Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa
File:                     0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa (raw, json)
Hash identifier:          QoB8kkNA01ULzv+5C8zMHemUimEEPeMUcE4owXAtpSU=
Subject key identifier:   29:77:C3:D8:00:59:F7:52:E2:2C:07:D5:3F:6D:E9:50:D7:CF:B0:EE
Certificate issuer:       /CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
Certificate serial:       010D0C9F432858495EEEEE36DEE2249B59C60080
Authority key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     19568
IP address blocks:        2604:92c0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ee:36:de:e2:24:9b:59:c6:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=17a6468f-7250-45d0-9842-afc0bfc48125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:73:66:27:12:7b:88:de:5a:36:ff:ed:2d:
                    6c:be:b3:e9:55:0d:b9:c1:ee:c9:bf:33:36:d4:af:
                    7b:cc:36:bb:9b:28:b1:6f:e4:0e:e6:fc:d4:55:46:
                    81:3b:43:d4:03:b4:bf:28:50:99:4c:0e:52:d5:70:
                    b1:d2:f5:2c:90:d9:b9:f6:e1:28:ec:03:89:e3:55:
                    dd:ee:c1:51:71:76:dd:8d:87:5d:e3:86:de:2a:2b:
                    42:6d:f9:b0:73:c0:1d:a8:f8:89:3d:c2:b3:be:e1:
                    62:22:9b:b4:67:89:bd:f9:88:12:50:54:21:95:cc:
                    41:dd:70:af:93:84:e6:a7:9d:ec:7e:af:25:04:44:
                    97:fc:fe:a2:08:3a:d6:08:71:79:92:20:0e:76:9a:
                    ba:d8:b0:7e:5e:f3:b5:21:d1:b1:25:0e:57:fc:11:
                    e5:29:5d:a9:b1:47:12:23:d9:b8:df:7a:24:8b:68:
                    5b:77:ad:97:e8:bf:f6:4d:b8:f8:51:63:63:7a:61:
                    ee:56:35:1d:bd:30:d0:b8:43:2a:e3:e5:ce:07:45:
                    23:bc:2f:f7:0e:12:36:17:21:57:3c:13:7b:a0:15:
                    ff:ec:68:5f:b2:72:5f:9e:30:0c:59:94:ff:04:60:
                    11:25:6e:ec:0e:bb:59:9b:84:be:cb:fd:20:db:57:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:77:C3:D8:00:59:F7:52:E2:2C:07:D5:3F:6D:E9:50:D7:CF:B0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:92c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ec:8d:39:94:f0:04:4b:df:13:18:89:77:45:79:7a:82:5f:
         c0:18:8d:80:fc:37:68:e1:25:51:a3:a9:44:63:23:3a:ef:4c:
         f3:c5:b7:df:38:61:42:f0:79:59:88:02:d0:6b:7f:07:2a:be:
         8a:16:b7:7d:fe:f9:04:ce:76:a8:e2:fe:58:d6:f9:77:b9:9d:
         59:0b:33:7e:85:96:e8:8e:cd:0c:48:3c:48:6f:ac:bd:29:8a:
         5b:96:e7:3e:17:35:03:f1:91:82:2b:31:95:83:20:6d:9d:dd:
         0d:20:1b:d5:f6:40:aa:62:cd:be:00:e8:97:57:7b:fd:35:ea:
         1a:c8:49:13:69:e5:0d:b8:1e:16:95:8b:bb:90:12:cf:35:89:
         77:e0:71:f1:ea:19:21:1e:b6:19:67:72:88:cf:3c:ea:40:30:
         77:9a:45:d5:1d:f1:54:5c:fe:ae:11:1e:ff:99:91:de:fd:b2:
         f5:78:07:ce:8c:b3:b9:be:33:73:fc:e2:38:8c:fe:77:9b:2a:
         e6:10:a6:3a:51:70:40:e6:d7:9d:b5:c4:24:d4:92:78:e3:1f:
         f9:ac:45:91:3e:ac:b6:1b:c3:f8:f8:92:23:ae:f2:1a:9a:06:
         f6:47:63:ee:e5:e6:00:63:ba:2c:0d:94:5b:3a:78:fd:29:71:
         e0:97:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----