Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa
File:                     45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa (raw, json)
Hash identifier:          cXhIGWa6opbOEIM82GPrhdAo+eiMZWg2hDfSJl0hsJY=
Subject key identifier:   A3:DF:67:56:85:DF:10:DE:EB:70:8A:F2:A8:E6:24:01:3B:10:3D:C4
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848FD569FE74DEAE54C7F4CBE00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8208::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9f:e7:4d:ea:e5:4c:7f:4c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=bc752080-dc72-42fa-9e98-fdf91ed7df82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:dc:f8:ea:be:df:1d:cb:cd:00:fc:d1:5f:
                    29:57:80:8f:7e:b6:9d:a4:7b:9e:14:b6:7c:36:e0:
                    97:c1:f8:f7:3d:a6:3e:44:60:f5:75:ba:d3:7f:f4:
                    66:67:0c:3c:da:cf:41:c8:33:4c:e0:b8:2e:d5:f8:
                    cf:55:ee:15:ab:90:77:dc:c5:f7:21:38:31:66:eb:
                    2b:fa:0f:c9:a3:12:69:8d:b2:e4:66:a7:41:c0:1d:
                    90:c5:0f:d9:69:c1:5e:74:fe:a3:75:a3:e2:7b:4a:
                    50:52:0b:48:6b:d8:a2:9e:91:de:0e:a9:21:07:b0:
                    e9:ed:c7:39:2c:5a:a8:e4:a6:72:aa:80:77:e8:94:
                    ae:fa:23:c0:66:7b:bc:f3:22:3e:7a:44:eb:f7:04:
                    13:ed:0c:92:7f:0e:9e:9e:d0:f6:c0:c9:0d:a3:24:
                    b0:a8:73:79:b8:b9:68:67:c3:21:4e:e7:ce:f7:6c:
                    00:de:4e:1a:fc:c2:26:e8:f7:73:8a:9c:dd:81:22:
                    7a:31:e8:35:f5:fe:94:b5:b0:de:ba:5d:47:cd:c9:
                    96:ec:07:94:f0:e5:bb:a7:c6:df:c2:d2:f4:b7:2d:
                    a3:65:06:eb:ab:5f:d8:98:14:24:4b:af:6c:32:a4:
                    cb:ac:a8:a2:14:f5:22:6f:ff:46:f0:9d:e5:e1:f1:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:67:56:85:DF:10:DE:EB:70:8A:F2:A8:E6:24:01:3B:10:3D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8208::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:d8:fd:7f:25:f3:90:57:0b:13:b7:7f:8b:0b:d8:85:d4:
         8f:89:55:dc:c1:f1:f1:f8:73:2f:ec:d8:2a:37:98:e4:39:48:
         0f:19:62:59:7a:52:2d:ed:28:2f:f1:89:27:53:77:fd:72:37:
         16:76:d7:8d:73:db:5a:c1:a5:69:04:50:de:4d:a8:a2:3d:1e:
         2a:e0:0c:04:94:0e:c1:df:1d:d8:7e:cb:ac:e1:83:1e:dc:13:
         7c:d5:e9:02:ee:60:04:0d:b6:a5:c7:98:18:9e:72:11:d5:d0:
         df:70:34:9e:76:37:cd:f5:39:3f:d9:9e:ce:b8:26:09:7a:67:
         c5:e3:70:52:ed:c3:61:8c:8f:18:c3:77:5b:c4:56:57:8c:6a:
         e0:62:0e:98:75:21:86:7f:56:14:87:0c:d5:3e:f3:bf:43:0e:
         6f:a3:6d:f4:07:00:2c:b6:1c:d3:2a:fc:f7:20:dd:e9:db:48:
         3b:05:81:eb:fd:f1:56:b1:4d:b5:da:4d:cc:f5:72:8d:d6:81:
         06:ce:15:d5:ba:9d:df:d3:6c:e2:86:a8:2b:15:0f:7f:f8:98:
         86:68:fa:49:5c:4e:f3:a5:11:26:7d:9f:bc:92:56:ab:ca:a0:
         69:a8:f1:36:c3:0e:7e:c3:c6:01:7f:18:4c:44:aa:93:f4:10:
         60:69:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----