Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/9499450b-2003-3821-bf4b-31c2a4dd1712.roa
File:                     9499450b-2003-3821-bf4b-31c2a4dd1712.roa (raw, json)
Hash identifier:          jCpVeu2NvOGrkKmGX2HuzwdWjKBa1S1S36y+ZaccA7A=
Subject key identifier:   CD:A5:A0:D3:B9:CB:FE:4D:E8:45:DA:44:C2:75:91:88:3C:A1:D6:8F
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F432858493C3A25E99D761D3B0C48E540
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/9499450b-2003-3821-bf4b-31c2a4dd1712.roa
Signing time:             Wed 19 Mar 2025 02:39:29 +0000
ROA not before:           Wed 19 Mar 2025 02:39:29 +0000
ROA not after:            Tue 17 Jun 2025 02:39:29 +0000
asID:                     216360
IP address blocks:        2602:f974:fff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:3a:25:e9:9d:76:1d:3b:0c:48:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Mar 19 02:39:29 2025 GMT
            Not After : Jun 17 02:39:29 2025 GMT
        Subject: CN=c1d62d40-f611-4512-9b5a-b936c7a0f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:f5:8b:1d:8b:60:e8:bc:31:e8:5a:7d:1c:
                    83:48:c6:9b:c1:ef:a8:41:21:c9:4e:bb:36:8f:b2:
                    14:b7:96:e1:ba:b0:8f:53:ec:07:0a:f0:ba:e4:3c:
                    73:4c:c9:aa:b2:04:83:87:83:af:44:5f:5e:28:e1:
                    a2:93:f3:dc:ff:a9:f1:70:68:ee:67:6f:96:7f:7d:
                    89:60:be:2b:16:71:47:ec:b4:17:cd:ec:43:63:b8:
                    7c:2c:ae:f7:1c:04:e3:00:2d:1e:75:da:fd:18:79:
                    ca:65:f1:5b:fb:39:5f:5e:f1:1b:23:6f:14:a5:46:
                    64:11:85:89:5d:c3:06:cb:fd:a7:0f:37:c0:9e:73:
                    f2:72:ef:0c:74:96:37:7c:c6:8b:49:ab:1a:27:4d:
                    af:34:49:6b:b2:c0:f2:77:0a:0b:ac:cd:cd:40:f1:
                    47:86:03:6d:6f:49:84:87:71:4d:37:c5:46:e8:d7:
                    ec:15:f5:18:c6:84:f7:f6:7d:2d:f6:14:ba:46:41:
                    1c:4b:51:cc:ca:a9:ac:12:f1:fd:d4:74:0e:4c:f8:
                    e2:a0:e2:a3:bd:88:d3:41:7c:49:38:b8:b4:ad:ab:
                    d8:54:b8:45:52:3d:a3:e7:17:fc:5a:ae:4a:15:52:
                    3b:6b:e6:c3:72:73:58:61:81:3a:f2:d5:0d:98:df:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:A0:D3:B9:CB:FE:4D:E8:45:DA:44:C2:75:91:88:3C:A1:D6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/9499450b-2003-3821-bf4b-31c2a4dd1712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f974:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:37:65:c3:47:07:52:e5:8c:8c:e0:57:23:23:ff:0d:45:
