Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/5cb20272-c5f5-3ae9-9a83-943c93874b24.roa
File:                     5cb20272-c5f5-3ae9-9a83-943c93874b24.roa (raw, json)
Hash identifier:          p637UohnXkOngz3LHTYwoXlitiVqtSSYblt/vUB+AUI=
Subject key identifier:   20:4A:52:30:EA:42:12:D2:7F:31:F4:3C:94:D4:77:E5:51:53:5F:1C
Certificate issuer:       /CN=6380adc9-f3a5-422f-ae25-f869a9ad1efd
Certificate serial:       010D0C9F43285849806F23B8C4A34AF3486C7F80
Authority key identifier: 32:CF:E8:38:32:5F:B3:AB:B2:30:B4:CB:81:94:05:31:22:08:04:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/5cb20272-c5f5-3ae9-9a83-943c93874b24.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        2607:5440::/32 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:23:b8:c4:a3:4a:f3:48:6c:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6380adc9-f3a5-422f-ae25-f869a9ad1efd
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=b4d53c9d-d7d2-422b-8ec0-31c3d95cb4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:9f:83:27:16:d3:fb:14:6e:73:55:0f:fc:
                    39:79:98:eb:36:88:5a:78:c4:00:88:92:9e:6b:23:
                    10:4c:1d:30:f8:00:28:69:3a:e0:07:41:7f:b4:c6:
                    3b:2d:17:5c:8e:9a:1a:dd:e2:76:30:b7:a2:11:91:
                    ae:a1:da:cf:bd:7b:9f:e2:e6:4c:0e:ce:df:bd:8e:
                    12:51:7b:af:23:73:77:e1:99:95:17:69:4a:a5:02:
                    08:a5:02:df:df:9a:d1:cf:bb:16:16:30:2e:9d:56:
                    fc:08:36:d4:9b:e5:e5:32:0e:43:8f:17:e1:76:2a:
                    f5:29:37:8a:cd:f9:b6:f3:e6:66:f8:d2:b7:51:98:
                    6a:1e:f4:35:40:b9:cd:07:42:e2:c4:cf:05:48:fb:
                    1d:de:b6:21:bb:0c:bf:93:b5:28:fc:e0:25:93:c9:
                    6a:e0:aa:d9:6b:8a:4b:42:27:c9:30:40:94:84:8b:
                    26:7d:71:60:bb:29:da:9e:33:38:80:43:1f:fa:1a:
                    bb:b8:44:b8:fc:ba:ba:dd:73:8c:eb:4c:43:be:80:
                    9c:fe:b1:07:d0:50:43:24:62:4c:b1:9e:95:14:ed:
                    b9:72:bc:92:17:0c:f2:3f:8e:d6:ab:f9:80:9c:ab:
                    e7:af:5e:61:91:3e:6f:01:22:d0:24:b5:7c:17:00:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:52:30:EA:42:12:D2:7F:31:F4:3C:94:D4:77:E5:51:53:5F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/5cb20272-c5f5-3ae9-9a83-943c93874b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/6380adc9-f3a5-422f-ae25-f869a9ad1efd.crl

            X509v3 Authority Key Identifier:
                keyid:32:CF:E8:38:32:5F:B3:AB:B2:30:B4:CB:81:94:05:31:22:08:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:b0:20:c4:b0:b3:9f:1d:74:2c:53:38:65:4b:49:c2:7f:
         25:94:fb:e3:2e:c6:ce:94:80:e8:f2:93:e6:48:d7:de:83:fd:
         e6:b7:8a:9d:34:ea:4f:19:53:b6:16:8d:71:13:65:12:fc:58:
         44:91:a2:37:e0:e6:26:40:ad:08:6c:d7:3e:2f:6f:7d:83:65:
         37:e1:4f:ef:0d:c2:f8:de:5e:47:e2:20:15:3f:f7:82:ac:69:
         eb:99:31:e9:a3:dc:41:d4:41:2c:36:3f:88:01:da:f9:e0:78:
         ce:42:43:2b:41:8c:bc:e8:85:67:d8:be:1a:8b:8c:02:e7:70:
         9b:b3:86:63:2f:37:1e:26:a1:e8:71:94:f4:57:76:b4:81:90:
         8f:fe:8e:37:0b:f6:f1:e2:4d:3a:bb:d7:27:f4:09:ec:5f:ca:
         05:5a:f4:5d:67:6c:94:e5:4e:e3:61:6c:27:0e:91:85:73:5f:
         1c:35:6c:16:a7:56:e3:02:fb:72:2e:f9:ab:30:45:3c:ab:f8:
         d7:45:35:8d:a8:2f:54:8e:b8:dc:c8:44:5a:ee:22:fb:57:3c:
         20:46:58:13:67:82:27:0b:82:11:b9:4a:b1:48:ba:c7:20:de:
         31:ac:40:29:9a:b8:b4:3d:b4:0e:81:25:f5:23:c0:a9:fd:65:
         1a:7b:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----