Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa
File:                     506338e6-772c-35cd-b900-3dca729580cf.roa (raw, json)
Hash identifier:          Fte+7f5D2txKCBsuLIixK2TreasRHKOPU2zI6/b3OXM=
Subject key identifier:   79:0E:D2:5B:61:29:F0:60:F0:0C:6B:50:92:6E:32:FD:58:57:18:1E
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858490881751DA94EB30742558B24
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     61317
IP address blocks:        2604:4500:1c::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:75:1d:a9:4e:b3:07:42:55:8b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=b841a268-7e49-43d1-bb87-8082965b5721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:a2:33:84:d9:11:75:7e:02:f8:5b:72:70:
                    56:52:59:38:d5:6e:70:2b:de:56:8c:f7:66:22:93:
                    e4:cd:fc:d9:68:e7:9c:2f:91:fb:83:6f:a4:00:b2:
                    83:af:68:0e:8f:e2:e5:23:ac:09:29:20:c2:6f:67:
                    63:57:e6:8c:45:43:8c:c5:03:bf:0a:f2:44:72:c2:
                    a9:9d:77:4d:c6:b6:c4:db:f9:29:5f:d7:01:f2:fd:
                    aa:b8:5c:ab:95:a2:2c:b6:35:2e:8d:91:e8:41:f5:
                    9c:cd:bc:87:11:66:a7:85:fe:ac:c9:d0:c9:59:26:
                    3c:e0:aa:89:84:41:b8:53:10:dd:f2:77:ab:8d:3b:
                    ac:f5:0d:82:68:93:41:55:10:dc:8e:14:11:ed:2a:
                    e4:c7:64:52:58:2e:f2:55:b6:d7:fc:8a:32:1e:2f:
                    df:89:06:72:1a:ad:06:8d:d2:8e:f1:16:d3:16:2d:
                    2d:8f:1b:31:d0:1d:16:8d:0a:86:87:04:a8:e8:c6:
                    df:88:27:fe:42:5b:0a:74:bb:51:2a:7f:4d:6e:9d:
                    b7:ea:fa:ad:7b:3b:db:31:c9:fe:14:e3:a4:53:48:
                    03:68:c5:65:ba:6d:55:1d:5d:97:e6:49:2b:71:71:
                    44:72:1e:31:02:7c:79:66:a5:44:d1:16:c0:83:ca:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:D2:5B:61:29:F0:60:F0:0C:6B:50:92:6E:32:FD:58:57:18:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:91:d0:f8:dd:84:9a:7f:b3:0b:03:2e:ce:9e:f0:f2:60:75:
         09:64:ba:01:5c:35:73:62:50:21:b2:da:35:46:f4:0d:3d:55:
         96:3a:f4:45:1b:54:55:39:04:3a:37:98:ac:b9:aa:1c:3f:ce:
         dc:f9:e8:c0:1d:2a:e3:1b:f2:65:d1:d3:7f:5d:b4:71:1b:b9:
         48:b7:66:63:b6:12:2b:36:fb:41:f2:58:d2:02:b5:3a:e4:f2:
         da:da:76:6a:be:48:84:8e:9e:43:63:fc:65:85:8c:cd:0a:1c:
         ff:18:e3:a9:89:20:b6:99:d5:fb:e7:f5:00:ac:b0:53:1d:04:
         40:a3:9e:4f:3b:cf:18:10:f9:54:e5:46:64:38:4f:ed:ab:df:
         9a:08:76:5c:d6:47:75:ca:78:71:63:1b:b7:0c:91:1a:be:a8:
         03:55:d3:f1:b8:ad:d3:83:f7:45:8e:8c:07:9f:29:93:fb:dc:
         f1:94:4f:a4:58:d5:e4:92:02:7e:c6:a1:5e:9a:f2:70:2c:0a:
         49:6f:79:a3:fb:8a:d8:eb:33:be:e2:e0:6d:16:46:12:ee:60:
         79:3d:26:f6:1a:4b:1c:d4:26:c0:c4:5d:64:30:a7:e7:04:b8:
         fc:0b:25:c3:2a:e2:31:72:f4:eb:39:3d:3d:93:59:ba:e3:9f:
         58:22:29:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgXUdqU6zB0JViyQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
Yjg0MWEyNjgtN2U0OS00M2QxLWJiODctODA4Mjk2NWI1NzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF6iM4TZEXV+AvhbcnBWUlk41W5wK95WjPdm
IpPkzfzZaOecL5H7g2+kALKDr2gOj+LlI6wJKSDCb2djV+aMRUOMxQO/CvJEcsKp
nXdNxrbE2/kpX9cB8v2quFyrlaIstjUujZHoQfWczbyHEWanhf6sydDJWSY84KqJ
hEG4UxDd8nerjTus9Q2CaJNBVRDcjhQR7Srkx2RSWC7yVbbX/IoyHi/fiQZyGq0G
jdKO8RbTFi0tjxsx0B0WjQqGhwSo6MbfiCf+QlsKdLtRKn9Nbp236vqtezvbMcn+
FOOkU0gDaMVlum1VHV2X5kkrcXFEch4xAnx5ZqVE0RbAg8paxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHkO0lthKfBg8AxrUJJuMv1YVxgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTA2MzM4ZTYtNzcyYy0z
NWNkLWI5MDAtM2RjYTcyOTU4MGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACOR0PjdhJp/swsDLs6e8PJgdQlkugFcNXNiUCGy2jVG9A09VZY6
9EUbVFU5BDo3mKy5qhw/ztz56MAdKuMb8mXR039dtHEbuUi3ZmO2Eis2+0HyWNIC
tTrk8tradmq+SISOnkNj/GWFjM0KHP8Y46mJILaZ1fvn9QCssFMdBECjnk87zxgQ
+VTlRmQ4T+2r35oIdlzWR3XKeHFjG7cMkRq+qANV0/G4rdOD90WOjAefKZP73PGU
T6RY1eSSAn7GoV6a8nAsCklveaP7itjrM77i4G0WRhLuYHk9JvYaSxzUJsDEXWQw
p+cEuPwLJcMq4jFy9Os5PT2TWbrjn1giKXY=
-----END CERTIFICATE-----