Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa
File:                     07231d67-9f09-3f69-b773-3c3fa25b3b66.roa (raw, json)
Hash identifier:          66ANhcRhq1CZX9jTy4antSotmPAkt9f7ZFxhoFY7Dsk=
Subject key identifier:   41:35:15:E6:2D:20:F7:1F:1F:96:EE:82:42:9B:E6:D9:DB:C0:22:11
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F43285849088171500C02D728D987F2A4
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     64213
IP address blocks:        2001:504:57::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:71:50:0c:02:d7:28:d9:87:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=f9f4a084-a13a-4d3a-aa87-db98bb5d9a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:be:c2:4f:a5:32:17:5b:ab:56:20:14:3e:
                    c3:9c:3a:30:a1:94:e4:b2:d9:72:1c:2a:f2:08:fb:
                    21:18:65:fd:bf:aa:77:f5:e7:56:f0:2c:41:de:ec:
                    1f:7f:34:f0:0e:ec:1e:f6:a0:50:d6:cf:cb:3a:e7:
                    e2:3b:80:aa:f3:8f:65:d9:30:a1:c8:9d:00:17:1a:
                    3a:b6:4c:2e:e9:ee:9c:e6:c0:e0:26:34:88:19:e3:
                    e0:48:b2:53:48:c4:83:20:06:74:1c:b7:6b:9d:3f:
                    ec:3a:6f:bc:3b:c6:a2:68:62:e2:10:9e:84:e9:8e:
                    d3:c2:5c:ab:a1:25:f7:8c:b4:c5:25:cd:5e:37:50:
                    be:0a:86:b7:8e:24:50:13:5d:ab:fc:42:98:be:66:
                    6a:5b:b4:79:e1:95:01:6b:c3:c2:ab:c1:a5:d7:d1:
                    87:c2:6c:7b:60:06:c9:8d:69:20:17:42:a2:9e:c9:
                    a8:7a:c2:51:e9:23:01:1f:60:ae:cd:2a:9e:39:53:
                    90:35:87:c5:5f:f2:a4:36:73:46:2b:3b:b7:3d:62:
                    0a:eb:9c:9f:72:a4:7b:b1:7f:86:23:1f:4a:ef:82:
                    f8:2c:9b:88:6a:c3:4f:01:eb:1b:b1:d0:5f:f9:04:
                    69:f7:4b:a6:b9:45:91:2a:59:f9:21:2e:bb:2e:8c:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:35:15:E6:2D:20:F7:1F:1F:96:EE:82:42:9B:E6:D9:DB:C0:22:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:44:0f:93:e9:a5:39:6f:2a:59:1d:8e:6e:52:88:a1:64:91:
         c0:b7:8b:57:80:ca:93:97:94:02:95:2c:e4:b9:50:e2:44:61:
         ed:07:c6:c4:a7:40:5d:28:ac:28:87:d3:f5:8c:3c:63:cd:da:
         99:95:6c:b3:f5:19:30:fb:e2:b7:5c:e5:72:f6:63:d1:18:13:
         2e:8a:92:af:2c:8f:69:fa:73:b6:5b:31:0e:07:b1:f2:83:e1:
         4b:e1:cb:5e:e4:f2:df:a1:8a:24:85:cd:17:e3:42:9a:94:91:
         51:4f:13:3b:5d:f4:e4:c2:c7:69:70:b7:43:35:ef:2d:9b:2c:
         e5:36:71:3f:95:68:1c:06:33:f6:98:8e:09:e7:d5:d8:79:24:
         ce:59:93:3b:91:9b:61:11:d8:cc:1e:b7:ed:a0:1e:d4:15:3c:
         bb:90:b8:f3:75:d9:d4:4e:8c:c0:d0:7c:33:82:37:2e:b7:11:
         ed:5f:09:17:e7:b3:c3:89:57:09:37:69:7a:ed:6b:9f:95:58:
         08:6f:b0:76:ed:9c:95:ed:a0:33:e2:c1:1e:8d:f3:4e:92:0d:
         ab:33:4a:e9:0d:33:a6:1e:4e:d2:07:fc:c1:a8:14:43:27:59:
         59:96:95:32:4c:9e:e6:9b:c8:c8:02:60:c7:5a:c7:d6:be:16:
         a4:8d:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----