Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
File:                     eda59871-a0dc-3ed0-824a-0ce4665f8984.roa (raw, json)
Hash identifier:          UDgyLPEzJTnzIxTeXvh8iQ1ePU24i8n/UmRfVf1h6MA=
Subject key identifier:   D2:7E:A4:F2:51:F6:0D:C4:75:4E:17:A5:C1:93:16:2A:B0:F2:09:AC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858494CC94C1A740AD6602B94F900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     0
IP address blocks:        2620:74:36::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4c:1a:74:0a:d6:60:2b:94:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=58d56973-19a7-4cb9-a3d7-94520f033d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:04:b2:72:1a:13:19:8d:82:2f:d6:e8:d1:
                    cb:cc:60:07:f7:4c:7e:36:d4:8c:b6:01:ac:bb:09:
                    d2:bd:6c:4d:ce:e3:5f:3c:cf:93:c4:94:c3:59:6a:
                    16:97:f0:0f:8a:a2:21:95:4a:af:75:07:93:52:9e:
                    50:85:49:6d:a0:29:c6:32:1f:83:b5:a9:ac:b1:91:
                    2c:42:09:76:ce:1a:87:44:ee:10:c4:61:f9:53:7e:
                    b6:14:45:ff:a6:03:1b:5e:38:68:b4:5d:f0:be:37:
                    f1:02:28:5c:f0:b9:1c:bf:cf:c9:59:69:38:93:e4:
                    ae:4f:1e:9d:ff:4f:74:f2:e6:4e:4d:c8:ba:15:86:
                    5c:88:67:77:f7:98:91:5a:41:a0:cd:61:57:37:fc:
                    fd:41:1e:78:68:fb:6b:3c:91:74:1e:6a:5e:70:07:
                    b0:3d:05:af:6b:55:4a:96:eb:2d:97:d4:b1:f1:aa:
                    0d:24:fc:40:00:4e:36:ab:a2:17:a0:5a:c8:b9:97:
                    2b:c3:13:70:d8:67:c3:99:3a:e7:d8:7c:4d:06:ec:
                    16:9b:9b:81:07:e0:57:8f:a9:46:d4:92:bb:94:15:
                    d3:17:54:94:3f:37:7a:42:8d:77:96:91:d3:bd:88:
                    dd:9e:07:76:d2:5f:62:95:b2:b6:1a:6f:f4:c6:54:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7E:A4:F2:51:F6:0D:C4:75:4E:17:A5:C1:93:16:2A:B0:F2:09:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:36::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:e6:aa:70:99:38:32:80:0f:cb:3f:7f:af:4c:b3:b7:cd:
         48:43:98:84:34:cb:ce:11:c3:45:48:d7:85:81:41:60:35:11:
         ff:20:ec:39:e7:2a:ba:88:89:a7:fe:fc:1c:14:f4:fe:0c:99:
         a7:1c:59:b9:22:19:38:e0:0d:55:ee:2f:3d:56:68:50:b0:a1:
         2b:f2:f0:41:fe:3b:4c:5f:65:1d:f0:ed:c2:d1:44:7b:bf:42:
         13:25:d1:9e:ff:ec:27:e5:92:de:5e:cf:a5:3d:eb:42:9f:89:
         01:1a:da:4f:4e:2a:3d:ae:75:58:bc:da:82:f9:81:8f:20:a4:
         05:d9:6b:7f:b6:04:91:26:63:a3:02:64:6c:8e:a9:ed:6a:88:
         2d:9b:8d:1f:b7:78:cf:c9:c5:98:a8:c6:42:a3:79:40:8a:e0:
         73:de:dd:1d:c2:a2:5e:14:99:6e:76:6d:90:bd:68:dc:de:58:
         15:3d:ab:14:a8:eb:72:78:96:75:c1:31:25:b7:f9:da:c0:2f:
         31:ed:16:81:9d:a2:42:a1:c5:a4:e7:dc:6e:23:7d:6f:24:d7:
         57:82:fb:37:51:2f:21:c8:b0:7c:0a:7c:d2:7c:02:72:96:b7:
         e9:0e:13:57:7a:2f:9b:80:98:84:0e:17:02:ef:65:bc:cb:58:
         75:c8:f2:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUwadArWYCuU+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NThkNTY5NzMtMTlhNy00Y2I5LWEzZDctOTQ1MjBmMDMzZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+MEsnIaExmNgi/W6NHLzGAH90x+NtSMtgGs
uwnSvWxNzuNfPM+TxJTDWWoWl/APiqIhlUqvdQeTUp5QhUltoCnGMh+DtamssZEs
Qgl2zhqHRO4QxGH5U362FEX/pgMbXjhotF3wvjfxAihc8Lkcv8/JWWk4k+SuTx6d
/0908uZOTci6FYZciGd395iRWkGgzWFXN/z9QR54aPtrPJF0HmpecAewPQWva1VK
lustl9Sx8aoNJPxAAE42q6IXoFrIuZcrwxNw2GfDmTrn2HxNBuwWm5uBB+BXj6lG
1JK7lBXTF1SUPzd6Qo13lpHTvYjdngd20l9ilbK2Gm/0xlSEHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNJ+pPJR9g3EdU4XpcGTFiqw8gmsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWRhNTk4NzEtYTBkYy0z
ZWQwLTgyNGEtMGNlNDY2NWY4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG5E5qpwmTgygA/LP3+vTLO3zUhDmIQ0y84Rw0VI14WBQWA1Ef8g
7DnnKrqIiaf+/BwU9P4MmaccWbkiGTjgDVXuLz1WaFCwoSvy8EH+O0xfZR3w7cLR
RHu/QhMl0Z7/7Cflkt5ez6U960KfiQEa2k9OKj2udVi82oL5gY8gpAXZa3+2BJEm
Y6MCZGyOqe1qiC2bjR+3eM/JxZioxkKjeUCK4HPe3R3Col4UmW52bZC9aNzeWBU9
qxSo63J4lnXBMSW3+drALzHtFoGdokKhxaTn3G4jfW8k11eC+zdRLyHIsHwKfNJ8
AnKWt+kOE1d6L5uAmIQOFwLvZbzLWHXI8qk=
-----END CERTIFICATE-----