Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa
File:                     fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa (raw, json)
Hash identifier:          VgwmckdbSnfq5Kqt/QNvbIj8/AcKrHvvTtTnjM2E7nY=
Subject key identifier:   46:7A:10:E3:3A:EA:68:3E:4C:8F:D6:EF:3A:F1:F4:9E:95:8D:8B:EB
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285848B4C0D12D75BB50D07FDD3000
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     4213
IP address blocks:        2605:bb00::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d1:2d:75:bb:50:d0:7f:dd:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=137ef23a-41d6-4971-b59e-8dfac0ac365f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:95:6e:e2:9c:cb:4d:36:f3:cf:c7:05:9e:
                    d6:ff:8d:70:f0:c9:ef:24:31:97:67:9a:59:5e:6d:
                    71:73:20:bc:68:fa:b4:a8:17:fc:67:7e:7c:97:25:
                    27:7a:de:db:07:e5:6c:32:14:55:c8:5e:c2:e8:be:
                    15:af:e0:33:40:35:45:b5:29:f1:8b:32:25:ac:ce:
                    a5:e2:2e:1d:56:16:3a:55:31:08:08:0e:fb:f6:52:
                    c0:81:da:7c:7b:da:d4:01:79:60:63:45:34:1e:36:
                    71:3f:1b:15:e0:38:e3:cd:07:f6:16:8f:52:e4:6e:
                    26:09:14:13:7f:e4:99:1e:18:b2:44:73:93:cc:8b:
                    de:95:b0:39:eb:7e:8a:4c:a7:5c:84:58:1d:fa:5e:
                    2e:ac:11:49:a3:63:96:c0:e2:cd:c8:4a:ff:19:20:
                    dd:bf:23:92:8c:a2:2e:0e:92:a1:25:94:ce:25:69:
                    7f:8c:70:7f:60:f4:5f:de:af:7e:f2:0e:dc:bd:f4:
                    dc:bc:f3:51:40:9d:b5:d9:ae:98:35:2e:c2:92:24:
                    8b:79:9f:ec:a3:05:fd:43:18:48:8c:4b:be:2a:32:
                    d8:60:ee:4a:aa:3c:bc:22:6f:c7:3f:32:ec:89:d6:
                    93:a1:83:1d:9e:8c:0d:1d:90:13:f8:d7:d7:f7:7c:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7A:10:E3:3A:EA:68:3E:4C:8F:D6:EF:3A:F1:F4:9E:95:8D:8B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:4b:35:df:96:e1:c3:ab:ff:fc:9e:3b:2e:68:a6:4a:d7:
         ce:a7:ad:1e:c6:0c:0d:7f:0b:eb:b9:a2:e6:ae:40:ff:d7:87:
         8a:d7:00:8f:05:ca:57:64:fb:f9:17:d0:b6:b6:e0:5d:13:58:
         d4:cd:6c:87:29:aa:1b:c9:9d:b3:24:5c:ea:ca:32:ff:44:2c:
         6d:ba:e6:64:eb:9c:a2:7f:3f:9d:6b:14:8d:88:d4:4c:73:e5:
         3d:67:63:12:2c:2e:b9:7b:9b:66:fa:f2:05:82:f9:3c:e8:69:
         58:fa:d2:e7:43:8c:cf:a8:76:d0:77:c0:44:22:fd:ae:cb:4b:
         14:c4:22:a2:06:ba:49:0a:bc:59:ca:c0:42:1f:7e:6e:05:b3:
         f8:dc:62:c0:01:d5:13:00:1a:64:79:77:9c:b2:8c:5f:06:80:
         ab:9f:08:61:4e:0c:95:a8:11:f3:fe:3d:88:16:ac:0b:91:4b:
         9b:95:16:67:ea:1d:d4:17:e5:11:a3:75:98:44:bf:16:08:7f:
         00:1d:90:b0:03:ca:86:72:aa:d0:6f:80:84:3c:37:66:98:31:
         f0:91:0e:b6:a6:79:03:2b:c0:64:6c:64:ae:63:12:41:2d:66:
         08:ff:11:2a:b6:ec:81:19:a6:b8:98:eb:97:25:e9:55:23:91:
         c0:68:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----