Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
File:                     87913fab-7922-3eca-b92e-6a5ca4d492bd.roa (raw, json)
Hash identifier:          wn/3jyZ6QlIiKP9jbemehAj2zGFYupxFEYdmUCFomG8=
Subject key identifier:   8A:89:21:BE:86:27:C5:17:8C:F2:43:FF:E7:4D:E7:97:48:8F:84:E5
Certificate issuer:       /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
Certificate serial:       010D0C9F4328584957F415056C9F1DF31D6E3F00
Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     400930
IP address blocks:        2602:f975::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:15:05:6c:9f:1d:f3:1d:6e:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=07612e43-7068-40ad-88b9-141f790a0fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:a6:36:94:07:56:49:4c:27:b2:a6:b4:6b:
                    7d:ec:ed:f2:cb:a7:81:b8:26:f4:dd:2f:80:e4:98:
                    dc:87:fb:2e:a0:25:8d:6a:9c:6d:58:b9:89:4c:5e:
                    c9:51:65:6b:46:e1:b6:51:06:5a:8e:70:f7:63:13:
                    f7:df:fb:29:89:98:81:c5:e1:25:c2:f5:39:87:96:
                    8d:e3:34:51:dd:0a:89:99:a9:86:1b:b5:7a:1f:d1:
                    50:f1:6a:a7:d7:ef:99:d1:5e:53:8b:20:a5:fc:4a:
                    7c:04:71:c4:ce:5a:5b:83:f6:4c:e5:ca:17:f5:55:
                    99:2c:e5:b0:17:e1:84:11:2d:8e:d4:f8:1a:6a:75:
                    b2:28:6f:ee:f7:d9:c0:df:8a:93:5b:52:46:67:a9:
                    12:be:76:15:5e:73:71:8d:b4:b1:1d:c6:c1:19:a9:
                    15:1f:17:4b:a4:95:97:cc:44:1c:57:82:cf:18:9e:
                    0b:27:76:e7:c4:b9:d6:43:bc:bc:21:73:7b:a7:58:
                    9d:88:be:f5:df:15:22:27:a9:ef:46:6f:b7:15:72:
                    54:72:32:ce:6a:1a:27:46:3f:f4:7c:d5:48:43:61:
                    e8:8a:9c:8b:c4:75:10:f5:af:25:55:82:18:31:45:
                    38:30:e8:33:20:7d:bc:46:2c:74:6a:3f:d0:86:72:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:89:21:BE:86:27:C5:17:8C:F2:43:FF:E7:4D:E7:97:48:8F:84:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl

            X509v3 Authority Key Identifier:
                keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f975::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cc:d2:ba:70:75:7f:15:e5:2b:43:39:69:11:a1:70:e2:c1:
         99:0a:32:32:fb:67:ba:53:35:e6:0e:c6:f1:ac:0e:2b:6c:29:
         26:17:65:28:03:eb:a7:84:03:3a:12:cb:6c:60:0c:06:9b:c2:
         95:b7:fa:21:a1:ac:c0:61:a7:5a:64:b6:8e:d2:27:10:d6:f9:
         7a:2a:a9:46:4f:36:b9:e1:f0:29:96:0d:d5:e3:a8:44:27:50:
         4a:90:ea:9d:33:51:8f:af:e3:01:16:d2:03:f9:f5:7a:f8:99:
         77:a8:ca:d6:89:86:54:a7:28:5d:7c:ff:f9:d0:22:97:9d:ac:
         45:36:63:91:e8:7b:ba:fd:c1:aa:73:1e:40:5c:3b:00:dd:bc:
         4e:cc:9b:34:d4:28:2c:0c:5d:92:69:8c:91:15:01:be:2c:ad:
         67:fd:73:47:a0:fb:73:fc:be:13:52:5e:77:0d:5b:be:47:51:
         ff:bb:a8:ea:d9:c4:40:5c:bb:ff:24:b9:00:00:61:69:9b:1e:
         29:c6:f9:03:4b:2c:5b:d4:61:8d:a4:82:14:bb:51:fe:2f:9e:
         23:4c:33:6f:04:e2:b7:d0:65:38:a9:f3:de:73:c0:97:79:5e:
         50:26:12:cb:ae:b8:6e:c5:88:1e:ac:9d:9d:3e:72:d4:df:de:
         ae:27:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----