Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa
File:                     7146542b-1d65-3816-8c2a-96d3c9f2767d.roa (raw, json)
Hash identifier:          oreFzMOoIiQ9HPQlX6LdOGmvjbdA+5o/o2k+uh2mgIw=
Subject key identifier:   9D:EE:0C:F9:F3:70:5A:C0:20:2B:A2:F7:D8:7F:30:AF:40:5D:F3:A0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B737679D93226FCDA4480900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa
Signing time:             Thu 30 Jan 2025 11:11:27 +0000
ROA not before:           Thu 30 Jan 2025 11:11:27 +0000
ROA not after:            Wed 30 Apr 2025 10:11:27 +0000
asID:                     30036
IP address blocks:        2604:2e88:4800::/38 maxlen: 38

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:67:9d:93:22:6f:cd:a4:48:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:11:27 2025 GMT
            Not After : Apr 30 10:11:27 2025 GMT
        Subject: CN=bf1c34ea-b8d8-472b-8221-6eaba0f10525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:14:bb:70:e1:07:cd:f4:37:4b:2b:e8:ae:
                    ce:a5:00:81:ed:9c:ed:a8:12:13:6a:1f:ce:6c:df:
                    dc:23:83:da:4a:c1:09:ab:2a:98:f9:30:ec:bd:bc:
                    52:c7:8f:36:ce:97:2f:8e:bb:24:9e:db:e6:9c:1d:
                    c9:20:62:40:8e:1c:12:9b:48:b1:88:1d:ba:89:ad:
                    31:9b:c5:90:c1:af:79:43:e9:00:d7:07:59:6d:47:
                    71:98:0e:a6:47:ac:94:eb:6e:1d:bd:cc:46:be:12:
                    e9:e3:7c:f4:02:c1:ad:73:86:15:c2:1d:0a:23:c7:
                    91:79:cc:78:09:54:5c:ec:c0:5c:3b:90:69:93:41:
                    d4:aa:67:9a:70:27:6d:2d:5b:89:c8:6a:af:9a:18:
                    51:c2:95:8a:a6:a6:d8:b0:51:a5:2d:e1:14:d3:09:
                    bf:10:f9:e4:06:88:75:bf:ba:40:c5:b7:d4:07:fa:
                    c1:51:81:41:b6:7b:db:47:c0:60:25:6e:b8:a1:fc:
                    e2:60:d9:3f:c5:55:58:8c:d5:71:12:3a:49:5e:56:
                    c6:9b:3d:1d:9d:b3:3d:ef:28:cf:40:fe:2a:cc:56:
                    c8:98:4d:f8:c3:d0:52:9b:fe:34:04:47:df:10:9c:
                    10:9d:b3:92:bf:a0:f5:80:4f:31:2b:8b:96:69:79:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:0C:F9:F3:70:5A:C0:20:2B:A2:F7:D8:7F:30:AF:40:5D:F3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:5d:41:61:86:0e:d2:f2:13:6c:a9:5c:d4:2b:76:5f:dc:
         9a:20:de:a6:18:b5:86:0e:93:dc:d9:bf:63:e4:9b:b5:f1:41:
         4f:39:88:63:dc:1b:ec:71:cf:a5:e2:03:ca:94:d8:87:b5:8a:
         e3:66:c9:e9:2b:f3:1a:ac:4d:09:92:c8:67:2f:6d:f6:dd:3c:
         7d:56:f8:aa:bc:79:4e:ea:41:17:78:11:e3:2d:4f:db:c3:4b:
         6c:54:7e:de:2e:c3:3e:12:22:41:e2:7e:88:6e:6d:22:4e:97:
         c7:17:7c:d7:5f:63:e7:7e:c2:da:2e:d7:7b:a9:8c:3e:16:12:
         17:1f:65:4f:f7:be:60:45:c4:0b:4c:8c:eb:b6:b3:1f:ed:b7:
         60:d8:16:2c:55:3d:f3:e8:af:47:ec:76:c4:d9:5b:09:3f:85:
         5e:4b:c7:63:16:2e:a3:e9:a4:c3:30:09:b7:10:7d:de:31:6f:
         ae:83:c6:4e:ea:45:29:e7:35:8b:d9:e7:93:2b:57:a5:91:92:
         23:cf:c4:4a:36:3c:3a:9e:db:08:23:21:d6:31:12:18:1d:24:
         b8:8b:45:34:51:16:31:0e:51:fe:30:47:0f:f4:59:12:c8:af:
         14:42:2b:21:49:9f:84:6c:5e:f7:b1:59:81:22:b8:d0:f6:52:
         51:ba:03:82
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N2edkyJvzaRICQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDEzMDExMTEyN1oXDTI1MDQzMDEwMTEyN1owLzEtMCsGA1UEAxMk
YmYxYzM0ZWEtYjhkOC00NzJiLTgyMjEtNmVhYmEwZjEwNTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknYUu3DhB830N0sr6K7OpQCB7ZztqBITah/O
bN/cI4PaSsEJqyqY+TDsvbxSx482zpcvjrskntvmnB3JIGJAjhwSm0ixiB26ia0x
m8WQwa95Q+kA1wdZbUdxmA6mR6yU624dvcxGvhLp43z0AsGtc4YVwh0KI8eRecx4
CVRc7MBcO5Bpk0HUqmeacCdtLVuJyGqvmhhRwpWKpqbYsFGlLeEU0wm/EPnkBoh1
v7pAxbfUB/rBUYFBtnvbR8BgJW64ofziYNk/xVVYjNVxEjpJXlbGmz0dnbM97yjP
QP4qzFbImE34w9BSm/40BEffEJwQnbOSv6D1gE8xK4uWaXl2NwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ3uDPnzcFrAICui99h/MK9AXfOgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzE0NjU0MmItMWQ2NS0z
ODE2LThjMmEtOTZkM2M5ZjI3NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiEgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABw1dQWGGDtLyE2ypXNQrdl/cmiDephi1hg6T3Nm/Y+SbtfFBTzmI
Y9wb7HHPpeIDypTYh7WK42bJ6SvzGqxNCZLIZy9t9t08fVb4qrx5TupBF3gR4y1P
28NLbFR+3i7DPhIiQeJ+iG5tIk6Xxxd8119j537C2i7Xe6mMPhYSFx9lT/e+YEXE
C0yM67azH+23YNgWLFU98+ivR+x2xNlbCT+FXkvHYxYuo+mkwzAJtxB93jFvroPG
TupFKec1i9nnkytXpZGSI8/ESjY8Op7bCCMh1jESGB0kuItFNFEWMQ5R/jBHD/RZ
EsivFEIrIUmfhGxe97FZgSK40PZSUboDgg==
-----END CERTIFICATE-----