Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa
File:                     4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa (raw, json)
Hash identifier:          wvT+Dk3ODt23Kn9lK1O2cXqGKfK3DYgfM2HkQ24RBZI=
Subject key identifier:   65:FC:94:15:7F:4D:15:5A:52:41:99:6C:C2:24:D1:3A:CF:9E:D8:62
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858497544716C7CD15F2466FA06E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396580
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:71:6c:7c:d1:5f:24:66:fa:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=38b05db1-82cc-4001-9911-a2ec3a649940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:a6:d6:49:80:0b:4d:74:b8:19:84:50:c8:
                    5e:76:06:5e:cb:45:7e:8e:f4:1c:ed:28:fc:c7:e2:
                    05:16:cf:ed:98:3b:3e:ff:f6:3a:2e:0c:8f:6f:e3:
                    2e:8c:f7:62:69:51:c4:a6:58:2e:f3:82:c4:e2:51:
                    9a:33:b0:63:bd:76:f6:3b:b7:09:08:14:6a:30:8b:
                    a7:50:f5:69:e9:55:c1:9e:4d:4b:25:8a:67:7a:d8:
                    6b:6d:55:fa:f0:13:20:84:4a:52:20:04:dc:4e:1a:
                    cf:c9:c7:4c:bd:6a:77:78:41:17:f8:14:ef:55:44:
                    c9:27:09:22:bc:9d:9a:6c:74:df:c1:16:3c:1d:b0:
                    57:96:c4:f4:e0:1e:a2:90:c0:e7:c3:2f:c9:2a:aa:
                    56:41:1c:c2:6d:6c:96:5f:44:5a:4d:1d:34:1a:1d:
                    72:33:fd:59:78:e5:2f:e3:1a:ef:a5:c6:88:cf:40:
                    55:47:b1:73:cd:f5:3b:fc:4e:98:93:0d:f8:18:39:
                    9f:15:89:4b:80:f9:f5:46:63:f4:fc:03:d4:f4:bd:
                    2f:e3:1f:39:86:75:d5:8d:34:98:74:a9:aa:f6:36:
                    8e:9a:c7:06:ee:9d:8a:5b:4c:f3:d4:ae:0b:f1:b6:
                    b2:bb:ea:1b:37:4b:02:e4:a3:e3:7d:3b:21:4e:97:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:94:15:7F:4D:15:5A:52:41:99:6C:C2:24:D1:3A:CF:9E:D8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:f3:e2:43:34:fc:58:6a:bf:93:cf:8b:9d:5a:0d:7d:3b:
         1d:1a:10:cf:54:40:2a:68:54:29:d6:59:13:ab:2c:85:bf:cf:
         97:ab:79:da:9f:ca:7a:d7:c1:a9:bd:f4:cd:4a:c3:8f:0f:90:
         ef:c4:29:9e:59:cb:09:43:20:9d:8c:41:6e:33:fc:b4:f5:2a:
         99:ea:e3:c0:d2:f0:9c:44:53:95:25:4c:e8:ec:97:95:43:ab:
         0a:b1:6c:51:ce:83:47:d0:8b:be:f9:4a:c4:2b:13:e9:d4:f4:
         fc:11:ac:9a:3f:22:46:ae:1c:59:fc:5b:cb:b4:55:ee:74:ed:
         b0:bf:97:1b:d0:99:97:02:4f:ec:24:d6:13:69:2e:c1:7c:13:
         64:bf:7d:e1:d0:c7:c9:55:30:90:d8:39:ca:3e:b0:f7:b0:02:
         dc:80:83:1e:71:68:37:5f:f4:dc:99:1e:f4:e0:18:6b:97:70:
         93:b8:ee:db:1e:fc:2d:4d:16:f7:26:d3:6e:a9:46:aa:39:86:
         ce:fa:2f:21:c9:b7:31:47:ff:54:ee:3e:d4:c7:7d:b5:e2:1a:
         71:ae:fc:71:b4:af:4e:21:46:01:f4:96:80:28:cf:15:56:5f:
         01:7f:bf:82:46:53:a0:2f:1b:92:3f:bb:a7:3c:37:0b:61:06:
         af:a8:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----