Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa
File:                     fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa (raw, json)
Hash identifier:          /f9Bq8a+pIQH9pl4+nR/RcE16I054wvpWrgKKHMbui8=
Subject key identifier:   E1:64:5C:20:3A:A5:03:BA:A7:16:01:5D:9E:3A:FA:D0:F2:D8:4E:D7
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285848BA56302DE7261AAE507B6838
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     36007
IP address blocks:        2606:3a80:2400::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:30:2d:e7:26:1a:ae:50:7b:68:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=36217d43-2b41-4303-9431-29f8ae2c96fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:e7:2a:9a:f6:f6:0f:01:19:8a:97:41:5d:
                    1e:aa:eb:56:ba:1c:47:a2:85:81:23:cf:a8:d8:5b:
                    e7:22:f3:69:e3:1c:dd:ef:28:6a:40:b5:de:b0:29:
                    3f:10:29:94:b2:4c:4a:3a:1d:4b:d6:6d:86:15:a1:
                    4d:81:8e:22:31:49:60:d6:f2:7e:05:fe:0a:d6:34:
                    ed:56:2a:87:67:0b:3b:ee:5f:a1:69:d4:31:dd:6f:
                    08:66:50:f9:88:b6:72:20:00:12:7e:4e:d3:5a:73:
                    ae:16:5c:c4:36:a5:86:b1:30:fa:71:d3:07:fc:94:
                    e4:52:c8:e2:aa:15:9c:c3:f6:ac:15:57:55:9e:1c:
                    2d:aa:d8:1e:43:21:1b:2a:32:d9:3e:9b:d8:4b:13:
                    12:8b:8a:1a:44:db:14:3b:43:28:6e:dd:05:49:3c:
                    dc:c9:d3:25:04:4d:19:7f:d7:6d:dd:9b:5b:49:9b:
                    da:7d:06:9f:f7:6e:36:58:96:6b:56:9a:9d:7c:0e:
                    a7:e5:60:a9:85:a8:38:b7:b3:c0:64:3d:c5:ab:58:
                    ea:97:2b:a1:14:38:5f:07:c5:d4:6d:0f:af:8d:06:
                    da:91:3a:aa:84:a9:7d:0d:c6:25:89:85:b4:c3:74:
                    d7:e1:8a:68:42:d5:7f:d6:c3:58:a8:4c:c8:02:c2:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:5C:20:3A:A5:03:BA:A7:16:01:5D:9E:3A:FA:D0:F2:D8:4E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3a80:2400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:98:f5:b4:5e:14:7f:9f:ca:94:47:75:e1:e7:27:2c:8b:
         dc:f4:34:54:01:17:f3:e4:dc:26:d3:69:82:c3:5c:a8:d4:4a:
         97:59:f7:1b:00:f1:0b:19:3c:79:97:c2:02:f1:08:75:26:e3:
         e7:85:c5:a2:4c:c0:8c:a2:55:3e:f6:79:a5:8c:2d:cd:91:e3:
         bd:f2:d4:33:f5:82:ad:81:d6:d6:48:ac:6c:ca:40:35:8f:a5:
         55:ea:c4:8b:16:97:34:69:e3:29:73:72:fd:f3:46:fe:73:a0:
         8a:f5:50:20:af:39:8f:2d:64:df:c9:63:38:23:38:39:19:d1:
         15:31:f2:97:fe:06:e0:1f:0d:94:d4:0c:26:e1:2e:b1:86:3b:
         bd:9b:b6:e9:46:5f:df:67:1b:af:4f:63:95:65:4f:07:02:05:
         54:fb:08:92:05:4b:43:04:c8:20:0e:5c:ad:a0:fa:56:f7:ad:
         a1:9a:e3:cd:13:46:66:12:db:b2:f9:63:11:e3:7d:4a:ee:09:
         c0:36:f2:de:54:46:b0:45:3b:ab:30:75:ef:fa:40:b0:62:0e:
         4e:4d:5d:49:f0:1a:f7:20:33:60:cb:14:ba:19:2c:a0:2d:76:
         6c:70:76:90:bc:fa:dc:af:1b:ea:a4:ac:bc:6d:47:89:f3:f4:
         74:6e:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----