Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa
File:                     e35475da-2649-3c6e-bb91-4a2795a1be68.roa (raw, json)
Hash identifier:          tOp7POUEw3VdFLmk/fkqUmDnIvR0QnY4ZcKrE6IA8qY=
Subject key identifier:   9F:DA:53:B2:96:5D:76:B3:8B:7F:7E:1D:FD:7B:45:5D:3B:16:CC:22
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD8098B07AA82E73F9200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396562
IP address blocks:        2620:74:2a::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d8:09:8b:07:aa:82:e7:3f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=98491b99-d4df-4786-b9a5-9bb460016126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:9e:fb:ad:d9:b5:b2:6e:79:94:90:4f:23:
                    04:26:bd:c8:0d:ff:7c:24:db:1e:c3:b1:69:48:34:
                    ad:3d:ff:4f:db:d0:34:a2:58:e4:87:63:b2:97:07:
                    fe:b7:ee:76:e7:92:de:e3:a9:f1:4b:be:ea:be:5b:
                    c6:96:dc:3c:4f:03:eb:ba:52:e2:ba:68:3d:29:44:
                    e1:57:ca:67:5a:b7:4f:42:69:82:54:a4:d9:b2:63:
                    c1:0e:79:0a:10:f4:d5:2e:7d:13:4c:30:cd:57:d7:
                    74:80:be:ed:7c:7e:82:b5:3d:44:d9:b6:76:c6:2a:
                    3d:ad:77:7e:8b:33:8c:b2:28:15:21:ba:f1:70:d3:
                    3e:4e:d1:23:67:4d:4a:a2:fe:a8:19:29:f2:de:55:
                    e9:19:8d:fc:58:5a:9a:03:19:d6:98:90:51:fa:1a:
                    75:83:c1:f8:af:a6:3c:50:06:1a:cb:41:7f:89:0c:
                    ab:98:89:b9:da:f1:00:6b:10:20:23:d1:26:c6:d6:
                    ea:54:d0:1e:df:be:2d:c0:fb:60:7e:e3:b2:f4:2a:
                    c2:fc:9e:fc:06:ae:a7:35:d0:58:4e:3c:59:1a:99:
                    ef:a5:e6:ac:df:87:02:31:77:af:9f:90:9a:62:68:
                    55:5a:29:b0:5b:4f:6a:d1:94:19:00:be:8f:4d:ad:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:53:B2:96:5D:76:B3:8B:7F:7E:1D:FD:7B:45:5D:3B:16:CC:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:21:fd:12:db:4a:86:79:cf:30:2c:03:73:8c:a9:3d:fe:
         60:53:df:3b:5a:95:51:83:a4:e6:a6:1d:f2:34:c5:91:e3:56:
         13:05:77:9b:44:ba:03:7d:8c:ed:3b:10:70:75:da:92:13:fc:
         fc:75:cc:1b:88:1f:2e:da:79:d3:13:eb:e4:21:bf:4e:16:1b:
         92:77:e9:0f:a6:b5:be:2a:fa:95:95:c9:19:62:6b:8f:7a:04:
         05:79:0f:84:8c:23:ac:1d:5e:b8:1c:6f:8e:e5:f5:08:78:46:
         65:31:80:f0:3f:4b:06:f6:d0:bb:27:af:29:bd:28:c0:be:e0:
         97:cc:f5:6b:6a:ea:4a:0e:49:8f:a1:0e:22:3e:58:50:a0:07:
         cf:f4:58:dc:43:20:0e:ca:c6:4d:7a:38:c2:f6:70:fb:2d:17:
         fc:d6:3e:e3:13:ef:01:c4:5d:eb:18:db:96:ef:e8:ba:24:10:
         e3:a1:59:84:5c:2b:d7:0d:78:63:5f:89:e8:b3:ca:64:59:a7:
         05:ef:10:52:35:8b:90:b2:55:65:b8:ed:b2:22:57:fc:d6:80:
         c5:a0:66:56:2d:6a:f2:26:62:97:e9:60:60:92:9e:97:48:29:
         da:3e:23:ba:76:c2:9b:3a:56:50:d4:52:ab:62:5b:2a:e2:1a:
         4c:91:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----