Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa
File:                     a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa (raw, json)
Hash identifier:          n38zKmsrSjNLDIzmJ6kanocOi56dPBE3Zkt5NV5MwT0=
Subject key identifier:   F5:6C:29:E0:F5:31:BA:63:3A:36:19:E8:9E:96:B1:C1:CE:61:AB:52
Certificate issuer:       /CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881
Certificate serial:       010D0C9F432858495ABEE11284B004DDA80BB400
Authority key identifier: 76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     31930
IP address blocks:        142.137.0.0/16 maxlen: 16
                          2620:fa:8000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e1:12:84:b0:04:dd:a8:0b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=415d23b6-b694-4f35-812b-7bad7f555bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:1a:4f:0e:e3:a8:89:37:94:36:29:cf:81:
                    64:53:5f:69:bd:54:8e:c6:7c:39:6c:a0:8a:fd:f8:
                    c7:d8:4a:e6:a9:29:cb:84:68:ba:95:b8:7d:0b:2a:
                    0e:0f:e5:da:50:68:e5:2d:73:5c:69:80:dc:4b:c7:
                    9e:27:69:2e:19:58:ed:0e:43:18:39:7f:bb:cd:9a:
                    43:ed:ea:38:eb:3a:1e:57:18:5f:7e:49:92:78:87:
                    35:f6:29:1a:ba:ac:85:24:a5:a7:3d:79:ff:98:f8:
                    97:22:11:da:e1:75:3a:01:da:f9:d6:d7:c3:1e:8c:
                    8d:60:7b:35:98:30:01:ab:59:3e:9e:a7:d8:89:30:
                    f5:49:9e:65:9d:b7:22:83:71:53:52:8b:dc:00:10:
                    16:aa:1c:ab:88:7d:ee:e7:75:9e:ea:da:8d:cf:8d:
                    03:07:d4:2f:69:bd:66:9d:9f:db:ec:52:cb:ac:20:
                    eb:c2:f1:37:46:90:66:32:fa:0c:e0:26:b2:27:46:
                    9a:c3:9d:73:23:26:15:79:27:d0:58:43:07:25:44:
                    c1:63:f1:20:be:87:4f:41:c1:3d:b3:a1:d2:ea:98:
                    83:d3:cb:b9:b8:49:8f:82:84:19:44:41:42:eb:d1:
                    8d:72:4c:00:8c:68:81:ab:9c:c4:2f:7b:67:99:f1:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:29:E0:F5:31:BA:63:3A:36:19:E8:9E:96:B1:C1:CE:61:AB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.crl

            X509v3 Authority Key Identifier:
                keyid:76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.137.0.0/16
                IPv6:
                  2620:fa:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:8a:24:1d:6c:83:66:40:47:21:65:56:ea:73:3c:8c:19:
         76:6a:f6:7d:76:ee:a8:ef:98:ff:ca:9a:c7:15:b8:d4:04:db:
         4a:95:04:a7:47:50:05:52:59:96:c0:8d:fa:92:11:17:9e:22:
         2d:cf:1b:56:01:eb:27:6a:53:df:27:7c:57:3c:ea:cc:69:bf:
         a2:16:24:f7:8d:01:47:f4:f0:df:15:88:f4:df:6e:46:32:35:
         dd:77:cf:11:cf:3b:ab:af:0f:d7:04:19:d9:f4:e9:fb:9a:51:
         79:44:28:30:b3:ac:dc:a4:c2:93:22:ca:e1:c4:12:55:57:18:
         74:69:c8:34:1d:35:96:4a:ab:7f:a9:c9:60:b8:1e:4a:a2:4b:
         1c:5e:2c:c3:da:50:28:a4:15:10:19:e7:23:e2:7a:d8:ac:65:
         2c:52:fa:d3:91:09:89:c4:4e:43:0b:3b:41:a8:10:49:ce:40:
         4c:76:db:3d:b5:0a:00:66:ae:01:b9:52:31:e5:25:46:6c:24:
         9b:60:f0:75:cb:5d:a7:f3:0a:d1:bb:8a:76:dc:fe:dc:78:d5:
         ef:aa:95:34:bf:a4:02:bb:a2:86:74:30:3a:1c:18:02:5e:2b:
         52:a3:71:d9:06:18:a0:e9:0a:74:ef:e7:73:68:75:be:28:e0:
         e0:72:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----