Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
File:                     3efc0e54-d79f-3d11-8871-bc00149b77b4.roa (raw, json)
Hash identifier:          xPuc5JA6ULNCiBPXHYTLjMNbvzjdGMyAUGdFpQimhsQ=
Subject key identifier:   FC:1B:BC:1C:E9:94:3E:7B:07:95:3B:84:BE:C1:63:CD:D6:B2:B7:BA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848EF615081E9D067A4B065E128
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:a9::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:50:81:e9:d0:67:a4:b0:65:e1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=71efc0c1-37f2-46f9-8a1a-4207bb1b62ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:0c:55:b9:3b:a3:09:2d:3a:d8:60:57:76:
                    03:91:32:d9:42:eb:dc:a5:6c:1f:07:bb:d4:0b:d7:
                    d3:29:f7:82:dd:84:5f:23:e5:55:10:27:bd:8b:73:
                    5f:7e:1e:e1:a8:65:8e:e8:d6:c1:0c:84:23:ea:a7:
                    a8:78:38:92:1a:73:36:35:c4:48:b0:9c:73:43:4e:
                    a3:c5:16:3e:25:73:16:12:3c:3e:97:95:a5:27:b5:
                    26:c1:e0:57:46:b0:64:3e:f7:a5:8d:59:4f:42:84:
                    b5:63:fc:2d:0e:56:cb:b6:90:a1:ea:6b:e2:17:84:
                    72:83:aa:e2:f5:ef:ae:ea:43:d4:7a:10:73:9b:76:
                    97:e6:a0:c5:08:09:d3:c0:b0:a6:fb:1c:41:2a:11:
                    43:f1:f5:17:a1:7d:33:b5:4e:57:b7:6c:6c:5d:c7:
                    66:d7:1f:0c:3e:6a:c6:3d:35:bd:d1:4a:3b:b4:ae:
                    80:07:3b:5b:a6:0f:3c:6e:7b:1d:da:05:4c:4c:5c:
                    aa:dc:4a:0c:24:dd:33:7f:24:6f:ec:95:38:22:91:
                    39:f3:6e:30:8d:82:2f:86:55:c5:cd:e4:f5:5a:0b:
                    32:4e:13:78:2b:6a:1e:cb:33:6a:6b:24:e0:34:08:
                    3a:04:2f:19:43:e4:e4:c7:ee:90:93:41:fa:72:8b:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1B:BC:1C:E9:94:3E:7B:07:95:3B:84:BE:C1:63:CD:D6:B2:B7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:e2:4e:62:9a:21:55:14:e8:ad:53:3f:ad:c9:95:0b:06:
         07:60:88:9a:ef:c3:65:68:34:fa:fe:95:3c:38:19:a9:6e:a4:
         44:45:4a:2e:9e:5c:8d:f6:37:2b:92:4b:c9:13:05:f0:87:f1:
         57:a1:bb:d6:57:75:dc:c8:b5:7a:15:5b:98:f1:c5:13:ad:90:
         74:bb:3f:52:94:33:72:1a:5e:bc:34:97:ce:13:5e:d4:e2:68:
         45:2d:13:94:7e:a8:d5:db:b4:7f:22:55:90:eb:e3:25:29:53:
         14:9c:b0:55:22:2b:79:7d:55:ba:f6:6e:0e:74:2d:e6:2a:ac:
         8c:0f:bf:3c:35:b9:36:21:1f:8d:c4:cf:10:00:c8:41:0e:f0:
         76:28:57:a8:1f:42:62:ee:3c:88:ba:43:77:14:c2:28:f7:cb:
         3e:58:b4:e5:a6:37:9a:82:76:74:9d:f8:54:7b:1e:c2:67:68:
         56:8f:05:77:19:ed:00:e6:2a:9f:7f:1e:5b:10:e4:97:6b:30:
         f3:a0:cf:59:78:61:bf:36:7c:93:2d:fb:71:bc:d9:a4:dc:da:
         7b:aa:b1:83:0b:e2:65:62:99:50:56:a3:eb:fb:ae:4e:ae:39:
         d9:e9:10:5c:79:ac:91:c3:fd:77:74:eb:b4:1b:94:04:c8:2c:
         8a:5f:f5:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYVCB6dBnpLBl4SgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NzFlZmMwYzEtMzdmMi00NmY5LThhMWEtNDIwN2JiMWI2MmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKYMVbk7owktOthgV3YDkTLZQuvcpWwfB7vU
C9fTKfeC3YRfI+VVECe9i3Nffh7hqGWO6NbBDIQj6qeoeDiSGnM2NcRIsJxzQ06j
xRY+JXMWEjw+l5WlJ7UmweBXRrBkPveljVlPQoS1Y/wtDlbLtpCh6mviF4Ryg6ri
9e+u6kPUehBzm3aX5qDFCAnTwLCm+xxBKhFD8fUXoX0ztU5Xt2xsXcdm1x8MPmrG
PTW90Uo7tK6ABztbpg88bnsd2gVMTFyq3EoMJN0zfyRv7JU4IpE5824wjYIvhlXF
zeT1WgsyThN4K2oeyzNqayTgNAg6BC8ZQ+Tkx+6Qk0H6cosEKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwbvBzplD57B5U7hL7BY83Wsre6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VmYzBlNTQtZDc5Zi0z
ZDExLTg4NzEtYmMwMDE0OWI3N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGnc4k5imiFVFOitUz+tyZULBgdgiJrvw2VoNPr+lTw4GalupERF
Si6eXI32NyuSS8kTBfCH8Vehu9ZXddzItXoVW5jxxROtkHS7P1KUM3IaXrw0l84T
XtTiaEUtE5R+qNXbtH8iVZDr4yUpUxScsFUiK3l9Vbr2bg50LeYqrIwPvzw1uTYh
H43EzxAAyEEO8HYoV6gfQmLuPIi6Q3cUwij3yz5YtOWmN5qCdnSd+FR7HsJnaFaP
BXcZ7QDmKp9/HlsQ5JdrMPOgz1l4Yb82fJMt+3G82aTc2nuqsYML4mVimVBWo+v7
rk6uOdnpEFx5rJHD/Xd067QblATILIpf9Uo=
-----END CERTIFICATE-----