Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6bed32ee-2a45-3971-ae3b-818809e849f8.roa
File:                     6bed32ee-2a45-3971-ae3b-818809e849f8.roa (raw, json)
Hash identifier:          RQf3ifvU3kJgpSQZOTX4nkD9U53LKN09yZ+CJKHUOnI=
Subject key identifier:   0C:D3:66:CB:9B:39:DD:68:33:1E:98:34:35:F1:C5:5B:3E:7F:5F:C6
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285849287E6B68D76F6A3BC3238F34
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6bed32ee-2a45-3971-ae3b-818809e849f8.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        64.113.10.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6b:68:d7:6f:6a:3b:c3:23:8f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=80c0f636-c41c-4440-8d1a-ff97ae07cfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:00:8b:9b:6f:78:9f:4b:97:00:ac:4e:f0:
                    b6:19:39:6e:26:c4:70:b7:a9:67:2b:c9:1e:57:ef:
                    c8:2f:6a:fa:c9:6c:92:36:47:3e:aa:18:2d:1b:7a:
                    77:4f:df:6c:80:bc:0a:bf:8d:04:59:31:6e:ae:ba:
                    02:1f:00:ae:dd:c6:cb:6a:58:94:25:53:5f:f6:fd:
                    e2:7f:18:ba:55:0d:d8:30:48:fe:82:5a:cf:7b:88:
                    45:4b:a7:65:2b:a1:0f:47:fc:a8:d7:16:09:8d:63:
                    5e:0f:7b:43:af:ac:68:ca:9b:35:90:b6:be:36:7b:
                    9a:5a:1a:14:a3:be:3f:5d:f2:a8:6c:99:be:8e:d1:
                    cd:60:f2:6b:de:1c:df:3a:d1:6f:d9:81:df:79:8b:
                    ec:67:b8:7d:70:5e:94:15:52:0b:9c:5a:17:49:35:
                    5a:ef:b3:2a:89:46:6f:8a:96:aa:fd:d0:c2:08:07:
                    07:d1:f0:c7:23:60:af:7a:6a:41:26:42:24:a3:21:
                    66:23:08:13:de:02:d3:f7:12:48:48:91:04:b7:e3:
                    64:9b:9f:35:20:e9:4a:51:d8:60:d5:94:b3:9a:ee:
                    54:7c:fd:f4:fc:49:65:66:f7:1d:18:d1:74:75:87:
                    c4:27:8a:45:03:22:4f:29:13:de:11:29:45:8f:62:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:66:CB:9B:39:DD:68:33:1E:98:34:35:F1:C5:5B:3E:7F:5F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6bed32ee-2a45-3971-ae3b-818809e849f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:85:cf:6b:b9:f4:08:5f:c7:17:b9:be:5e:95:dc:d4:d5:
         74:b6:a1:31:b5:7b:10:c1:13:9a:15:85:20:d1:50:6c:b7:a5:
         8d:20:38:9b:55:07:f5:ed:5e:1e:15:cc:f2:1e:e6:84:95:6c:
         fc:44:e2:9a:fa:21:ab:f4:90:b2:cf:ff:38:f7:7d:8f:f7:85:
         9d:dc:a8:29:24:ff:b1:32:21:47:ef:9c:48:05:e0:b7:9a:e8:
         19:6e:c2:c3:02:20:00:27:b9:64:99:88:50:4d:9b:9a:4d:25:
         85:28:96:f2:6a:a5:d6:cb:1c:d1:8d:1e:8f:85:6a:03:77:a5:
         8b:94:63:06:ec:07:d5:e3:d3:e2:62:15:b3:7e:ff:41:d9:59:
         e3:5e:4c:17:67:54:4f:89:64:a0:84:eb:e6:30:fb:50:6a:34:
         7c:64:da:2f:4f:44:e4:36:64:e4:11:8d:0c:7e:66:08:e3:72:
         a8:72:d9:b1:36:8d:2a:c0:31:b5:99:a8:71:dc:90:c2:f1:f8:
         53:12:5f:56:8e:59:55:22:35:bb:27:ed:52:2d:b3:3b:d2:67:
         f7:49:2d:e6:06:9d:d0:c0:25:8f:a8:5d:9b:da:59:01:39:67:
         99:95:58:88:a6:d2:9b:28:b8:3f:0e:ca:ad:9a:1e:ac:8e:91:
         14:de:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----