:fc:64:87:bb:ee:6c:d4:db:d0:b6:03:fe:05:0e:3c:0a:
         b8:93:d4:28:08:be:7c:a9:2b:b6:ed:7a:bc:24:0d:fe:ab:7f:
         3c:86:e7:19:f8:bc:28:e8:00:1a:ae:64:20:a8:1a:c1:20:ba:
         7e:5e:37:1f:10:db:64:0c:8c:a2:40:bf:82:0f:c6:e3:78:6a:
         8f:f4:22:db:c4:60:cf:16:3f:82:8d:9d:09:dd:f0:d7:f1:65:
         89:f0:49:d6:29:a9:3e:a8:aa:b4:0e:85:ef:9d:0c:ba:69:82:
         35:38:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----