Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
File:                     263e656e-d169-3c6a-81fb-9368ebd2555e.roa (raw, json)
Hash identifier:          JCUy+/Ab3eZyi21nOPeOJFHHrwkS2FkWGKt1kah4k6Y=
Subject key identifier:   5D:E1:AB:1D:AF:03:00:99:64:D9:F0:87:DA:E7:69:F4:4C:BB:51:6C
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858494733EC3E6B20D0FA041E9C00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     64286
IP address blocks:        2606:f180::/28 maxlen: 28

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ec:3e:6b:20:d0:fa:04:1e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=424fdac6-6e98-43d8-b02d-dc32a09c13ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:78:e3:bd:9d:13:7e:c8:e0:a4:ff:f0:a8:
                    a6:06:b2:64:12:89:76:d0:5d:0e:71:fb:1f:1e:07:
                    07:37:2c:63:bb:23:85:21:18:7f:cf:04:58:f1:f3:
                    d3:93:5e:1d:5c:28:8d:07:6e:19:57:b9:67:db:c4:
                    fa:18:69:42:90:fe:3d:a8:38:92:a2:60:65:67:2d:
                    d2:f0:f1:e8:01:9a:cc:3d:a2:87:a1:a0:f1:fc:ac:
                    49:ac:4c:49:0b:56:85:bf:c6:bd:05:e6:73:8f:70:
                    5c:dd:a2:9d:93:31:58:d3:d3:94:61:9c:12:57:13:
                    27:8e:33:cc:70:42:39:f4:54:0a:f6:f7:24:87:d4:
                    ad:19:6c:33:5d:34:de:ff:0d:b5:d7:ad:13:08:ab:
                    dc:c5:0e:83:61:de:5a:99:f8:10:0d:59:f8:76:41:
                    2c:48:30:f8:1d:e3:fd:d7:ea:80:e7:98:ac:ff:56:
                    28:3b:8a:a2:7c:ab:d1:f5:3f:c3:e9:ec:70:f5:b4:
                    46:1c:51:82:7e:29:6d:ae:c8:04:95:01:90:35:ae:
                    9e:48:37:99:7d:01:11:e7:ea:49:c5:45:1d:4e:20:
                    6e:13:23:90:91:59:ba:6c:e4:46:69:a7:b5:c7:35:
                    71:c0:bc:ad:79:af:f0:77:84:88:61:97:e1:e3:c8:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E1:AB:1D:AF:03:00:99:64:D9:F0:87:DA:E7:69:F4:4C:BB:51:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:61:e3:4d:73:d8:42:ad:59:40:9e:01:1b:87:77:b6:21:
         86:f5:dc:d4:5f:f5:aa:f3:49:4f:6b:b4:83:63:ce:e3:67:42:
         0e:f6:17:4d:86:5c:dd:fd:2a:69:27:e6:d4:72:89:7a:39:f7:
         cf:6f:57:7c:fb:95:40:39:69:e3:87:7b:f9:77:6f:ef:5b:0b:
         f1:49:73:81:1f:a8:0e:33:5d:37:b4:4d:bc:86:f9:b2:25:54:
         88:a1:83:39:70:f9:fe:8f:3b:0a:74:19:59:fb:bb:f4:7a:39:
         c3:b8:b1:28:e2:1a:8f:73:dd:b8:d0:07:4f:6e:5b:83:a8:95:
         2f:0e:55:f4:39:0f:a9:7e:5e:39:c0:96:db:84:d6:02:4d:b8:
         54:70:63:0c:47:9c:d0:8d:d6:9c:76:b6:d7:37:60:96:30:aa:
         4c:28:3b:70:90:12:3c:23:7b:0f:da:50:72:2a:4e:e3:91:67:
         9e:fe:7f:96:08:f4:74:5c:24:ba:31:8a:ab:fb:cf:17:83:c1:
         fe:78:c9:04:a8:ab:29:75:6b:e8:ae:39:d7:51:bb:c7:96:85:
         e0:77:17:7d:1f:af:9b:0c:ac:0c:18:f6:a1:62:4d:54:bc:f5:
         18:48:e2:c6:23:07:e0:d7:e7:03:db:e9:75:78:15:e7:7f:07:
         51:56:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----