Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa
File:                     b8db3714-4c26-342a-b31d-1921cbc41b1f.roa (raw, json)
Hash identifier:          a7RoPJzhqVSWBsR7n1ZcmzT3ODmP9jJuqrGluc+rQV0=
Subject key identifier:   FA:C1:87:B3:FF:81:A1:4C:CD:24:DA:E1:49:2D:BE:ED:52:8A:76:E4
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584949FE9274BBB83F4889A99400
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     393885
IP address blocks:        2604:4a00:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:92:74:bb:b8:3f:48:89:a9:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=99ad42a3-dcda-4fb0-a691-a1eeb58c5ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:a1:ae:0c:9e:10:34:93:ca:4f:78:70:2d:
                    39:8f:f4:ce:75:7c:25:d5:c5:4d:eb:92:d3:cc:1d:
                    94:15:a3:7e:3d:37:97:b8:76:f6:95:42:36:4a:64:
                    7c:31:40:ea:d7:42:5d:51:8f:45:2b:c4:89:2b:55:
                    64:81:3e:e2:f6:1e:9f:ba:8a:58:d7:a0:7f:11:9a:
                    5e:a0:40:f3:f3:1d:d7:7d:5c:d6:16:3b:72:cc:98:
                    58:fc:ff:22:95:3a:1a:46:05:c5:2b:b3:ca:e0:a1:
                    65:bb:8f:79:3f:34:6f:a8:17:c3:0e:63:a9:a9:b2:
                    35:5a:86:dc:85:ef:7f:66:c4:b8:9c:90:ee:59:45:
                    b9:1d:9b:b0:35:c4:a7:4a:0b:b6:7f:66:ec:79:89:
                    cf:06:59:92:ba:9f:ff:64:78:5f:18:ea:7c:7d:83:
                    0b:2e:5d:3f:d3:8b:d0:8b:08:b6:e6:ab:71:d5:74:
                    f2:9d:d8:d2:57:82:2f:b5:cd:ae:97:5d:f1:1d:43:
                    be:5d:2e:8c:b9:e7:72:5a:15:3d:59:e3:75:80:d4:
                    25:15:0b:50:48:84:89:3d:91:d0:6c:65:dd:41:11:
                    12:6e:cd:9e:77:3c:30:c0:7e:45:b4:94:63:fc:67:
                    f7:45:17:18:42:06:c5:12:61:54:ea:70:91:af:7c:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:87:B3:FF:81:A1:4C:CD:24:DA:E1:49:2D:BE:ED:52:8A:76:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/b8db3714-4c26-342a-b31d-1921cbc41b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:6a:b5:57:e0:a9:d5:3a:6b:2a:29:6f:94:a8:34:b9:82:
         fa:07:62:34:d3:3e:62:cf:40:07:91:12:f7:99:74:5f:ce:cd:
         fa:a4:10:f4:81:ff:d6:e8:5f:1b:0d:5e:22:bf:c7:60:c2:ec:
         57:a3:04:bb:70:51:fb:67:dd:7e:27:a5:d8:ac:af:f9:1d:93:
         fe:03:9d:98:47:99:93:10:3a:59:89:d8:cb:1f:05:83:fb:26:
         7e:1d:0f:fc:a6:f4:2c:e5:f0:e3:68:87:76:9c:71:00:bc:52:
         da:8e:7f:8f:c9:ee:ac:c7:3f:5e:2b:77:fa:6c:d4:d1:b8:43:
         a4:03:e4:7a:86:ca:01:13:4e:03:68:b3:2d:04:e4:d4:4e:de:
         7b:7b:72:a9:05:09:57:b1:9e:73:fd:62:42:77:6f:60:5d:26:
         0f:c2:c0:75:21:4a:50:79:8a:6d:42:59:80:33:62:5a:76:14:
         8a:73:92:f4:a8:77:48:48:b5:08:6d:54:6f:99:ec:cc:0b:a7:
         3d:32:31:42:42:d0:92:8b:c5:da:68:b1:ca:ee:32:02:06:5c:
         a9:9b:52:09:aa:c0:68:82:1b:08:87:50:56:e8:bd:aa:e3:69:
         65:a2:28:3c:b0:b5:e1:3e:39:44:52:2a:09:8b:65:00:5a:84:
         20:88:37:00
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElJ/pJ0u7g/SImplAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk
NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
OTlhZDQyYTMtZGNkYS00ZmIwLWE2OTEtYTFlZWI1OGM1ZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNahrgyeEDSTyk94cC05j/TOdXwl1cVN65LT
zB2UFaN+PTeXuHb2lUI2SmR8MUDq10JdUY9FK8SJK1VkgT7i9h6fuopY16B/EZpe
oEDz8x3XfVzWFjtyzJhY/P8ilToaRgXFK7PK4KFlu495PzRvqBfDDmOpqbI1Wobc
he9/ZsS4nJDuWUW5HZuwNcSnSgu2f2bseYnPBlmSup//ZHhfGOp8fYMLLl0/04vQ
iwi25qtx1XTyndjSV4Ivtc2ul13xHUO+XS6MuedyWhU9WeN1gNQlFQtQSISJPZHQ
bGXdQRESbs2edzwwwH5FtJRj/Gf3RRcYQgbFEmFU6nCRr3yWawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPrBh7P/gaFMzSTa4Uktvu1SinbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk
ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvYjhkYjM3MTQtNGMyNi0z
NDJhLWIzMWQtMTkyMWNiYzQxYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl
ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1
ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh
M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAOAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATH9qtVfgqdU6ayopb5SoNLmC+gdiNNM+Ys9AB5ES95l0X87N+qQQ
9IH/1uhfGw1eIr/HYMLsV6MEu3BR+2fdfiel2Kyv+R2T/gOdmEeZkxA6WYnYyx8F
g/smfh0P/Kb0LOXw42iHdpxxALxS2o5/j8nurMc/Xit3+mzU0bhDpAPkeobKARNO
A2izLQTk1E7ee3tyqQUJV7Gec/1iQndvYF0mD8LAdSFKUHmKbUJZgDNiWnYUinOS
9Kh3SEi1CG1Ub5nszAunPTIxQkLQkovF2mixyu4yAgZcqZtSCarAaIIbCIdQVui9
quNpZaIoPLC14T45RFIqCYtlAFqEIIg3AA==
-----END CERTIFICATE-----