Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
File:                     cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa (raw, json)
Hash identifier:          od48MQO6WUnrank0vzdCn0sppE3o8KNC6kooydD5cvs=
Subject key identifier:   A9:35:3F:F3:78:D7:C9:BD:91:52:5E:5D:49:1B:E3:50:4E:51:48:25
Certificate issuer:       /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
Certificate serial:       010D0C9F432858490B4C1C711FCE39F4548A0C28
Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2606:5cc0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1c:71:1f:ce:39:f4:54:8a:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=ded111e5-76a4-4909-bb48-84584e55a36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:c6:aa:a5:fd:0d:b0:5e:39:a4:9f:98:0b:
                    ca:83:dc:de:cf:9a:e0:2f:07:ed:a9:ef:03:3e:5c:
                    c4:dd:ce:64:9d:64:8f:6d:3d:17:96:f4:63:17:af:
                    c9:76:a0:63:d5:73:a5:03:48:78:b4:75:97:2a:c0:
                    eb:0f:6e:7d:53:73:30:9b:46:de:67:14:20:08:80:
                    0b:b6:e6:65:db:ea:85:5f:2d:ea:0d:84:7f:45:b3:
                    82:ef:cc:06:a5:70:71:1c:fc:89:10:3f:c1:03:b2:
                    a1:bb:7a:bf:ce:d8:d9:a7:ba:17:d0:a2:f6:12:33:
                    0f:4e:85:f0:c1:b1:5b:32:b6:2d:3c:a0:d1:b9:bf:
                    e6:fa:f4:65:a3:95:30:8b:aa:20:33:d6:ad:80:37:
                    1d:f3:c6:bf:f5:cb:0a:66:5f:03:4a:b7:14:92:17:
                    c8:4e:e0:9e:95:dc:e6:9d:80:0d:d1:32:98:22:0c:
                    f3:05:a2:58:87:e4:71:b8:3b:cd:aa:76:72:47:43:
                    a1:70:91:aa:0c:e3:15:3d:15:f3:07:f7:fd:67:e3:
                    37:c3:e4:33:02:b5:42:e1:d5:dc:0a:80:03:ff:5c:
                    ea:d4:02:87:8c:7f:75:fe:4c:ae:aa:62:d2:ec:bf:
                    d2:5e:2f:53:16:01:65:bc:ba:bb:af:21:e2:a5:52:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:3F:F3:78:D7:C9:BD:91:52:5E:5D:49:1B:E3:50:4E:51:48:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl

            X509v3 Authority Key Identifier:
                keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:90:58:9f:fb:31:86:c9:cd:c3:e2:da:43:14:88:38:e1:
         50:79:1b:a0:4b:6e:bd:39:14:99:c1:a9:a0:d1:fc:fe:15:59:
         aa:ed:33:db:74:48:5f:a0:73:1d:da:1d:24:c7:e5:3d:9b:6e:
         0e:72:86:42:0d:65:9e:ff:7a:75:a2:02:a0:2d:ee:0a:08:9b:
         0b:09:11:b9:65:5a:47:52:47:b9:10:c1:1e:ee:68:e0:38:54:
         b7:bb:4e:c8:58:38:0e:69:35:61:b3:37:58:c8:fa:68:c5:40:
         90:9d:e4:23:34:c6:0c:79:53:f1:e3:a5:c1:02:f7:bd:c6:9e:
         7b:41:37:e4:07:e2:0b:7e:1c:df:3d:21:5e:0c:d9:bd:9f:e1:
         a9:bc:aa:77:f1:8e:26:fa:35:0f:ab:4e:05:f0:a3:de:d3:07:
         97:58:b3:c5:51:d5:6a:9a:f2:d8:d7:be:b4:60:7a:50:ee:44:
         20:09:c7:a9:64:60:e5:6d:98:aa:f9:69:3c:6b:45:58:77:3c:
         4f:21:ed:55:d2:2a:09:db:03:1e:69:37:7a:fb:3f:a6:34:5f:
         c3:da:f1:49:23:7b:9b:7c:41:1e:64:5e:22:d9:c8:6b:48:80:
         f6:d6:db:21:35:d8:55:d2:e5:46:e3:de:82:68:39:b4:98:fd:
         26:fc:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----