Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa
File:                     ba99bc9b-3a0b-3626-a279-87f8661a774c.roa (raw, json)
Hash identifier:          e5T2gotL8x33DqPLA5CgSYLuVXNBqK3PNJLakK0sGNo=
Subject key identifier:   D7:86:B8:BA:49:E7:06:FE:F5:FC:6D:16:A5:35:73:60:50:90:64:11
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858490161F10FB375F3ACA6E21280
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa
Signing time:             Wed 26 Feb 2025 00:46:58 +0000
ROA not before:           Wed 26 Feb 2025 00:46:58 +0000
ROA not after:            Mon 26 May 2025 23:46:58 +0000
asID:                     64286
IP address blocks:        2606:f18d::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:61:f1:0f:b3:75:f3:ac:a6:e2:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb 26 00:46:58 2025 GMT
            Not After : May 26 23:46:58 2025 GMT
        Subject: CN=7d3217f2-8c71-468c-b419-09de9a25c14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:69:e6:3b:12:f5:16:79:8e:93:7f:3c:40:
                    3e:84:3b:d7:c5:8c:bb:aa:4d:69:5b:a5:07:51:d3:
                    aa:d9:a5:95:ba:51:d6:73:49:3f:4c:06:f0:a5:93:
                    83:58:15:eb:87:a9:30:b2:a4:26:c0:46:10:14:00:
                    06:32:9e:24:a6:f7:bd:0b:86:bf:e6:49:1c:99:76:
                    db:cf:cd:a5:85:b7:61:fe:4e:3a:a6:3f:50:2c:e7:
                    3f:7b:0c:3b:58:63:bf:35:87:3b:a8:fc:ba:59:af:
                    6d:d2:60:1c:44:c2:41:a3:e2:a4:79:15:2f:58:53:
                    ba:d6:5e:85:98:13:26:23:23:20:67:6f:83:b6:1c:
                    b9:09:86:81:76:00:3d:4d:6a:e1:bf:b6:e6:87:6c:
                    ca:06:88:e3:a4:12:1f:80:d5:df:63:0b:08:a6:22:
                    64:b0:02:f7:8e:85:75:63:47:3c:a1:4b:6e:bc:88:
                    de:16:c7:b1:1e:55:ef:6a:67:5d:53:f9:b4:70:ef:
                    48:60:7a:3a:d2:23:a3:1d:5d:bc:f3:e4:93:ef:39:
                    dd:db:02:66:eb:58:1b:32:b8:b1:81:39:ef:c8:3f:
                    3d:07:40:c3:37:4e:76:aa:3c:9f:73:77:e1:89:79:
                    ce:49:a3:64:78:77:4e:f3:c4:9f:a3:17:6a:b3:c9:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:86:B8:BA:49:E7:06:FE:F5:FC:6D:16:A5:35:73:60:50:90:64:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f18d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:54:cd:75:97:2e:46:d6:e2:e0:71:04:66:69:cf:7d:e4:f3:
         a9:a9:f6:03:93:9e:45:fa:bb:40:4b:9b:bd:ad:cf:c7:05:4f:
         c1:9b:40:88:d3:0e:95:01:95:8a:c5:a5:5e:c4:67:9f:c8:97:
         dc:92:bb:7f:1c:54:d0:65:fe:6d:01:fa:74:1e:ea:6f:db:55:
         33:da:5c:ee:e5:f8:c5:e2:58:e0:ac:7c:71:4d:c2:af:a0:06:
         cd:74:ce:e7:02:43:ac:8a:50:59:04:88:61:94:da:2b:c3:d9:
         81:e3:a2:c9:2e:4d:dc:ec:38:35:7e:08:b2:99:82:94:f1:2d:
         e9:21:e8:3c:2f:41:49:76:ef:fa:74:07:b7:eb:e4:90:ea:88:
         dd:6f:45:88:d2:cf:8b:10:86:bf:8a:34:8a:ed:94:e0:43:43:
         cf:22:4e:1b:a5:c2:dc:44:a0:e5:3f:77:39:28:50:de:fb:cc:
         99:32:ce:5d:b5:92:27:1d:d3:0f:dd:4a:69:0d:3a:b0:18:b4:
         c2:2e:78:00:5c:9c:5d:77:18:10:ff:9a:67:08:3d:23:e1:55:
         cf:6f:46:c7:c2:6c:02:89:50:1d:65:18:aa:75:14:3f:4b:f7:
         9c:f0:d4:34:5e:3f:e0:52:06:0e:cb:e8:cc:1c:b9:b8:af:cb:
         4c:30:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----