Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
File:                     4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa (raw, json)
Hash identifier:          JJ7Q4GSyOY+Wd6W9MCLeaZaW7RlotpodX1tbncBBE6g=
Subject key identifier:   63:97:66:A1:78:69:80:06:B4:A7:C4:B8:A6:84:71:C3:B1:E9:85:C7
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285849806F28F4457F0FC2273310C0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     399612
IP address blocks:        2604:7e00:31::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:28:f4:45:7f:0f:c2:27:33:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=282e6326-4b08-48a5-b025-bfd099eaa002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:6d:54:d4:c7:c3:c0:ab:8e:57:f0:12:18:
                    54:70:00:be:41:6d:3b:f4:29:d7:83:9d:fe:3f:40:
                    52:a4:30:e3:a8:5a:f7:2b:b8:28:27:21:0c:88:7a:
                    3e:7d:96:69:f6:c7:72:11:ea:ce:bf:60:12:02:00:
                    1c:fc:5a:88:41:73:69:48:04:8b:e3:43:48:3e:30:
                    86:d1:dc:21:d2:2a:14:cd:b4:29:32:37:8d:a4:5b:
                    58:d9:e5:39:82:2e:68:f9:cd:7c:3f:39:16:a2:7f:
                    ed:a0:b8:70:84:40:1f:30:46:c0:86:6d:74:9a:8e:
                    7e:be:75:03:2a:d3:2f:f5:16:6c:ac:23:23:bc:59:
                    e3:35:90:1a:ff:78:01:79:45:85:8c:82:08:bf:4c:
                    3c:fc:50:f7:83:30:94:01:19:54:b2:a3:32:4a:9a:
                    72:b8:70:32:c1:e1:98:e8:fe:1c:54:88:bd:99:f3:
                    fb:04:13:c8:14:23:01:0b:49:64:fc:a2:6c:ef:98:
                    1b:ec:7d:f3:b3:35:46:5f:5b:66:07:01:f9:37:03:
                    10:cf:b7:58:06:32:af:6c:3f:5c:a4:b1:41:64:5f:
                    92:c0:2c:2e:da:99:5f:83:ee:b0:c2:b4:65:53:49:
                    e4:ee:11:24:24:86:7e:80:14:fc:75:1a:50:cc:78:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:66:A1:78:69:80:06:B4:A7:C4:B8:A6:84:71:C3:B1:E9:85:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4ff3abe9-248f-3291-a35a-2d55a79ae1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7e00:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:05:1d:9a:a4:3c:7a:0f:98:96:49:c8:2d:20:89:2c:72:
         67:59:14:87:eb:7f:ae:ca:f8:04:ef:85:12:09:bc:27:ef:5c:
         bc:ea:cd:43:62:b9:86:bc:4c:59:dc:a4:4f:51:98:7c:e4:28:
         24:d0:74:fc:5d:e7:43:73:36:6f:cb:91:78:2c:74:84:70:18:
         47:ef:b0:4a:0e:ee:7b:9e:b2:a7:10:68:44:7c:ca:d4:35:86:
         1c:ec:49:4d:fe:c6:8f:c2:68:b9:01:51:ce:93:a4:e6:3d:72:
         42:4f:91:f2:4e:0d:41:1d:8a:40:b3:bf:8b:42:6e:00:c1:9a:
         f0:d3:dc:2b:c9:9c:1b:d8:fb:51:4c:d4:1e:8c:39:20:97:3b:
         7e:88:e4:16:c0:63:83:c1:d4:10:ff:53:3d:1c:ba:9d:be:49:
         90:90:1a:ac:14:80:c3:41:a7:f6:2f:c2:97:81:65:1b:6f:4e:
         8f:3b:5e:f7:50:8f:3a:f9:4b:cf:0e:77:86:c8:a7:f6:da:d1:
         69:b6:9f:b4:8c:81:de:d2:f5:26:bd:20:bc:ed:6c:53:43:ad:
         c6:9a:1b:82:69:92:b8:db:c1:89:3a:db:2f:77:82:cf:3c:f5:
         b9:ca:bb:af:7e:7e:2a:d1:30:dd:b0:60:55:9a:77:d1:70:f4:
         bc:8c:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----