Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2ed52aa-4349-300f-a233-2024e2102c52.roa
File:                     a2ed52aa-4349-300f-a233-2024e2102c52.roa (raw, json)
Hash identifier:          nNKX1LckaX4ilAji61heeHbfPxpy/v7OMAHFhYjVvYI=
Subject key identifier:   F4:A6:3D:AA:B6:0F:F5:B6:43:21:41:0B:80:54:96:AD:20:F7:E7:A8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD868F20817BD935B0380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2ed52aa-4349-300f-a233-2024e2102c52.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396572
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d8:68:f2:08:17:bd:93:5b:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=c497dd1a-f75c-4d20-adb8-08a083f567c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:53:09:a6:69:7e:1f:ea:df:a1:6b:ab:f5:
                    55:e1:d3:3a:e7:ad:8e:c4:25:c5:e3:fa:21:0d:0c:
                    e8:43:39:45:d9:ff:ae:aa:5f:98:c0:b5:bd:e9:f5:
                    8c:ff:4d:05:0b:34:f5:80:7f:b0:05:c5:46:f8:b6:
                    b1:42:72:33:37:ea:f7:a6:82:b9:25:5a:0e:00:a0:
                    9a:13:6f:c3:1a:5a:54:cc:83:aa:6a:61:84:0d:47:
                    ef:14:08:07:2a:54:86:aa:87:8a:9d:b7:4b:78:01:
                    fe:61:2a:38:75:db:77:13:23:79:92:2a:33:a8:40:
                    8e:73:00:68:06:2d:1c:d8:55:8b:49:4f:a5:c4:1b:
                    5b:b3:4b:1a:bf:0c:42:d0:19:fa:45:9f:93:95:37:
                    23:aa:96:fe:91:d0:41:3e:9a:9f:4d:34:0a:28:3b:
                    d7:58:ba:f7:9d:9c:94:e3:65:ba:f4:2d:85:bf:c3:
                    cc:56:3f:57:5d:b3:67:94:86:9c:2b:9f:ea:f3:1a:
                    ac:f7:ec:1c:8b:c1:df:75:f9:e8:9b:95:90:0b:ce:
                    81:9c:d3:bf:5a:e5:3e:4b:14:da:3e:c5:73:b3:2b:
                    6f:f2:b6:d9:2c:ac:93:fd:71:61:af:fe:d0:5d:d9:
                    80:23:b1:80:e4:17:9c:8e:7d:d6:f0:a5:7f:5e:b1:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:3D:AA:B6:0F:F5:B6:43:21:41:0B:80:54:96:AD:20:F7:E7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2ed52aa-4349-300f-a233-2024e2102c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:61:c8:62:f6:25:55:a9:49:5b:a9:da:08:a2:ca:4d:28:
         d1:68:0f:c8:af:7c:1f:13:35:31:0f:92:f8:52:1d:a1:0e:4d:
         a0:0f:ee:e6:39:06:1c:0c:56:11:db:88:7b:c3:05:f2:36:fc:
         ad:ab:86:91:97:98:91:03:c1:b9:47:f3:9b:9f:6e:a1:5c:71:
         9d:80:5a:ee:29:51:77:70:22:bd:35:b4:83:ce:d4:6e:ea:48:
         4e:92:06:3f:0a:16:11:71:36:48:3c:90:77:b1:86:2b:e2:65:
         b3:61:b6:9a:0e:76:83:c3:b7:2e:c1:d6:2c:06:d3:50:01:46:
         46:1d:93:7f:40:e2:e2:4e:d3:c2:92:d8:cc:76:e3:4f:8c:b5:
         ea:82:8e:fe:6e:ea:c7:38:35:fa:1f:1d:8b:84:19:7a:53:d8:
         23:5f:06:39:1c:fa:d6:46:0f:fe:c4:8d:bc:f0:d8:98:fd:d8:
         de:f3:13:99:62:c9:9d:08:f9:3c:57:53:4e:be:53:63:37:d3:
         66:8e:f5:db:6e:bb:3e:01:f9:39:ad:ce:b2:fd:42:19:8e:5d:
         35:c6:51:9f:d1:ba:2f:0e:8e:5f:1c:d0:12:da:5f:1e:19:35:
         56:9c:85:2d:17:1b:df:14:51:eb:a1:8f:5d:33:df:05:51:4e:
         fc:76:8e:95
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9ho8ggXvZNbA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YzQ5N2RkMWEtZjc1Yy00ZDIwLWFkYjgtMDhhMDgzZjU2N2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzNTCaZpfh/q36Frq/VV4dM6562OxCXF4/oh
DQzoQzlF2f+uql+YwLW96fWM/00FCzT1gH+wBcVG+LaxQnIzN+r3poK5JVoOAKCa
E2/DGlpUzIOqamGEDUfvFAgHKlSGqoeKnbdLeAH+YSo4ddt3EyN5kiozqECOcwBo
Bi0c2FWLSU+lxBtbs0savwxC0Bn6RZ+TlTcjqpb+kdBBPpqfTTQKKDvXWLr3nZyU
42W69C2Fv8PMVj9XXbNnlIacK5/q8xqs9+wci8Hfdfnom5WQC86BnNO/WuU+SxTa
PsVzsytv8rbZLKyT/XFhr/7QXdmAI7GA5Becjn3W8KV/XrF6hQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPSmPaq2D/W2QyFBC4BUlq0g9+eoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJlZDUyYWEtNDM0OS0z
MDBmLWEyMzMtMjAyNGUyMTAyYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/pGHIYvYlValJW6naCKLKTSjRaA/Ir3wfEzUx
D5L4Uh2hDk2gD+7mOQYcDFYR24h7wwXyNvytq4aRl5iRA8G5R/Obn26hXHGdgFru
KVF3cCK9NbSDztRu6khOkgY/ChYRcTZIPJB3sYYr4mWzYbaaDnaDw7cuwdYsBtNQ
AUZGHZN/QOLiTtPCktjMduNPjLXqgo7+burHODX6Hx2LhBl6U9gjXwY5HPrWRg/+
xI288NiY/dje8xOZYsmdCPk8V1NOvlNjN9NmjvXbbrs+Afk5rc6y/UIZjl01xlGf
0bovDo5fHNAS2l8eGTVWnIUtFxvfFFHroY9dM98FUU78do6V
-----END CERTIFICATE-----