Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa
File:                     05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa (raw, json)
Hash identifier:          tACknXt16OdTCPFRjOYPuU0JvGYJrPnMF9ejzee73Vg=
Subject key identifier:   53:F0:03:29:1E:45:F7:64:98:50:B7:BF:16:94:93:86:44:FA:9A:06
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F9268BDC36E10FF7AACDD640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     396612
IP address blocks:        2620:74:21::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8b:dc:36:e1:0f:f7:aa:cd:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4db38a63-0f0b-4dd3-9075-d9b3437275d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:c6:02:2a:a5:8f:00:58:b0:63:b5:1e:d1:
                    e1:74:72:09:2d:70:b6:ec:55:25:d4:42:53:d6:83:
                    65:86:67:06:46:b2:f7:b1:67:16:90:64:ca:88:30:
                    e7:1e:f7:4d:62:e4:18:45:4f:f7:e2:fa:a3:66:fd:
                    40:22:5c:19:55:7b:8d:6e:34:9f:8e:05:bb:a7:1c:
                    51:fe:15:c6:c9:ac:9c:0d:6e:73:59:0d:06:08:7c:
                    56:69:57:33:e0:52:43:d4:3e:4b:64:db:61:2d:cd:
                    9a:f6:f4:38:1c:5b:a6:40:44:1a:f9:19:e9:f8:c1:
                    ad:e5:ea:c6:37:2e:ea:4b:49:0a:cd:bd:f2:40:fb:
                    2f:7e:29:6f:b9:f3:62:17:8b:8b:33:68:58:09:cd:
                    98:32:2a:92:fc:fb:22:56:38:10:b4:37:4f:1b:0d:
                    75:43:91:f6:45:48:e7:32:1f:6c:81:69:2c:a8:84:
                    cc:5d:c6:fc:24:51:07:c5:4f:15:19:c5:c2:d7:c9:
                    de:3d:69:e0:6c:a6:aa:29:3c:f3:3a:71:b9:d6:17:
                    d1:d0:bf:bb:f4:16:ae:cc:09:2f:12:99:64:c7:ee:
                    26:82:54:32:56:1b:69:51:97:22:00:d9:05:63:e4:
                    df:09:2c:89:28:6f:c9:e9:21:37:6d:9b:2c:9b:5b:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F0:03:29:1E:45:F7:64:98:50:B7:BF:16:94:93:86:44:FA:9A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:36:22:2c:3a:23:50:35:21:f3:51:b0:a1:26:ca:15:c6:
         b6:6f:69:f1:a4:8d:82:0b:e0:42:09:1c:56:e0:0a:6b:b6:d7:
         c2:69:b1:93:7b:11:6f:72:24:78:f0:86:22:ad:21:85:00:8d:
         d2:ae:53:d0:2a:6e:38:56:6f:b2:3a:13:e4:fb:6d:91:3f:f7:
         66:f5:aa:0e:63:51:15:bc:7d:0d:de:49:92:cd:6c:77:63:7f:
         2a:5d:64:5f:96:81:25:9c:a1:ba:e3:77:1b:09:af:fa:2d:41:
         72:cb:86:dd:45:98:4a:73:46:45:f3:cd:05:1a:c2:64:b6:43:
         ce:cd:e9:22:ca:03:56:74:7b:b9:ba:78:48:27:db:fa:e4:7c:
         4d:2a:03:24:01:5d:4c:cb:f5:ac:aa:6b:32:07:62:3f:01:9a:
         17:2d:b8:da:5a:29:a3:f4:06:5e:7f:5d:19:45:d9:f5:d9:6b:
         26:6c:42:74:b0:be:37:5e:df:ec:53:fc:3f:c5:de:4b:fc:b0:
         94:61:8b:66:1b:69:e1:ad:36:92:4e:d8:7f:af:d9:e5:16:aa:
         8d:66:a4:c2:0c:aa:5e:52:5a:bf:7a:ed:34:97:d8:2a:f8:9b:
         d7:cf:c1:d4:b5:27:e9:17:ce:ef:fb:71:d4:3e:e5:0f:88:7c:
         8b:fc:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----