Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa
File:                     aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa (raw, json)
Hash identifier:          ZNo16JDiWPtw51gMVQZzgCFMqDm0/qRAh9AxYEgDOH4=
Subject key identifier:   40:76:8B:F1:B5:B3:F6:18:B5:ED:D0:4B:75:1B:1B:89:18:25:41:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848F22C5DF180138EC2645B0100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        75.91.48.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:5d:f1:80:13:8e:c2:64:5b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=46b40f1c-ac31-461e-9963-aa7c13d1a649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:b4:f4:fb:11:9a:06:84:1d:2f:0a:f4:59:
                    26:b6:43:a1:ed:91:16:c9:04:82:40:2b:9a:5c:17:
                    64:b6:79:1f:1e:a0:c6:16:32:e3:dc:05:05:3c:16:
                    5c:a8:08:7b:f2:cc:81:a7:51:34:78:47:d9:21:32:
                    d9:6b:69:76:98:16:7c:da:ea:1c:21:0c:95:88:b0:
                    e2:c1:ae:61:97:c3:e7:7e:8c:da:1b:cf:ce:df:ff:
                    d1:a7:45:39:ac:87:39:b8:de:73:1d:27:71:b7:39:
                    72:a2:6e:3e:6d:a1:7a:5f:8f:77:93:2e:ab:bb:15:
                    f0:47:19:d8:ab:85:87:c4:e0:f1:84:79:3e:58:92:
                    bd:1d:f4:8f:11:85:84:39:b7:4a:49:68:aa:ff:3d:
                    3d:73:00:8c:84:29:58:7a:29:37:f9:63:e8:1e:bf:
                    74:e0:e4:6d:f3:06:bd:28:be:ba:e4:07:57:b2:38:
                    f8:e2:71:0e:b3:59:f9:09:7b:c1:49:ec:68:28:cc:
                    2f:f1:03:a2:b2:71:c6:d8:ff:3d:97:be:df:81:72:
                    7e:70:59:44:d2:d5:78:cd:c3:3a:9c:7c:e4:65:2f:
                    34:b8:de:c0:d5:f6:98:87:fe:84:a1:98:76:e9:7c:
                    c3:44:a3:11:4e:ac:b7:2c:d4:da:94:b6:ae:66:c8:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:8B:F1:B5:B3:F6:18:B5:ED:D0:4B:75:1B:1B:89:18:25:41:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:a0:73:56:8b:24:c6:cf:0a:49:26:24:1a:c5:43:dc:67:
         19:bf:74:48:f1:57:ee:35:58:5f:04:6d:1c:c4:49:69:21:5b:
         aa:1f:db:a6:9f:e6:00:56:29:87:d4:17:cc:a4:db:31:af:4d:
         9b:4b:18:5d:74:5e:9e:f8:2a:73:d8:22:47:40:44:db:a7:9c:
         01:64:a8:29:4e:9d:8f:e3:9a:38:55:ed:8b:47:67:a8:25:64:
         22:65:7f:81:5b:57:aa:d0:bc:ce:39:74:a2:2c:4c:ee:0e:ff:
         bc:d8:d4:c2:0f:bb:ab:be:e7:a4:b8:b8:b8:df:3f:fd:29:50:
         db:b3:ad:ad:d3:62:1d:40:8d:81:fa:10:18:8a:ac:d0:d8:ef:
         1a:39:dd:66:7a:1a:26:19:1a:26:7d:18:ec:1c:93:14:eb:11:
         8c:0b:62:21:27:7f:10:71:17:4d:19:2a:28:93:f7:d5:4d:bf:
         1f:86:22:b5:4b:75:33:f8:57:75:4a:c4:24:6d:e1:0c:e2:85:
         75:9b:2d:cf:7e:d3:5b:6a:90:2d:3b:38:6e:6e:41:7a:85:42:
         28:30:a4:21:73:7c:be:34:53:80:c0:05:7b:a8:6d:fc:4b:2a:
         8f:83:b8:fe:dd:1b:10:7c:2e:fd:5e:c8:87:cc:b6:79:a4:ac:
         63:76:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----