Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa
File:                     ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa (raw, json)
Hash identifier:          1Hw7heNHU4aPZ20I4Ul5SjW6QT3XAs87TylyJ4zOjho=
Subject key identifier:   8B:47:4E:C1:C1:97:98:AB:72:0C:2A:4A:5E:17:DC:82:D6:2E:4B:01
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849754470132ACCEAD670203450
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396605
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:70:13:2a:cc:ea:d6:70:20:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=a99620c2-e5f3-4038-8c81-b93655cb347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:a1:a3:ce:fb:77:11:ac:f3:cf:06:8c:6d:
                    9a:fc:cd:57:6a:1d:e2:97:19:5a:59:73:98:4c:23:
                    8d:17:32:8a:9e:dc:3f:0c:06:c3:85:30:40:65:94:
                    8b:a6:f6:6f:49:aa:4c:37:b6:e4:cc:d4:9c:1d:f9:
                    13:74:4b:65:ab:ed:e7:f8:75:15:79:96:d3:2e:bf:
                    ce:60:ff:49:67:a4:d4:d1:ab:6e:0d:67:7c:9c:c6:
                    5b:e8:8b:c4:da:0d:ad:43:3d:c4:bd:5a:ba:4d:4c:
                    00:2c:61:e0:01:df:3c:a3:da:d8:f6:47:e5:42:87:
                    34:a0:9e:cb:7f:28:20:65:28:49:2c:62:5b:ae:04:
                    2a:8d:3d:87:e1:f4:f2:2c:48:7d:93:6d:17:6d:31:
                    53:bd:64:dc:97:dc:cd:b0:61:81:93:e1:d6:a7:5f:
                    9c:62:29:d1:fc:b1:db:c9:95:af:53:6f:a8:63:9c:
                    03:e8:4d:8e:85:0a:d1:e1:59:fd:22:17:85:f7:cb:
                    22:c5:ad:7e:74:eb:1f:1d:42:91:0d:2d:06:9c:3f:
                    db:07:a5:04:88:35:8f:2b:07:b6:bf:4b:73:d5:8f:
                    7b:3e:39:e4:8a:a0:73:25:8d:ec:67:56:4c:25:8a:
                    8a:e6:89:03:e7:f4:d4:22:9a:c7:6b:d1:21:3c:11:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:4E:C1:C1:97:98:AB:72:0C:2A:4A:5E:17:DC:82:D6:2E:4B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:2e:c6:53:6b:8d:86:14:96:15:6e:fb:bb:b8:91:9a:5f:
         db:93:3d:b6:d3:49:5d:a3:97:a4:eb:2d:d0:22:fe:d1:41:1a:
         b1:48:d0:0f:ec:39:bf:93:d6:5b:f8:c7:25:f7:45:c0:6b:ad:
         89:fe:d6:c1:6a:e1:58:03:f8:8a:96:0f:c6:8d:c0:c9:8a:b8:
         b7:e1:9c:a9:34:25:b5:0c:71:7a:c1:15:1e:b2:c8:fb:3b:ee:
         8d:99:f3:12:ea:60:c6:55:07:89:98:e6:e5:60:e6:7f:f3:cb:
         74:9b:68:78:ed:d2:b4:d6:a9:d8:62:86:5e:4d:ef:4e:0a:8c:
         59:99:3d:f9:6b:e9:0d:40:1a:83:71:fe:a1:d9:70:6e:3a:ea:
         03:e0:31:7a:67:d3:69:29:4f:38:8b:7e:1f:26:10:52:44:bb:
         8b:4f:5f:64:0d:a8:07:66:8b:5d:93:2e:e1:6b:91:55:f0:60:
         e7:04:f0:a4:36:98:bb:6f:d0:b9:6f:e3:91:be:7a:4a:03:77:
         41:bf:a2:44:44:ab:b2:be:fe:a2:b4:ac:cb:14:e7:8e:8f:21:
         81:bc:36:7b:52:54:2d:18:8c:6c:c4:97:6c:3e:1d:62:9b:4b:
         fd:92:97:3e:f3:97:93:05:9c:a5:eb:5c:66:96:ad:9e:01:c7:
         aa:aa:15:e6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHATKszq1nAgNFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
YTk5NjIwYzItZTVmMy00MDM4LThjODEtYjkzNjU1Y2IzNDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQKho877dxGs888GjG2a/M1Xah3ilxlaWXOY
TCONFzKKntw/DAbDhTBAZZSLpvZvSapMN7bkzNScHfkTdEtlq+3n+HUVeZbTLr/O
YP9JZ6TU0atuDWd8nMZb6IvE2g2tQz3EvVq6TUwALGHgAd88o9rY9kflQoc0oJ7L
fyggZShJLGJbrgQqjT2H4fTyLEh9k20XbTFTvWTcl9zNsGGBk+HWp1+cYinR/LHb
yZWvU2+oY5wD6E2OhQrR4Vn9IheF98sixa1+dOsfHUKRDS0GnD/bB6UEiDWPKwe2
v0tz1Y97PjnkiqBzJY3sZ1ZMJYqK5okD5/TUIprHa9EhPBEljQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFItHTsHBl5ircgwqSl4X3ILWLksBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWQ3ZjI3ZDgtNjUzNi0z
NGU0LWFhODUtZmNhYWRhOWIxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMoy7GU2uNhhSWFW77u7iRml/bkz2200ldo5ek
6y3QIv7RQRqxSNAP7Dm/k9Zb+Mcl90XAa62J/tbBauFYA/iKlg/GjcDJiri34Zyp
NCW1DHF6wRUessj7O+6NmfMS6mDGVQeJmOblYOZ/88t0m2h47dK01qnYYoZeTe9O
CoxZmT35a+kNQBqDcf6h2XBuOuoD4DF6Z9NpKU84i34fJhBSRLuLT19kDagHZotd
ky7ha5FV8GDnBPCkNpi7b9C5b+ORvnpKA3dBv6JERKuyvv6itKzLFOeOjyGBvDZ7
UlQtGIxsxJdsPh1im0v9kpc+85eTBZyl61xmlq2eAceqqhXm
-----END CERTIFICATE-----