Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
File:                     39a77810-30a3-372e-830e-aae5c89981a4.roa (raw, json)
Hash identifier:          TJAhu8WZW9GWSzhBpJgdizGVo0qCOUWb5dq5seG/eEU=
Subject key identifier:   4F:8A:81:61:5C:B7:E9:C0:12:1D:F4:04:04:8A:36:7C:33:72:CB:3B
Certificate issuer:       /CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
Certificate serial:       010D0C9F432858490CB16CA07A05B031EC323900
Authority key identifier: 24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     32681
IP address blocks:        206.197.44.0/24 maxlen: 24
                          2620:b8:a000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6c:a0:7a:05:b0:31:ec:32:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=6ea6e216-3f88-4eed-a6e3-c71b251839de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:d0:04:44:f0:9a:ae:fb:96:3e:fe:7c:00:
                    dc:e2:88:a9:74:70:20:08:72:9a:52:9e:87:cf:1c:
                    54:23:c5:8e:0d:3e:17:13:d4:b8:2f:bc:6d:e1:74:
                    8e:bd:32:c7:34:10:01:ff:27:97:7f:cd:27:31:d9:
                    9f:65:b5:04:25:c7:aa:05:33:f8:85:37:b2:1e:63:
                    f1:0e:86:85:3d:ea:82:20:3c:ff:e3:58:32:5f:73:
                    e4:fd:cb:c4:9b:d5:e8:ab:02:85:6d:96:21:a3:b8:
                    a9:ab:b3:30:13:df:c3:34:03:0b:f9:d4:d3:29:22:
                    fe:ee:09:0e:a6:c4:40:24:b4:83:0c:3a:51:18:16:
                    18:61:53:46:31:14:73:db:62:0f:24:9b:48:22:1b:
                    0e:8d:da:b3:12:ad:fb:10:38:91:ea:24:64:e1:8e:
                    2a:e0:ba:be:4d:e5:f2:4f:f3:81:2b:b1:0f:1d:97:
                    b2:59:14:2e:23:54:75:ab:7a:f1:54:5c:fe:3a:b4:
                    8d:cd:ce:bb:e8:a4:69:d1:20:c4:d1:5e:09:1b:18:
                    6c:63:f0:a4:7c:af:55:79:81:0c:b0:48:96:fe:9d:
                    b7:d0:6e:6b:b0:88:13:36:c1:b7:f1:ce:7c:3f:ea:
                    40:e5:c0:f1:8b:22:96:91:9f:f5:67:48:e5:7a:96:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8A:81:61:5C:B7:E9:C0:12:1D:F4:04:04:8A:36:7C:33:72:CB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.crl

            X509v3 Authority Key Identifier:
                keyid:24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.44.0/24
                IPv6:
                  2620:b8:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:f8:54:3a:0b:91:d0:f5:66:c6:9f:88:52:ff:6c:8e:bf:
         0a:27:0f:d3:65:e3:3b:9f:b8:40:92:06:5c:8b:47:92:97:4a:
         50:5a:22:15:bd:77:5c:fe:b2:76:8b:f3:ab:43:14:81:32:ac:
         d3:a6:67:e4:ab:83:db:0f:51:7b:e2:4a:3e:f2:f4:91:14:47:
         16:08:86:cd:a0:61:2d:be:09:b6:fa:c6:fa:8a:df:b5:d8:3f:
         29:a3:a2:1c:78:60:1d:55:44:ca:c6:87:d0:af:0a:47:5e:80:
         79:bc:88:d0:98:d7:2b:b9:a7:b1:42:3b:70:2d:69:c1:ff:97:
         60:6a:90:c0:a2:30:3a:7e:d5:c3:93:c9:b6:04:d5:dc:78:1c:
         c7:84:63:1f:91:77:b8:1f:28:51:44:66:e2:ac:fd:77:a7:ab:
         4b:bf:be:79:9d:29:99:7d:db:d7:c6:f0:06:e2:f6:50:12:ae:
         02:f6:d2:7f:d5:7d:df:e7:ad:78:7f:9d:e4:6d:46:30:ee:c8:
         f8:a1:aa:f7:0c:17:df:9c:f0:e0:e2:46:03:4c:56:ab:21:0b:
         61:cc:ea:48:dd:25:ce:35:ec:f3:99:a7:6e:a1:9b:b0:fc:06:
         e0:d3:e7:59:c0:06:c7:c4:e8:4b:f4:5d:48:5c:0d:04:6f:21:
         0e:ea:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----