         ac:7d:0b:d3:59:9c:f0:ad:98:52:7d:09:96:90:bd:ac:73:84:
         bb:eb:af:d8:d0:b0:15:39:97:80:a3:52:db:96:c6:a8:61:6a:
         a2:8a:0e:8a:09:a2:8b:b6:2a:34:25:4c:7e:ff:dd:b6:86:ac:
         fa:10:76:05:23:3c:33:83:8a:e3:40:c0:19:89:54:65:a0:81:
         63:c8:e0:99:b6:4e:d6:76:7a:ac:8e:60:dd:75:de:b4:92:c9:
         6c:55:ef:3f:b5:de:f4:61:e7:44:b9:f0:09:c0:21:8e:62:47:
         c4:5b:61:56:ad:d5:f1:4f:fd:11:39:a9:c6:e3:ee:86:cc:24:
         14:00:38:52:9a:af:ab:bd:32:65:f8:86:05:a5:5d:5c:ca:be:
         83:fb:f4:64:a0:2b:2b:f0:31:55:ac:c6:97:cd:b2:6c:36:93:
         21:32:87:ea:01:1f:ae:73:7d:dc:0c:21:53:e9:20:52:77:52:
         cf:3b:f4:a8:1e:1a:84:84:2f:d2:c0:a9:f5:94:6a:2f:5b:02:
         8c:2e:e1:89:27:d2:cc:ea:9c:35:b1:2e:f2:a6:eb:0b:83:46:
         12:a8:c0:49:20:e9:a9:47:1a:46:ba:07:5c:90:f9:d8:eb:87:
         b3:04:50:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk8OiXpnXYdOwxI5UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkzZDE0M2YtMDA5YS00ZjdjLWJlYjQtY2U5YzczMzUy
NDE3MB4XDTI1MDMxOTAyMzkyOVoXDTI1MDYxNzAyMzkyOVowLzEtMCsGA1UEAxMk
YzFkNjJkNDAtZjYxMS00NTEyLTliNWEtYjkzNmM3YTBmNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCn1ix2LYOi8MehafRyDSMabwe+oQSHJTrs2
j7IUt5bhurCPU+wHCvC65DxzTMmqsgSDh4OvRF9eKOGik/Pc/6nxcGjuZ2+Wf32J
YL4rFnFH7LQXzexDY7h8LK73HATjAC0eddr9GHnKZfFb+zlfXvEbI28UpUZkEYWJ
XcMGy/2nDzfAnnPycu8MdJY3fMaLSasaJ02vNElrssDydwoLrM3NQPFHhgNtb0mE
h3FNN8VG6NfsFfUYxoT39n0t9hS6RkEcS1HMyqmsEvH91HQOTPjioOKjvYjTQXxJ
OLi0ravYVLhFUj2j5xf8Wq5KFVI7a+bDcnNYYYE68tUNmN/TnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM2loNO5y/5N6EXaRMJ1kYg8odaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNk
MTQzZi0wMDlhLTRmN2MtYmViNC1jZTljNzMzNTI0MTcvOTQ5OTQ1MGItMjAwMy0z
ODIxLWJmNGItMzFjMmE0ZGQxNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDkzZDE0M2YtMDA5YS00ZjdjLWJl
YjQtY2U5YzczMzUyNDE3LzA5M2QxNDNmLTAwOWEtNGY3Yy1iZWI0LWNlOWM3MzM1
MjQxNy5jcmwwHwYDVR0jBBgwFoAUwwrscmITHMiOguUvQ7Yv6opL3nQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNkMTQzZi0wMDlhLTRmN2MtYmViNC1jZTlj
NzMzNTI0MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5dA//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACh/N2XDRwdS5YyM4FcjI/8NRax9C9NZnPCtmFJ9CZaQvaxzhLvr
r9jQsBU5l4CjUtuWxqhhaqKKDooJoou2KjQlTH7/3baGrPoQdgUjPDODiuNAwBmJ
VGWggWPI4Jm2TtZ2eqyOYN113rSSyWxV7z+13vRh50S58AnAIY5iR8RbYVat1fFP
/RE5qcbj7obMJBQAOFKar6u9MmX4hgWlXVzKvoP79GSgKyvwMVWsxpfNsmw2kyEy
h+oBH65zfdwMIVPpIFJ3Us879KgeGoSEL9LAqfWUai9bAowu4Ykn0szqnDWxLvKm
6wuDRhKowEkg6alHGka6B1yQ+djrh7MEUNk=
-----END CERTIFICATE-----