Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ddef24a0-1602-33e9-912e-2c8fdbec706d.roa
File:                     ddef24a0-1602-33e9-912e-2c8fdbec706d.roa (raw, json)
Hash identifier:          vRW868baxQUMSipSnbsW+vPmahWi59Efiz9lrVOt8ag=
Subject key identifier:   57:0C:37:A4:0B:9D:E6:36:CC:BE:8E:AA:7A:93:B7:B4:C5:28:44:E3
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584902EC098E8DF8E85E71FEFC80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ddef24a0-1602-33e9-912e-2c8fdbec706d.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     6453
IP address blocks:        2001:5a0:3602::/47 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:09:8e:8d:f8:e8:5e:71:fe:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=71082116-c3e1-4bb9-8786-aed2a8e4aedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7a:fe:78:8c:dd:b1:fc:ce:7f:b0:8a:49:d4:
                    47:be:95:ba:bd:c4:5c:ae:e5:22:fc:80:d3:31:70:
                    66:42:b6:29:e9:25:9a:9a:ab:cd:63:12:c8:0f:24:
                    41:60:d6:37:58:57:70:f9:f8:06:3b:24:06:5b:6e:
                    37:40:1e:53:9a:02:7e:ae:80:1c:69:9f:cc:16:c7:
                    fa:e4:df:36:b3:0f:10:b5:31:d5:03:80:c0:44:b3:
                    a3:f6:04:86:41:f1:51:de:1a:aa:57:a3:3a:f1:9d:
                    82:2f:8f:c5:17:52:e1:7f:26:3e:dd:3a:34:04:5b:
                    21:23:d4:4e:b9:a8:12:27:ad:5c:5f:74:bc:1b:41:
                    f4:2d:da:a5:c1:ab:49:62:3a:37:1d:66:5a:ff:48:
                    e2:18:ee:d6:0a:40:a8:ae:57:1b:87:60:4d:e9:ad:
                    8a:45:9f:fa:36:ce:48:77:ee:7e:ca:9c:32:2a:3f:
                    e5:fb:3b:53:92:3a:5b:cb:5a:30:00:f2:5e:2f:57:
                    32:47:b4:d3:58:f0:2c:4c:67:ff:51:af:c3:d0:8e:
                    e6:96:c9:5b:d6:63:1d:e0:2e:37:25:8f:9a:21:96:
                    b1:90:63:f0:da:f7:4b:2b:03:30:ff:44:b5:54:79:
                    9d:00:c1:09:70:3c:e3:c3:29:91:12:25:b9:46:dc:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:37:A4:0B:9D:E6:36:CC:BE:8E:AA:7A:93:B7:B4:C5:28:44:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ddef24a0-1602-33e9-912e-2c8fdbec706d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0:3602::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:78:78:e5:6d:a9:50:1f:29:eb:2f:0e:99:4b:f0:a5:f1:7d:
         da:12:5d:96:1d:97:9d:7f:28:0d:cb:cd:d6:94:9a:92:68:68:
         4a:78:c2:6f:51:a2:04:08:68:b0:61:9f:d4:a7:54:12:92:29:
         55:5e:ea:62:b8:83:92:f5:d3:28:98:15:37:0e:95:0e:44:8a:
         a4:75:21:2f:77:7a:c4:82:c0:d0:be:69:5b:f4:0c:8c:29:33:
         c9:38:27:ec:86:1b:f0:00:a9:72:3f:a8:40:71:ce:9c:3c:2f:
         59:59:04:ce:0a:b8:6f:af:02:a4:27:20:c1:ba:46:ad:da:4b:
         9f:d5:23:55:3f:ca:30:54:a4:e2:9d:1a:6d:9a:30:51:63:78:
         ad:94:a8:ad:01:68:ea:ca:d8:ec:05:be:61:86:71:97:f5:03:
         d6:2d:a5:a2:f9:3b:d8:8c:16:30:22:1a:d5:95:1f:30:47:94:
         d9:7f:08:8a:d7:56:07:4a:de:17:61:a4:65:48:19:5e:f6:6d:
         72:81:0b:15:7b:15:4f:5e:cc:05:9f:0f:a8:2f:52:21:68:08:
         67:13:95:17:9b:21:8d:b0:e6:28:18:89:0b:6f:52:a6:0d:ee:
         1e:2d:c1:2c:e0:2e:84:46:db:71:19:95:13:3b:04:0d:a0:27:
         0c:b3:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----