Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa
File:                     dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa (raw, json)
Hash identifier:          AA2jG44MmixNRO65w0yH0khfTu71H9ei6mp4PjpPC88=
Subject key identifier:   09:A7:F8:E5:49:9A:C9:48:B7:39:74:E2:A9:A3:C0:E0:49:87:1E:F1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BDC1F3CCBA62F5A455B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396616
IP address blocks:        2620:74:2a::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:dc:1f:3c:cb:a6:2f:5a:45:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=d0f5cd24-b45e-4849-b8e9-27f3232c4b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:cd:4b:b4:cb:b4:ed:ae:d9:7a:69:e8:69:
                    e0:9c:c9:e4:3e:24:c6:51:8d:5e:4e:2d:9f:c0:73:
                    5d:fe:44:3e:96:e7:60:61:c2:0e:dc:8d:e3:4c:7c:
                    78:88:91:23:b7:56:b0:a7:71:79:3a:bc:32:e5:2e:
                    82:87:84:c2:6f:c3:ec:d9:b5:c6:d2:b2:d7:60:7d:
                    f6:52:e6:bf:e1:c2:ec:8d:37:cc:f6:09:28:5e:f4:
                    c6:df:d3:4c:07:af:53:80:93:ef:53:84:26:cb:99:
                    97:f9:2f:8e:31:89:38:5a:c6:d4:39:76:39:ba:0a:
                    78:f4:22:fc:0a:61:28:cb:cf:ae:40:12:88:c0:c6:
                    d4:56:97:b1:20:e9:2d:85:48:ae:cb:91:84:a7:e5:
                    cd:f7:90:41:f4:94:87:ab:c2:91:e9:83:a9:c6:49:
                    ae:33:f0:ba:22:7d:24:10:11:d9:11:8c:10:42:76:
                    76:a4:ac:c4:cc:01:89:80:22:f1:df:2e:02:d7:de:
                    01:86:ed:9c:e1:26:d8:18:18:08:ff:bb:db:cc:95:
                    22:49:8b:8b:9c:dd:63:8c:0f:8a:b8:b3:8d:b1:7c:
                    c2:23:f9:55:22:1f:ac:0d:e5:13:b5:be:f8:ed:a0:
                    6f:19:93:a0:fe:4e:f9:a2:9e:9b:20:29:f3:31:9b:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A7:F8:E5:49:9A:C9:48:B7:39:74:E2:A9:A3:C0:E0:49:87:1E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:82:31:a1:0e:fb:52:6a:e7:b7:a7:1f:63:06:3b:94:7c:ec:
         84:21:3c:b1:00:a2:dd:ab:f8:4e:ee:61:7f:45:92:70:d1:05:
         ee:5b:e9:41:f0:12:56:68:23:f7:f8:f2:63:8e:05:2f:cf:35:
         25:b9:58:ae:66:12:d7:3c:6f:78:ce:55:7a:63:62:4d:cf:48:
         a1:6a:a3:2b:5c:31:55:ec:74:58:d1:b0:7d:02:0a:a0:a9:12:
         69:9a:b4:01:f9:9e:5e:cd:d0:a7:40:08:f1:e3:08:b3:bb:16:
         9d:db:5e:f5:64:b8:97:3d:2d:21:ba:81:fc:2d:79:3f:68:ac:
         e2:2f:de:1b:9d:ae:e5:4e:ba:a0:30:3c:38:7b:e0:da:11:12:
         fe:0b:9e:32:66:7c:8f:e8:78:02:fe:39:bd:99:5a:51:55:10:
         a0:12:e9:59:15:39:47:ca:de:0d:ee:a2:b4:a8:04:0c:a1:44:
         de:27:20:8b:d6:c2:54:ab:fe:d7:81:bf:88:58:6c:f3:30:9a:
         4c:c3:40:30:a8:f8:8f:e8:ee:78:df:e3:d9:94:03:67:44:c2:
         8d:30:4a:7a:5d:f5:e7:f0:53:db:4e:b6:28:31:2b:f9:97:1b:
         ac:d5:bc:47:12:0a:4e:53:be:df:57:67:e1:57:1d:3e:02:df:
         a8:27:92:07
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9wfPMumL1pFW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDBmNWNkMjQtYjQ1ZS00ODQ5LWI4ZTktMjdmMzIzMmM0YjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVTNS7TLtO2u2Xpp6GngnMnkPiTGUY1eTi2f
wHNd/kQ+ludgYcIO3I3jTHx4iJEjt1awp3F5Orwy5S6Ch4TCb8Ps2bXG0rLXYH32
Uua/4cLsjTfM9gkoXvTG39NMB69TgJPvU4Qmy5mX+S+OMYk4WsbUOXY5ugp49CL8
CmEoy8+uQBKIwMbUVpexIOkthUiuy5GEp+XN95BB9JSHq8KR6YOpxkmuM/C6In0k
EBHZEYwQQnZ2pKzEzAGJgCLx3y4C194Bhu2c4SbYGBgI/7vbzJUiSYuLnN1jjA+K
uLONsXzCI/lVIh+sDeUTtb747aBvGZOg/k75op6bICnzMZvBmQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAmn+OVJmslItzl04qmjwOBJhx7xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGM4ZWFmMWEtYWU3MC0z
Zjg4LTgyOTctMWIzMWM2YmY0ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCFgjGhDvtSaue3px9jBjuUfOyEITyxAKLdq/hO
7mF/RZJw0QXuW+lB8BJWaCP3+PJjjgUvzzUluViuZhLXPG94zlV6Y2JNz0ihaqMr
XDFV7HRY0bB9AgqgqRJpmrQB+Z5ezdCnQAjx4wizuxad2171ZLiXPS0huoH8LXk/
aKziL94bna7lTrqgMDw4e+DaERL+C54yZnyP6HgC/jm9mVpRVRCgEulZFTlHyt4N
7qK0qAQMoUTeJyCL1sJUq/7Xgb+IWGzzMJpMw0AwqPiP6O543+PZlANnRMKNMEp6
XfXn8FPbTrYoMSv5lxus1bxHEgpOU77fV2fhVx0+At+oJ5IH
-----END CERTIFICATE-----