Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa
File:                     26430daf-df3d-3076-a10a-a93f73c5b517.roa (raw, json)
Hash identifier:          14xRfw/qadrC+zZ1UJvDi2SnPR08zu6JKOKplhoVADc=
Subject key identifier:   15:1B:3B:76:4E:BC:B7:F6:7F:94:BA:F6:1F:39:92:70:1B:8A:BA:22
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584975445AD1912FDB432E0B6D80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff84::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5a:d1:91:2f:db:43:2e:0b:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=5ed86afe-4040-4d2f-8378-cd33b17ca1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:b0:c1:b2:1d:ee:99:f3:87:e0:f6:5a:bd:
                    fb:da:1a:53:f9:70:09:ab:54:5a:cc:15:3d:48:14:
                    eb:e0:d8:d7:2b:50:27:4d:fa:b5:3f:85:05:ea:90:
                    79:49:3a:0e:c5:2e:f1:a6:87:4a:41:f8:31:ce:df:
                    78:79:81:b1:f3:e1:85:53:b7:8a:a4:d5:bc:5b:2e:
                    8c:e7:2f:70:8b:1d:1f:e2:d8:6c:5a:18:95:a7:5e:
                    11:9c:74:47:dd:ca:80:6e:42:30:b1:74:d2:62:f7:
                    22:4c:f0:48:8d:d0:ca:9b:67:14:e2:2d:f7:93:a1:
                    29:40:9f:37:53:f6:61:90:22:0a:b7:cf:98:bb:68:
                    08:d0:7c:e2:43:b4:54:d5:1b:3c:fc:59:d3:61:13:
                    3a:ba:65:58:87:fa:bd:8e:f5:7a:f9:6b:83:04:71:
                    89:8c:93:51:3f:60:62:bf:e8:bb:d1:e0:35:f8:18:
                    a2:b4:db:e2:07:1b:c4:07:a2:a1:9e:e8:82:86:c9:
                    d1:7c:45:fb:d7:10:c4:9d:2d:61:90:50:ee:6f:46:
                    54:bb:71:44:85:f3:a4:97:41:c8:6c:56:c0:68:17:
                    e4:8e:76:62:9f:8a:4c:ce:2f:a6:14:30:5c:25:c1:
                    da:ff:52:99:ec:67:a8:92:97:d9:1b:5d:5d:2a:95:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:3B:76:4E:BC:B7:F6:7F:94:BA:F6:1F:39:92:70:1B:8A:BA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/26430daf-df3d-3076-a10a-a93f73c5b517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:7d:14:ae:41:41:69:ca:4b:93:07:68:90:86:45:35:5f:
         dd:da:9a:f3:6b:6a:32:fe:47:a3:0e:14:b6:67:c2:a8:1a:a8:
         13:94:0a:be:27:52:5a:6a:5e:79:16:10:15:1c:cf:8a:98:4d:
         65:01:62:a4:08:b9:de:af:22:10:24:cf:e1:e2:f6:c7:5e:b8:
         4a:58:10:5a:7c:24:53:77:5a:22:26:af:0a:56:82:1a:cc:dc:
         7b:e7:7a:21:6e:f8:80:6d:cd:85:5a:2f:ba:59:39:de:a6:dd:
         e4:4a:d6:00:04:5e:06:76:98:d9:9a:87:cb:48:af:89:de:5a:
         3c:cc:4b:60:2e:3a:72:24:38:65:3d:a6:d3:d1:48:c2:b1:56:
         df:1b:92:60:d4:19:54:c8:f6:5a:85:10:a3:1b:40:b6:96:8a:
         54:f9:e3:5e:a7:fb:5e:98:2e:23:c5:8c:68:a9:18:5a:95:e5:
         df:66:db:c0:04:2f:7f:78:1f:3d:fc:e2:50:74:4c:a0:cc:d9:
         aa:6b:f6:22:cc:75:75:54:4a:57:c2:fa:22:70:85:21:03:ea:
         0b:51:a4:99:75:fb:bc:76:4b:03:01:d3:61:55:a1:9e:38:5b:
         fb:4a:4d:c1:26:87:17:8d:05:74:f7:a8:ef:65:1a:46:4e:2c:
         b2:d5:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----