Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
File:                     0324a99b-635c-375e-af56-954f8fd6c9c6.roa (raw, json)
Hash identifier:          NrOHF/cYZ6bo8Gwl3VKIqEw/WrBDfsH+jDWG9RbZ0LU=
Subject key identifier:   69:B4:B3:46:AF:D1:A2:86:C2:6D:F6:57:DD:38:C2:24:12:CC:E1:EB
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F4328584953C44BA66F4D4AB83C3C6660
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     62467
IP address blocks:        2602:fc05:ff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4b:a6:6f:4d:4a:b8:3c:3c:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=5190e66d-ce72-46ae-8808-5fc96132f0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:79:0a:b4:15:d3:e3:25:09:39:1d:f4:ae:
                    40:99:fb:42:2b:68:49:8f:45:e4:ff:b9:ba:7f:c6:
                    88:ae:88:ce:33:b2:20:f8:f6:a6:22:0a:5c:a5:a3:
                    aa:60:2e:59:5a:0d:7c:78:d7:4f:8a:df:78:0f:23:
                    7b:ea:02:bc:df:10:74:a5:60:b8:fc:57:a5:fb:f5:
                    0d:57:1f:73:8c:a4:f0:17:43:6c:00:2d:90:e9:67:
                    5a:38:f6:d0:19:9e:b1:9d:35:2a:f5:f8:18:7f:ee:
                    d9:4f:59:83:f8:bb:1c:66:ed:88:3b:66:a5:87:a7:
                    32:cb:c8:c5:a7:ba:d6:e0:8d:83:72:ca:90:4d:5a:
                    e8:e9:d1:53:4d:5e:98:71:da:36:44:85:50:9d:98:
                    20:33:77:d9:de:ff:cb:12:8b:1a:a9:ce:6a:33:f9:
                    a4:88:29:8b:2f:ed:c8:35:f5:03:53:03:35:93:6b:
                    1c:66:87:31:3c:40:4b:d6:54:fe:4b:dd:e7:d7:50:
                    73:40:64:46:db:8e:68:5d:19:c4:a8:eb:86:4d:ee:
                    43:73:3d:2a:a4:3b:3b:78:c5:55:51:ee:87:90:c2:
                    5a:81:3b:6d:b5:1c:21:ca:ba:a5:8a:2a:1a:06:c8:
                    18:ca:42:99:b4:56:94:c4:2d:1e:b4:2c:ce:37:49:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:B3:46:AF:D1:A2:86:C2:6D:F6:57:DD:38:C2:24:12:CC:E1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc05:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:78:4f:95:07:41:ce:06:48:6c:93:7e:04:cd:91:e1:14:e6:
         69:ed:4f:11:7d:24:54:c8:6d:bf:70:3b:80:c1:4f:25:da:45:
         3f:e7:c3:43:37:46:3f:80:0c:fc:94:fc:5c:2b:36:85:02:0a:
         af:29:af:16:94:71:4f:97:94:c9:31:72:da:78:d4:73:aa:4c:
         75:1d:ae:83:f5:e1:d3:e4:04:af:68:65:f4:c6:1a:02:0a:64:
         eb:21:c4:88:23:f6:fc:b7:b0:02:6f:bf:a5:17:ea:2c:44:41:
         b6:2e:9c:c9:6b:e1:0e:a3:2d:0e:71:a5:5b:84:18:4b:be:09:
         9c:c1:e2:c3:9c:96:bb:e5:ef:06:42:ac:aa:c3:2c:8f:8b:c7:
         c9:e9:8b:42:92:95:56:2f:65:aa:b5:52:82:39:64:46:cc:75:
         77:f8:77:79:9a:76:49:42:20:c8:f8:ee:d9:d1:54:cc:2c:a4:
         bc:5a:a3:88:70:16:61:ae:3d:32:ff:6d:6d:7b:a0:46:03:1a:
         bf:b8:4f:1d:cb:bb:a9:c6:34:2f:4b:08:e6:e0:ba:c0:3c:8d:
         7b:bb:91:4e:b3:8a:3f:14:f0:e1:f9:87:dc:c4:23:3d:5a:18:
         cf:eb:d4:e5:33:4b:07:16:f4:b0:38:5d:55:db:7f:b8:11:5a:
         63:0b:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----