Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa
File:                     e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa (raw, json)
Hash identifier:          5pBFPZp8nfCk4FQWMB6sNBnPT0eWyl5d1J9IRrxB9BQ=
Subject key identifier:   5C:70:79:BE:9F:9B:80:8A:31:7E:7B:C3:85:80:B7:BA:4A:7A:D4:71
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A5F65385D0A064AE7CC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     397197
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a5:f6:53:85:d0:a0:64:ae:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=f8385d2f-55fe-4f0b-b588-5093f2f1bd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:a4:d3:aa:7e:12:e4:7b:3d:8c:37:a9:24:
                    6f:65:d0:d2:3b:56:91:8e:f5:74:37:2f:30:81:f2:
                    27:a3:58:9b:09:8a:0b:7f:fb:d0:ec:64:53:e7:20:
                    f6:9f:78:52:90:8a:01:2f:80:b5:38:54:70:c1:26:
                    dc:83:35:11:c5:2b:1b:53:6a:d0:77:b3:11:be:6c:
                    74:86:1d:f1:ed:12:58:06:48:f4:4a:1e:0f:23:f2:
                    2d:ce:69:95:27:96:a4:45:a3:14:31:80:25:c3:2f:
                    9e:44:af:41:fb:c5:76:ae:74:73:70:eb:a4:3b:f6:
                    08:98:60:3b:8a:d9:0f:21:dd:fc:00:4e:b9:ca:13:
                    bd:9d:9c:a2:02:fa:bb:63:e7:f1:07:a3:cd:a6:0c:
                    39:2a:4a:11:f2:e3:b6:0c:5e:bc:b5:ae:d9:f2:db:
                    da:41:3f:48:1f:ce:d3:38:66:8c:3f:d6:b2:2d:eb:
                    c9:46:f5:4d:71:bf:1e:af:f0:6e:e3:e9:c3:54:d9:
                    ed:6f:26:78:0d:14:49:12:91:e5:d9:a5:9f:dc:36:
                    d4:5d:23:d5:77:53:8f:fe:d3:79:d8:49:54:ff:03:
                    8d:ee:a0:71:0c:c5:0c:45:8d:27:5b:a1:e6:ab:41:
                    a4:0f:ab:0b:89:4f:9c:c9:e9:97:62:4c:c8:80:7a:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:70:79:BE:9F:9B:80:8A:31:7E:7B:C3:85:80:B7:BA:4A:7A:D4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:32:66:71:54:0d:95:35:88:53:85:98:e6:09:df:ad:a2:
         83:e7:b0:54:69:16:f5:06:f4:a8:7a:c6:e3:61:6b:f1:6f:12:
         f3:08:5c:86:3f:ed:b1:47:6f:ff:da:13:62:56:2a:e2:c7:51:
         c9:80:ed:6f:40:7c:d1:c8:19:75:54:c5:b9:ff:44:82:a6:d8:
         a3:75:2f:fd:2e:74:1f:ef:26:c3:c7:c8:e2:26:4d:c9:8a:73:
         4d:8b:56:42:f4:ac:e2:db:d8:77:38:58:dc:26:98:b7:17:8d:
         4e:ce:23:cc:02:7c:d6:92:e7:64:a7:d7:ea:fd:1c:93:27:e4:
         4d:b3:5c:bc:c1:4f:fd:91:95:40:76:89:e1:7e:c3:72:c0:cd:
         96:6b:c9:0d:02:95:50:d3:df:58:49:90:af:4c:55:8d:75:fb:
         1b:2a:de:2c:fb:49:f6:bb:db:34:74:18:cf:ee:a1:a0:d0:67:
         a0:5d:01:6a:90:95:68:4d:3f:f2:e0:b5:a9:ce:33:db:67:fc:
         03:1b:99:1a:15:af:b5:2b:fd:9a:78:33:43:37:4e:23:4c:d5:
         a3:da:05:b0:9d:c9:d8:ba:8f:3b:35:3d:86:23:96:88:da:9f:
         7d:01:2c:be:87:8c:dc:8b:12:1a:44:f2:9c:00:3a:c8:e8:49:
         fe:30:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----