Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa
File:                     6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa (raw, json)
Hash identifier:          wsS34mYBKFG89Vx/XndjGGQ9Vgh6H/nU0kxNXgeM9fU=
Subject key identifier:   0C:3B:86:EC:87:17:E9:86:B1:A0:07:5A:8C:99:F7:A9:08:04:3A:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858490E16D1E355F1D144CC73F4C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:5a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:d1:e3:55:f1:d1:44:cc:73:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=c2be209e-2042-44ff-bd3f-691cd64bf53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:bd:77:fa:bc:0a:7d:84:7f:a9:99:07:32:
                    0e:89:bb:f1:b2:84:62:c5:fd:45:39:09:ca:b7:b5:
                    2f:0d:e0:41:e7:1b:2b:00:5f:28:8b:0d:86:6a:a6:
                    72:f4:5e:97:0e:5d:b5:86:e6:b5:e2:5d:fe:74:8c:
                    8e:e4:43:a3:db:e6:ce:9a:da:eb:82:81:7c:62:e8:
                    14:bf:94:88:1b:6c:dd:3c:95:27:e2:bf:83:77:e4:
                    c2:3f:3e:41:6f:cd:a3:e0:1f:71:7d:ba:fd:e1:5f:
                    cd:4c:aa:ff:9c:af:7f:03:5e:a3:6a:20:43:06:55:
                    f0:f4:c2:a7:d2:38:36:86:af:32:77:ee:15:7d:9f:
                    29:35:20:aa:62:35:f6:9c:c3:cc:7a:c9:21:28:9a:
                    f2:18:ea:8c:3c:cf:ef:fe:56:8f:35:da:8e:16:06:
                    00:3a:c9:da:78:fc:7e:59:2b:67:a4:61:c5:e7:ff:
                    dc:53:e4:dd:9c:a8:2f:83:c5:c0:21:ed:10:e4:30:
                    99:58:25:65:91:e5:5f:be:30:7d:19:b4:d8:51:fa:
                    e0:bf:76:fb:3b:ed:2b:c5:18:8f:1e:e3:ba:0e:b2:
                    fe:30:d1:46:1f:0c:6e:22:d8:3f:49:5e:bf:e4:a7:
                    54:6a:87:79:05:12:da:2a:d1:db:7b:5d:d8:15:20:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:86:EC:87:17:E9:86:B1:A0:07:5A:8C:99:F7:A9:08:04:3A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:5a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:5e:14:cb:20:da:62:8b:ce:45:29:8c:00:2f:9c:51:f3:
         f1:fb:2e:f7:c3:02:2b:51:30:c2:2d:50:8a:f6:2a:bb:4e:88:
         9a:89:dc:c9:b6:7c:56:9f:d9:63:be:64:44:f1:78:a7:a1:41:
         f3:db:39:9c:4f:c0:06:5d:18:4f:f6:ce:aa:b4:4e:83:0f:ff:
         9c:40:28:0c:22:55:e9:ad:9c:cf:d0:f2:79:56:be:d1:7a:e3:
         26:07:f6:c1:53:12:03:41:e0:34:6d:66:39:dd:fa:69:d8:76:
         6b:01:98:e8:20:c8:52:00:8c:f7:a4:4e:e9:a0:7a:a1:7b:28:
         c8:1d:f1:e9:f4:14:90:56:5d:8c:b0:b5:d7:70:59:8e:00:e8:
         d8:d4:50:73:9e:3b:93:ef:6f:4e:48:d5:84:d1:19:cd:c8:ec:
         cd:ea:bc:5c:fc:3b:63:76:3a:ce:08:eb:3f:fb:10:10:dd:53:
         ee:8a:dc:af:45:48:0d:85:73:d2:03:94:75:5a:58:83:4b:9c:
         b7:b6:5c:00:11:45:89:cd:a5:dc:80:d3:c5:6b:0c:2c:b7:4b:
         39:17:43:44:4e:a4:80:63:0e:34:77:30:0f:a4:4a:c0:78:f5:
         6c:fc:47:3f:c9:b3:6a:9d:db:66:38:c8:1d:32:bd:af:71:3d:
         cf:b2:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----