Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa
File:                     c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa (raw, json)
Hash identifier:          RUv9o3A7o/xR0qQC5sBef5o/hT60Ufxzo+/85/yStl0=
Subject key identifier:   EF:62:D6:2C:88:40:55:3A:22:21:2E:98:25:93:5E:6C:E6:46:8B:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D8E9FB62A4CDC707F300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2600:100f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d8:e9:fb:62:a4:cd:c7:07:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=abec29bc-7c03-42d6-95c8-592366f20cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:0d:93:4e:1d:18:a2:cb:dc:65:9b:29:df:
                    93:84:5c:85:50:69:36:60:6f:41:ff:1c:d0:ae:b3:
                    7b:4a:49:2f:b2:67:08:ce:12:9b:f7:fb:5d:73:7e:
                    9b:06:a2:f8:5e:d2:f2:7a:e2:73:3c:89:28:ec:8f:
                    b0:cb:dc:29:63:a6:48:c8:b5:81:c9:4f:a9:90:9b:
                    54:62:86:2f:6c:84:c0:01:c6:00:2c:11:99:16:4a:
                    b9:87:88:1d:86:a0:d4:7f:f9:2c:a3:e8:95:6b:5c:
                    e1:ad:c9:22:f9:d0:da:19:11:ff:38:42:40:67:7b:
                    54:4e:e6:b1:9d:a9:34:0a:c8:d6:32:d2:12:4e:0d:
                    55:42:01:6b:8a:ea:d9:34:79:dd:ae:a5:f7:f1:37:
                    e1:ef:1d:8c:af:43:8d:fe:6b:94:37:1c:b5:0a:42:
                    d0:56:07:3c:d4:40:2e:8b:ba:9d:de:44:dd:a2:10:
                    0c:95:c5:cc:3d:29:68:6f:7d:74:10:a0:42:96:72:
                    27:28:fc:b7:e0:97:ec:af:c2:90:bd:e7:ae:3e:c5:
                    96:50:38:dd:1b:02:3b:a6:eb:8b:51:c5:fa:3a:17:
                    9d:5e:4e:f4:73:13:e0:bd:cc:76:e4:9a:40:aa:94:
                    1a:64:d0:b6:c0:f8:5e:34:16:1e:e5:b2:c2:28:a0:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:D6:2C:88:40:55:3A:22:21:2E:98:25:93:5E:6C:E6:46:8B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:f6:32:01:41:af:0d:8c:3a:90:e7:ef:a6:4a:a1:80:5a:
         87:9f:cc:b2:7a:bd:0c:86:7b:b1:47:ab:4e:de:b8:87:05:f8:
         43:7e:eb:ba:26:c1:49:34:05:aa:26:fe:69:d2:30:54:15:65:
         28:69:6c:40:b5:6e:b5:12:d3:52:d0:30:f4:a5:be:d7:55:d3:
         cd:1d:27:bb:d2:d5:c9:59:cb:75:bd:71:ab:19:db:93:0f:ab:
         3c:fa:ef:7f:f6:47:4b:67:4f:90:42:3c:45:06:ae:61:da:5e:
         af:da:49:14:f5:d4:d0:3a:b8:17:a0:46:4c:b1:07:70:b8:70:
         fe:ed:6d:82:c4:83:9e:73:8d:13:d2:0b:23:aa:ef:24:11:77:
         12:fe:df:df:2e:1b:22:e0:a7:d8:5d:cc:b3:0f:09:10:01:ab:
         8c:7d:bf:ed:d7:f7:40:4a:d4:3e:43:53:88:b0:47:03:0b:40:
         2c:2e:68:6f:b7:8f:a6:25:02:26:1d:1f:b2:21:d5:a4:9a:61:
         b6:98:b3:b9:45:42:7d:ad:ae:ba:d0:e1:63:64:a9:06:7e:7e:
         e6:c5:35:f1:2c:b3:6f:e7:d3:4b:b4:30:8e:dd:70:1f:9f:12:
         77:d1:81:56:c4:2d:3b:80:7f:ab:af:f2:da:73:36:91:e4:39:
         43:2a:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----