Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa
File:                     7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa (raw, json)
Hash identifier:          YW7hrILoRlE2/m9QUMT6dfQcF4nwUesYtIJPA5yDAKY=
Subject key identifier:   2F:C9:43:39:DF:5E:4B:5E:85:BB:B1:FB:50:8E:53:07:48:D4:F4:BA
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584904513566519F22E778A80540
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa
Signing time:             Thu 27 Feb 2025 02:00:39 +0000
ROA not before:           Thu 27 Feb 2025 02:00:39 +0000
ROA not after:            Wed 28 May 2025 01:00:39 +0000
asID:                     395887
IP address blocks:        2602:fb95:f00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:51:35:66:51:9f:22:e7:78:a8:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Feb 27 02:00:39 2025 GMT
            Not After : May 28 01:00:39 2025 GMT
        Subject: CN=c87dcca8-abab-47f7-a357-be387c1cba6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:a7:38:7e:f1:a3:45:49:ad:87:74:bc:03:
                    44:36:47:88:35:ee:cb:2c:04:99:98:7a:de:2a:66:
                    9c:62:f3:96:25:7f:fd:3d:fc:0b:ea:99:ce:65:79:
                    3c:23:04:0d:2f:34:fb:0e:f0:f2:b7:c8:68:b3:2e:
                    af:09:97:25:8c:ae:e4:7e:31:05:3b:26:9e:0d:18:
                    81:2c:2c:74:93:b3:10:60:52:0a:19:7b:a7:7e:d9:
                    1a:fa:76:66:9d:88:87:c1:63:93:f8:98:f2:76:0b:
                    62:4b:22:6a:4e:bb:05:ec:ec:29:a4:2b:ba:de:17:
                    7d:b9:46:40:a2:b7:d0:92:ce:1d:6c:14:1e:e7:87:
                    b3:98:3e:8e:a2:ff:eb:30:7e:53:0c:95:36:b0:5d:
                    eb:7f:20:83:94:9f:4f:b1:75:79:ab:89:31:7d:ab:
                    d8:bd:72:8d:d5:c1:b0:0d:b6:18:ce:e9:e6:82:8d:
                    aa:4f:26:e3:c1:6e:63:c0:a0:e3:0d:9e:5b:1a:1e:
                    48:59:98:19:2a:f0:4c:94:b2:38:d3:b5:ef:fd:17:
                    fb:7f:c8:24:d4:dd:2d:12:94:90:bb:8e:bf:69:d0:
                    bc:16:27:52:6c:dd:b0:35:65:90:42:11:28:42:d7:
                    6e:ac:10:99:dc:cf:82:30:76:89:2b:c8:a7:a9:41:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C9:43:39:DF:5E:4B:5E:85:BB:B1:FB:50:8E:53:07:48:D4:F4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:5e:28:0b:c7:37:5c:a8:53:57:b5:3d:31:fd:3d:4d:5e:
         fc:4d:bf:79:51:23:fd:05:0e:cb:9f:5d:fc:f4:5e:14:9e:1f:
         64:73:ac:36:e2:76:b5:b3:0a:bc:cf:aa:98:31:a5:50:42:6e:
         e9:e4:50:67:9a:f2:dd:41:b4:cc:58:c7:84:3d:3c:73:56:bf:
         5d:21:32:2a:fd:20:b3:2e:39:22:b3:90:bf:dd:7f:fd:90:97:
         5b:e8:3d:6e:55:c5:7a:63:33:7e:ca:5c:b3:c0:23:21:83:ff:
         ff:e9:9b:65:0c:45:bb:06:a9:ed:5d:ea:44:9c:d9:a5:cd:57:
         41:60:00:b2:12:3b:92:82:d7:ec:86:b8:fc:6f:fc:d5:9c:71:
         a7:fe:02:3d:ea:9b:ef:ca:8b:e4:ea:54:d6:54:aa:60:9b:d6:
         b3:56:ab:62:99:08:0b:32:ab:19:f7:81:1c:d3:7b:f2:19:aa:
         62:28:b5:b5:16:be:92:c4:dc:37:bd:b8:c7:c1:b7:1c:9c:2c:
         c9:dc:52:ce:50:97:83:b4:e3:59:d9:22:ff:12:4a:f5:03:e2:
         3d:1f:e3:47:37:ad:09:db:c2:09:3a:60:8a:90:a8:13:d2:a9:
         d9:8d:11:d7:b0:5e:39:06:f2:6a:cb:3c:d2:f7:1c:58:84:d9:
         ae:87:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----