Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
File:                     1120f28a-f819-38ee-94b2-70a3a857d7b0.roa (raw, json)
Hash identifier:          sp0ujTHZq3FeVw5MKZidcqBIxNqTRSKA5yGyLM29KN8=
Subject key identifier:   5D:FB:59:BC:90:54:A2:F6:FD:52:46:E7:88:CF:46:DD:DB:7C:57:24
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F43285848C6E63720CD1A30CABE6E4D00
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     33179
IP address blocks:        2602:fa21:10::/45 maxlen: 45

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:37:20:cd:1a:30:ca:be:6e:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=af0b9c09-2c61-40a0-99ed-fee026debfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:05:79:b8:5c:77:87:e2:1c:94:fb:f3:46:
                    a3:da:e1:e0:98:b5:a8:5c:95:11:1b:06:9a:a9:b3:
                    1e:4a:1f:a3:7d:68:41:c9:70:77:bc:70:f1:e1:b9:
                    0f:b7:ce:0c:68:f4:33:02:d4:96:5c:c7:74:b4:fe:
                    ce:db:e5:3c:3e:fb:e3:bf:94:d2:a3:01:b2:8f:52:
                    d5:a5:0b:86:d6:13:f9:ad:ac:e3:a1:a3:1c:26:68:
                    10:55:05:01:5f:09:1b:47:5e:96:d6:a7:ae:61:84:
                    00:b1:80:3b:e4:3c:b3:97:d1:5b:e0:6d:8c:1c:72:
                    b7:e8:a6:dc:41:61:8c:b8:29:33:67:38:e6:c9:fc:
                    9c:01:f3:1b:e5:09:6d:79:e4:e2:94:44:9c:83:4d:
                    3d:0b:90:a3:c4:36:ad:1b:61:28:f6:c4:a2:0d:a5:
                    76:4a:0d:17:e4:cd:1f:e8:ee:4f:2c:47:6a:f5:3b:
                    80:38:4a:1c:33:5a:33:14:05:7e:49:e6:00:c5:66:
                    d3:fd:60:8d:ac:f6:f3:1f:77:a2:23:f3:d1:61:97:
                    6b:69:47:eb:d1:bf:29:77:79:f7:e8:39:2b:56:5c:
                    3d:8e:a2:a5:4a:6b:52:ea:9f:c3:ba:e8:33:2f:9e:
                    06:9b:db:bd:f7:7f:33:79:d1:6c:d6:16:dd:e0:7c:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FB:59:BC:90:54:A2:F6:FD:52:46:E7:88:CF:46:DD:DB:7C:57:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:c8:94:bc:c8:c2:f0:29:4a:e1:7e:fc:ab:8b:18:1b:bb:
         33:d4:20:6f:b2:2a:91:cd:dc:98:6d:1f:9b:1f:a3:4d:46:34:
         58:b5:d7:82:0c:8d:84:ae:21:1a:d0:cb:48:3f:6a:ac:e5:a1:
         3d:d8:06:85:75:a4:f0:b8:cc:33:8b:00:1b:e4:84:82:ca:a3:
         e3:fd:15:b8:3a:7f:be:ff:cf:48:20:58:0c:d2:ea:f4:f6:e3:
         50:47:03:c3:11:9e:e7:46:e8:92:a9:a9:b3:55:d8:0b:bc:aa:
         d4:fa:18:20:d3:79:8e:78:a5:28:54:97:db:3f:c1:52:77:19:
         76:9b:12:61:bf:05:a5:fa:8c:72:fb:4d:02:c5:57:39:0c:0f:
         4e:16:7c:10:05:3a:a1:f3:1c:a1:85:2d:db:1a:b5:59:e7:f1:
         af:60:05:46:01:8f:ab:85:49:8b:25:41:0d:b1:2b:a0:90:30:
         29:38:40:06:07:32:b1:10:c3:20:a7:fc:0d:58:06:4c:ca:d4:
         ad:ba:ac:b6:66:94:42:fa:67:21:45:28:8c:b5:24:c4:70:bc:
         ff:24:d4:af:a3:79:68:95:42:35:6f:52:b3:6e:ab:65:0b:bc:
         e9:29:ae:96:34:27:5f:f8:56:3a:98:9c:cd:ee:14:30:81:f1:
         e1:cc:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----