Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa
File:                     b27f9224-f2f6-354b-a909-331d9c0d7145.roa (raw, json)
Hash identifier:          QKIpG/trGipQ/zv46IAAXkiP8+YF2C/UUWD8QVeiawM=
Subject key identifier:   79:4E:1C:E4:3F:54:66:A5:5E:73:20:E6:EA:FC:6D:4A:CF:7F:92:95
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584975446D8BECAAB0912CC2E300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396565
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:6d:8b:ec:aa:b0:91:2c:c2:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=9e3b8abd-2b73-4a1c-94e6-b6831e61ed2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:39:dd:fb:55:ef:eb:2d:d1:5e:47:90:be:
                    ca:42:cf:49:0e:c1:b4:8f:8b:95:ab:f9:91:33:55:
                    b8:25:b0:e9:23:20:b2:ce:5b:c6:38:f6:54:77:58:
                    18:b0:6d:b4:16:d9:a9:1a:b4:80:a9:e0:a7:a4:b0:
                    62:11:cf:89:6a:3a:64:a7:8c:31:55:94:7b:11:f5:
                    e5:d5:24:c7:97:5f:ce:dd:aa:22:8c:48:f4:fd:d1:
                    ba:f2:2d:60:ae:14:e5:a1:5d:18:ec:13:79:e0:11:
                    c7:68:bf:0c:e1:45:8a:62:1b:b6:9e:99:d3:d0:cd:
                    c6:0c:ea:c8:c4:c9:29:31:a7:6c:bf:db:a6:88:3d:
                    6e:51:90:42:6e:06:46:ae:01:04:ea:f2:20:96:74:
                    56:9c:99:92:c4:40:b8:fe:d7:f4:66:e4:9b:58:c9:
                    17:ab:fa:60:44:fb:88:62:1f:ad:6c:02:60:b1:32:
                    2e:c2:5c:ce:6d:29:f9:1d:33:b8:ef:28:0a:6c:1b:
                    6c:55:76:de:7b:82:32:46:89:03:b4:72:18:0c:a8:
                    c1:7f:86:5c:82:3b:b0:c8:92:5d:b8:4e:98:f5:e6:
                    f9:9e:38:52:24:41:85:bd:4d:5a:d0:15:b8:e0:54:
                    c5:ad:8f:c6:4f:68:2c:c4:2d:82:7d:3e:3c:6d:8f:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:1C:E4:3F:54:66:A5:5E:73:20:E6:EA:FC:6D:4A:CF:7F:92:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:76:13:c6:11:75:ac:9d:a4:d9:fc:6b:bf:71:17:21:b3:
         ae:1c:6e:ef:a8:f8:e0:89:47:84:f2:00:2a:9c:8d:26:dc:d0:
         e5:0f:81:00:e5:92:ef:59:d7:02:29:f3:20:1b:fb:78:77:c8:
         fb:f7:11:8b:d6:77:c1:e5:6f:d5:61:30:59:13:ac:ee:28:81:
         2d:dc:32:14:04:48:28:92:4e:85:19:7a:45:a5:b4:8e:a8:0c:
         51:8c:b0:87:de:3b:6f:97:74:dc:e4:a3:72:97:ff:9f:5a:ce:
         08:f9:fa:37:de:25:e5:3b:a9:95:9a:49:e3:94:04:29:94:c8:
         ea:15:3f:7f:f6:08:0d:79:3e:ea:9c:b0:c2:15:d0:7b:4a:cb:
         30:52:63:1b:53:61:f8:db:fe:ac:80:b0:7d:f4:2b:ba:d6:b2:
         5d:7b:db:48:1f:56:81:32:d3:0d:a8:63:9b:f2:96:db:01:84:
         53:cd:37:97:47:9c:35:e5:de:8e:15:bb:cb:84:31:5e:3a:bc:
         1b:23:fa:4a:68:5e:df:59:00:17:b8:19:cf:3d:c9:6c:f9:d1:
         bc:97:f9:06:98:bd:6c:09:44:c4:3f:72:68:20:b5:fe:13:06:
         06:9e:16:63:5d:be:c4:04:af:96:02:6c:c7:fe:ea:45:76:1e:
         43:f0:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----