Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa
File:                     6b250145-dbfb-32c0-94b8-7287d3e1a245.roa (raw, json)
Hash identifier:          TTxZDyv+phgAlZWqb54tCqcTh8oHi2bEH9FDUPHki+Q=
Subject key identifier:   44:F7:47:AF:04:EF:99:F1:1F:7F:88:34:E4:8D:4D:7B:C3:C3:D3:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584829E30DDDE56EB1E6E8561460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa
Signing time:             Tue 10 Dec 2024 20:12:31 +0000
ROA not before:           Tue 10 Dec 2024 20:12:31 +0000
ROA not after:            Mon 10 Mar 2025 19:12:31 +0000
asID:                     6167
IP address blocks:        2600:1004:a123::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:e3:0d:dd:e5:6e:b1:e6:e8:56:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 10 20:12:31 2024 GMT
            Not After : Mar 10 19:12:31 2025 GMT
        Subject: CN=c0356e8c-cc89-48a7-8b5f-b2c567effd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:1f:a6:58:6c:c3:72:79:24:9c:0d:b3:8f:
                    99:67:ff:54:84:eb:97:5b:72:88:92:4d:72:49:91:
                    eb:a1:f0:be:d9:7a:e9:a0:b0:93:a6:0d:ac:a8:ce:
                    a1:5c:3b:77:eb:89:48:ba:09:e8:b9:d2:ad:db:2f:
                    ee:11:e2:5e:0d:8c:56:9f:ed:73:d8:bd:92:2a:3b:
                    61:62:01:ea:e8:03:4c:be:cb:45:bd:45:37:6d:ff:
                    55:94:34:ec:56:e8:87:cb:d3:3d:d2:4a:49:86:cc:
                    ce:c4:75:0b:0e:40:a9:bb:3c:18:2d:e0:21:d0:49:
                    99:a5:66:33:8e:64:58:e2:9d:cb:be:be:af:8d:5c:
                    c1:19:70:59:dd:1f:30:d6:a1:3f:e2:60:63:60:a8:
                    17:b3:9e:e0:87:0f:b8:2f:79:0f:ae:de:65:83:04:
                    28:02:e7:60:a3:4c:56:40:c6:c7:30:c8:f7:a7:e9:
                    f2:17:90:25:f4:eb:1f:23:ad:39:04:03:d5:7c:2d:
                    89:f7:f5:a6:a8:bb:39:41:b3:7b:b0:6d:24:53:e3:
                    d0:92:cf:3a:94:1c:88:84:92:fb:e3:91:a0:fc:4f:
                    a9:4a:22:9e:2b:8b:78:b4:03:22:1d:d6:fd:63:f4:
                    7f:81:cb:21:b5:de:6f:49:4f:15:81:d2:cf:b0:8c:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:47:AF:04:EF:99:F1:1F:7F:88:34:E4:8D:4D:7B:C3:C3:D3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:8c:6f:8c:c5:70:21:5e:03:26:b6:06:43:96:83:da:db:
         3e:4d:fd:1c:f7:77:ee:b2:fc:d1:39:ef:0a:07:e2:2d:b6:d7:
         9b:88:34:eb:5c:3d:be:59:0a:12:cb:91:49:fc:7c:45:30:4c:
         ba:1e:11:4c:65:91:f6:9b:d3:3b:d6:03:60:ba:38:9b:36:7a:
         9a:01:21:ae:6f:7f:c3:cf:a5:71:69:ff:d9:7d:58:f0:62:24:
         ed:3c:a5:25:31:b1:34:df:c7:92:30:d6:cc:93:7d:81:dc:8d:
         51:47:08:4b:90:69:7f:b5:2a:fa:61:50:0c:9f:ee:37:67:49:
         fd:3d:fc:65:ed:fd:d5:86:6d:15:f1:bd:b8:42:02:50:ed:52:
         67:d0:ba:1f:e8:a0:e6:af:7a:e5:b2:35:64:ba:dd:ba:0e:f0:
         01:81:7f:67:5b:e8:47:3d:a6:de:46:18:9a:4b:39:f8:39:79:
         46:f8:24:55:84:13:2e:1f:bd:75:24:a5:62:38:ae:1e:e8:b9:
         51:e3:08:57:f2:1b:e5:3a:90:10:fb:8c:8b:32:e4:74:bb:a0:
         96:ff:55:4e:db:e2:4d:a6:d0:93:ef:9e:40:fb:bf:c0:47:2b:
         79:0f:f5:fb:b0:7e:2b:67:62:49:32:8c:f4:07:4f:67:8f:b3:
         c0:dc:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----