Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ea12aa2c-33ca-3ee3-9769-892f1f051c5e.roa
File:                     ea12aa2c-33ca-3ee3-9769-892f1f051c5e.roa (raw, json)
Hash identifier:          gbd0qN/vl3OnOkoKb8H1pWyUdTY1vSfWl7cayejQH+E=
Subject key identifier:   8E:4D:69:3E:58:01:FC:F6:9A:04:40:C1:8E:BB:10:BD:43:45:53:E0
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F432858492CB20D522257D4AC48313D00
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ea12aa2c-33ca-3ee3-9769-892f1f051c5e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     146961
IP address blocks:        2602:fbda:400::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:0d:52:22:57:d4:ac:48:31:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=345d7e5f-1b80-4554-a16f-b93e666ff407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:ce:a1:8a:45:b9:c6:68:8c:a7:1d:9f:21:
                    ea:04:c7:98:6e:8b:4a:54:fb:3b:39:22:e9:7f:4f:
                    d4:3a:97:d5:27:c3:0f:d1:e5:0a:43:9d:53:e5:9b:
                    fe:c1:28:e8:df:5b:9d:fb:aa:29:19:5a:ca:fa:5a:
                    b9:e0:85:4d:f2:ae:48:7f:0c:0e:cf:cc:dc:1e:c8:
                    ec:e4:58:02:cd:ce:84:39:1e:43:45:d9:9c:c4:d6:
                    cf:41:f0:84:cd:c0:28:f7:d9:ae:12:26:f5:ad:1c:
                    4a:6e:0d:49:90:7e:9f:50:86:ec:cb:aa:ab:ff:9b:
                    6e:74:a0:54:22:d2:36:2d:7c:7c:4d:73:78:6a:e0:
                    40:10:29:72:5a:0d:82:96:d1:37:62:19:1b:6d:d9:
                    33:c0:23:46:47:4e:b7:60:b0:54:9b:43:bc:7b:e9:
                    d3:90:89:8c:75:bf:4f:b5:be:07:2e:94:f6:5c:72:
                    fb:1f:3d:5c:b9:2b:cb:33:35:54:da:9b:00:2b:73:
                    de:28:69:d1:09:b1:d0:c6:05:54:75:ee:1a:8e:d4:
                    bb:ca:b7:cc:e0:1e:88:4d:77:1b:91:d4:4b:ca:c9:
                    07:ce:9e:42:c7:eb:7b:7f:d6:a6:1b:5e:d4:f7:8a:
                    eb:88:70:27:b8:19:43:10:d2:d0:77:50:c1:bb:c7:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4D:69:3E:58:01:FC:F6:9A:04:40:C1:8E:BB:10:BD:43:45:53:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ea12aa2c-33ca-3ee3-9769-892f1f051c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:b8:f9:e7:c9:c8:bc:9b:9e:79:30:03:64:69:64:72:88:
         29:6e:32:18:d9:45:c2:a4:b8:a1:1b:f3:92:22:ae:d3:4e:d3:
         cb:fb:45:a1:23:ce:a8:c8:15:e4:85:3d:37:fd:5a:97:19:a3:
         b7:1a:f0:54:e9:ac:5d:2f:ef:e4:de:09:72:ee:e3:07:3f:ee:
         64:d8:95:0f:d9:51:ee:89:cd:34:93:be:fd:69:d6:70:15:9a:
         f6:33:6e:d7:06:bf:da:0e:e5:ab:f4:c9:ad:a0:dd:f1:a5:89:
         6d:52:36:91:54:8b:7a:c4:77:fb:1c:fd:99:01:29:b8:7e:2c:
         aa:4e:49:10:ea:8e:2d:b3:53:0d:48:c3:92:9b:73:4f:d8:4c:
         f1:9c:08:40:a9:30:57:c2:02:93:f4:17:49:f6:5d:a8:c2:94:
         1d:07:cd:07:f4:b4:de:fe:e8:8c:0c:84:25:59:fb:33:1f:fe:
         57:28:d1:0d:9f:29:30:99:c5:a7:69:6c:63:5a:c4:f6:c3:33:
         4d:4d:91:f9:8f:a8:25:a5:6f:a5:58:1e:1c:aa:00:2f:2c:40:
         0a:ae:49:b9:f3:ed:4c:9a:c8:44:43:f3:9f:c4:34:8d:d4:5f:
         72:b6:53:e2:7e:4c:1b:1f:7b:ee:4f:3e:6a:9b:10:80:35:27:
         57:a4:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----