Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa
File:                     6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa (raw, json)
Hash identifier:          oUBtJY4+4VXeY6npdxeP+izdypqr979n/RvwQh9Rc6w=
Subject key identifier:   5D:C2:3E:08:91:52:42:84:17:84:A2:16:69:69:1C:65:F3:AF:C4:DF
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F432858492E13BDEC052CAB42638D4B10
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     149506
IP address blocks:        2602:fbda:700::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bd:ec:05:2c:ab:42:63:8d:4b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=9921d4e4-a858-41c9-bc47-c12f4a8e4a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:91:71:a0:03:ec:03:9c:41:09:e1:2d:ad:
                    c7:ad:dd:b4:dd:6e:ea:a3:19:57:07:eb:8b:0f:a2:
                    6d:ed:8a:d8:96:1b:c1:4e:ce:3d:e4:0d:cc:a7:14:
                    08:9e:8b:39:51:53:f6:a0:a2:5b:ca:91:21:67:70:
                    34:7f:3d:c3:2d:8b:4a:b7:3d:69:4b:84:5c:1e:7c:
                    87:e4:ad:5a:6f:3c:ce:9d:2d:c1:60:98:74:af:9d:
                    dc:5a:ce:54:88:c7:99:f8:69:ef:81:11:7b:44:bd:
                    e6:8e:07:4b:9b:d1:2e:c6:7e:98:ae:68:94:c9:29:
                    4a:d2:5f:94:65:f4:d4:ab:8a:83:3e:71:c1:9c:e1:
                    76:c2:05:2a:c1:75:42:3b:1d:f2:47:ea:e6:42:2e:
                    a5:af:c7:22:06:84:7c:11:e3:f6:74:11:da:ec:29:
                    61:08:21:a1:3f:47:4e:16:ac:d6:be:70:af:25:85:
                    0c:c4:91:4b:44:69:b9:24:da:d6:28:fa:10:0d:23:
                    ec:72:c5:3a:60:e3:7e:10:b6:87:d4:64:55:be:a2:
                    83:d1:56:09:db:0b:e8:d9:e5:a7:a0:43:56:cf:1d:
                    81:5e:bf:8f:ee:25:f2:70:d7:24:a5:91:bd:47:76:
                    7b:bc:85:25:0a:76:3e:9d:88:23:df:0b:af:83:f6:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:3E:08:91:52:42:84:17:84:A2:16:69:69:1C:65:F3:AF:C4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:ba:9f:a9:e3:d3:ad:6e:83:bd:fa:f7:f5:cc:5a:2b:62:
         99:82:fe:f8:a3:74:04:74:58:d3:88:64:68:82:ad:9e:48:05:
         62:18:41:17:7f:c1:52:83:6c:be:07:0f:d6:44:67:ce:88:2a:
         2f:8c:94:2c:df:f7:bc:18:e1:a9:23:8c:57:8b:5b:e2:73:6d:
         d6:4b:fd:c6:44:17:23:43:f0:28:60:91:46:bb:b7:61:95:bc:
         01:7d:4d:01:9e:56:6c:c5:e2:83:71:12:f9:86:ac:95:18:60:
         04:58:91:67:7d:68:91:50:f4:15:09:3b:df:8f:15:11:14:a1:
         13:f2:66:b2:6d:6d:02:f3:c7:0e:d5:a2:cb:ec:b4:cf:4c:a4:
         8f:67:ee:24:45:48:c7:28:dc:e5:60:8f:93:0d:f5:7c:eb:9a:
         c8:b0:a3:c6:d8:65:ba:ee:2f:c8:10:fd:06:56:34:66:c7:d0:
         8b:d9:63:3c:58:e4:5f:12:43:61:6a:74:c9:9a:2b:66:a1:e4:
         93:ef:bc:04:fb:64:19:43:87:5d:0a:b2:50:29:55:fb:ce:4f:
         d3:14:78:c8:78:a0:42:db:19:20:c3:05:01:d0:8d:2b:8c:50:
         36:5c:e2:1f:a3:44:7b:41:9b:dc:a7:9b:b3:79:34:8c:08:71:
         32:07:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----