Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e52fd7be-ae07-3b8f-b9a4-7690aef50dcf.roa
File:                     e52fd7be-ae07-3b8f-b9a4-7690aef50dcf.roa (raw, json)
Hash identifier:          mY2zjRr03no8dIFW1DKCuZSZbYIQ25Zp+TJuUJn8W18=
Subject key identifier:   0A:CA:32:EC:73:2A:E8:DF:3A:BF:02:72:0A:A3:6F:97:86:22:CF:F4
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584902EC284C33E5166062790070
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e52fd7be-ae07-3b8f-b9a4-7690aef50dcf.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     398549
IP address blocks:        2605:dd40:8990::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:28:4c:33:e5:16:60:62:79:00:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=6d498816-8fab-47ff-93a0-13c4b72917b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:ea:a7:74:21:3f:15:17:94:41:1e:6a:a4:
                    d1:f0:82:ce:02:29:c8:5a:30:f3:1b:82:4d:91:66:
                    f4:0b:1d:23:a3:2e:b7:66:2d:54:74:23:34:97:ce:
                    c9:44:a3:78:05:93:b0:29:4b:d9:44:0a:4c:51:b4:
                    e9:de:8a:f2:37:29:74:02:51:49:9e:68:ec:1b:7d:
                    8d:66:af:2d:82:50:34:e5:0a:5c:2f:e1:be:58:16:
                    c2:c8:26:3d:78:19:b3:b4:00:7b:20:33:3b:00:89:
                    13:a0:dd:5c:66:f4:1d:ce:2e:36:a7:c4:42:36:5c:
                    fb:74:fd:51:da:89:fc:25:37:c4:6a:0b:44:e6:94:
                    bd:c1:6c:34:c5:c2:00:0e:58:ef:82:03:f6:59:99:
                    45:25:8e:62:d7:1f:fb:71:95:35:c5:f9:4a:cb:80:
                    90:ed:c4:5f:58:84:0d:91:c9:ac:90:40:02:2a:10:
                    cb:6c:34:70:b6:20:f5:9c:3f:eb:71:f2:54:0f:b8:
                    0f:99:6d:cf:49:1d:a2:3e:69:ac:3e:3b:90:24:a4:
                    07:bf:cb:d9:22:6a:5e:40:79:57:98:e8:98:d9:b2:
                    17:82:6e:55:9c:0a:95:07:6a:e5:8a:04:d9:3c:50:
                    e1:2e:bb:24:d7:97:a1:1f:07:6f:7d:cd:3c:ff:ab:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:32:EC:73:2A:E8:DF:3A:BF:02:72:0A:A3:6F:97:86:22:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e52fd7be-ae07-3b8f-b9a4-7690aef50dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8990::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:e8:07:d2:86:2f:54:48:3d:62:62:3f:a8:03:34:ab:5b:
         fa:43:d8:6b:fd:e6:3a:ee:d4:14:1a:89:85:ae:14:f8:f9:da:
         67:9a:37:d8:5a:ba:e2:f1:f6:a4:da:85:dc:08:1c:3c:28:42:
         ba:df:4c:97:ce:69:67:d3:a2:74:81:47:ec:17:c4:e7:53:33:
         37:30:e7:0c:d0:eb:1a:2e:c7:d0:20:5a:cd:1d:29:d2:d5:79:
         13:4b:19:49:9d:cf:ac:16:01:73:cb:28:46:bd:7d:8f:6f:84:
         b5:af:5c:27:73:90:12:b6:ec:31:98:a8:28:89:08:d7:5d:1c:
         a9:b9:14:a7:26:99:6b:77:cb:41:24:f0:f3:a6:21:66:02:eb:
         da:45:95:99:12:ee:17:0e:18:59:e4:46:6b:e0:e6:34:a1:f8:
         ec:22:d9:47:a1:fc:a9:78:2b:84:e5:6a:a8:57:75:09:50:37:
         18:32:ef:35:0a:be:0d:56:21:b9:fe:8a:75:ab:42:f0:bd:91:
         7c:e2:be:c2:7d:4a:08:76:7f:d1:06:31:3f:61:b9:7e:03:34:
         5f:b1:76:a2:30:ed:e0:95:90:44:4b:11:d7:57:d1:d7:5f:a6:
         1b:f3:8f:2d:8c:2a:82:10:e4:61:c2:5d:c2:06:71:bf:50:6b:
         9f:46:04:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7ChMM+UWYGJ5AHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NmQ0OTg4MTYtOGZhYi00N2ZmLTkzYTAtMTNjNGI3MjkxN2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujPqp3QhPxUXlEEeaqTR8ILOAinIWjDzG4JN
kWb0Cx0joy63Zi1UdCM0l87JRKN4BZOwKUvZRApMUbTp3oryNyl0AlFJnmjsG32N
Zq8tglA05QpcL+G+WBbCyCY9eBmztAB7IDM7AIkToN1cZvQdzi42p8RCNlz7dP1R
2on8JTfEagtE5pS9wWw0xcIADljvggP2WZlFJY5i1x/7cZU1xflKy4CQ7cRfWIQN
kcmskEACKhDLbDRwtiD1nD/rcfJUD7gPmW3PSR2iPmmsPjuQJKQHv8vZImpeQHlX
mOiY2bIXgm5VnAqVB2rligTZPFDhLrsk15ehHwdvfc08/6vckwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFArKMuxzKujfOr8Ccgqjb5eGIs/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvZTUyZmQ3YmUtYWUwNy0z
YjhmLWI5YTQtNzY5MGFlZjUwZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgXdQImQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAsP6AfShi9USD1iYj+oAzSrW/pD2Gv95jru1BQaiYWuFPj52mea
N9hauuLx9qTahdwIHDwoQrrfTJfOaWfTonSBR+wXxOdTMzcw5wzQ6xoux9AgWs0d
KdLVeRNLGUmdz6wWAXPLKEa9fY9vhLWvXCdzkBK27DGYqCiJCNddHKm5FKcmmWt3
y0Ek8POmIWYC69pFlZkS7hcOGFnkRmvg5jSh+Owi2Ueh/Kl4K4TlaqhXdQlQNxgy
7zUKvg1WIbn+inWrQvC9kXzivsJ9Sgh2f9EGMT9huX4DNF+xdqIw7eCVkERLEddX
0ddfphvzjy2MKoIQ5GHCXcIGcb9Qa59GBEE=
-----END CERTIFICATE-----