Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d40122c3-71fc-3e28-976a-f8e2a7b9334b.roa
File:                     d40122c3-71fc-3e28-976a-f8e2a7b9334b.roa (raw, json)
Hash identifier:          GIXy3dKAwPatW7W3cQnnEomwnd9jDtAk6pYYBcUXOY0=
Subject key identifier:   12:73:36:34:73:3A:82:DC:71:D4:DF:8E:34:15:AB:26:E7:D9:2B:FD
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848BE861E0C8A835518A1555900
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d40122c3-71fc-3e28-976a-f8e2a7b9334b.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     64286
IP address blocks:        2606:f182::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1e:0c:8a:83:55:18:a1:55:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=51d83d2b-a75b-45c9-9df0-455ccb0a5aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:b9:d7:5c:37:7a:3b:32:fc:29:ae:3f:0a:
                    8f:d3:28:d6:8c:a1:68:13:bb:22:14:49:d1:a7:32:
                    81:b7:47:ec:5c:b8:21:83:ee:88:fa:dc:16:97:09:
                    6f:13:df:73:f7:c0:4c:cd:e3:34:50:2a:f5:9c:0f:
                    98:33:05:1f:fd:6c:97:95:7a:db:85:e6:b7:03:03:
                    d0:8b:f7:be:5d:74:77:05:a7:b4:5a:b2:72:57:d7:
                    2a:27:51:de:e4:b3:bc:86:ef:65:10:02:c3:47:8c:
                    7a:b1:cf:cb:6d:cc:ec:5d:8d:53:b5:f3:39:65:89:
                    d7:8e:a7:e4:02:62:b6:00:3e:39:1e:48:74:32:a8:
                    11:ae:d9:c1:b1:c7:c8:33:56:d6:95:3e:3e:67:f1:
                    fe:45:f5:82:2b:eb:84:04:4f:80:33:ae:c1:8c:88:
                    78:45:ee:4f:62:88:34:86:2f:21:33:29:1d:b9:90:
                    36:ce:9e:4b:09:51:ef:b9:94:13:da:a7:76:77:c1:
                    95:68:20:39:2f:fd:dd:81:4d:1b:8d:00:70:c4:3d:
                    3e:c3:26:5a:3c:90:0f:8a:01:21:b3:4a:6f:b3:20:
                    81:98:f3:92:28:54:2c:be:7e:eb:77:ad:65:ab:65:
                    f9:fa:8d:54:23:29:41:b3:2e:38:e4:32:f8:84:52:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:73:36:34:73:3A:82:DC:71:D4:DF:8E:34:15:AB:26:E7:D9:2B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d40122c3-71fc-3e28-976a-f8e2a7b9334b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f182::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:34:64:03:05:be:de:8e:60:c9:c9:df:23:4f:3d:2a:20:
         67:1d:9c:35:7d:f6:42:c1:5f:2f:99:ba:3b:55:1f:68:bf:04:
         6d:42:bd:37:ba:f0:4b:a2:f8:12:e6:e3:ba:c9:22:8a:8e:30:
         e2:78:83:da:89:83:52:f1:af:41:ce:bb:a9:03:80:87:0f:bb:
         f3:06:1d:a3:a1:15:73:a7:84:11:b7:56:e5:5f:f0:db:31:21:
         87:41:9b:58:84:68:a2:7b:b6:36:8d:bd:cf:15:6e:a2:be:26:
         19:eb:8d:33:a7:47:c5:55:f1:59:4b:7b:52:3d:bd:c2:77:c1:
         ba:08:9b:62:86:57:a8:21:f3:8e:bb:da:f3:6c:65:6e:53:b6:
         42:46:55:2b:56:62:7f:3f:1d:b6:c2:db:e3:41:96:ea:5c:b4:
         f8:3e:20:13:e1:f5:38:e2:57:b7:f7:a2:37:33:cd:1c:26:84:
         10:14:e1:5e:84:37:86:1d:96:27:c3:d1:b7:18:8f:f8:93:46:
         64:06:37:52:fe:c4:ce:b4:df:e1:ba:a1:d6:90:8a:49:cd:24:
         96:19:39:70:d8:77:87:64:65:e0:62:9c:8b:86:46:90:71:eb:
         00:f0:85:c1:b1:22:04:f4:a1:c5:ba:6b:02:de:af:d8:25:20:
         af:41:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----