Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5c99b4f5-83a2-39b2-bbfd-008bfd1ae528.roa
File:                     5c99b4f5-83a2-39b2-bbfd-008bfd1ae528.roa (raw, json)
Hash identifier:          DSJPftvXu7KoSiFLVhR5b2TKUjo28Txvc+WlJXv2uk8=
Subject key identifier:   7E:13:45:06:DB:13:BE:AD:C4:D7:EC:52:22:B5:4C:6C:81:DE:42:3D
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849806F193DDFDDDF393E2A8D80
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5c99b4f5-83a2-39b2-bbfd-008bfd1ae528.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     399122
IP address blocks:        2602:fcd5:14::/47 maxlen: 47

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:19:3d:df:dd:df:39:3e:2a:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=c1703f8b-26d5-49e8-b8e5-7133f55d1c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:9f:71:26:08:37:f7:54:f5:ef:36:f7:1a:
                    41:45:e3:df:e8:59:a9:4a:5d:7c:f8:0b:7b:c9:f6:
                    19:a0:8e:c6:9e:f6:b2:c0:43:01:c0:eb:d7:cd:b1:
                    28:f0:3b:9f:1f:ea:6a:c4:40:07:ba:9a:e0:6b:a0:
                    99:7f:b0:5d:78:76:c2:96:ab:ee:43:fa:7e:be:87:
                    b2:2b:f8:6e:07:35:ba:8d:13:16:12:8f:8d:9c:f6:
                    bd:77:e3:f8:36:d9:31:12:22:8e:6d:c0:06:81:d4:
                    1d:31:fc:c9:78:f9:b2:0f:6e:e4:4d:94:cf:ee:56:
                    b4:8c:65:11:82:6a:bd:bb:1c:29:49:be:e1:d0:87:
                    a7:23:6c:47:1d:ba:2d:21:ec:cf:49:83:01:36:fa:
                    80:3b:c5:26:91:30:ab:c9:41:4b:1b:3b:c1:17:fd:
                    10:ae:12:ad:f2:51:70:30:49:80:f7:22:34:33:2a:
                    d4:50:e4:41:df:4a:16:bf:fb:32:87:10:29:9e:91:
                    7d:5f:c5:01:38:da:15:9f:ed:c9:37:3a:6d:bc:ad:
                    03:31:1b:cf:90:3d:7a:7d:39:10:57:d1:35:2c:fd:
                    78:a4:eb:cf:f5:17:72:9b:92:a7:a2:2d:66:84:73:
                    1f:1a:3e:a4:dc:41:8d:3f:46:d5:11:6b:a6:52:aa:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:45:06:DB:13:BE:AD:C4:D7:EC:52:22:B5:4C:6C:81:DE:42:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5c99b4f5-83a2-39b2-bbfd-008bfd1ae528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:14::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:28:11:58:f6:d9:be:89:87:68:cd:fa:c0:d2:03:41:65:76:
         5a:48:7e:02:e4:c8:52:ff:67:d9:4b:b6:d7:44:2b:7a:9e:8a:
         25:03:cb:02:e1:30:5c:c6:17:d5:14:c5:63:ac:ad:b4:1a:52:
         18:98:a0:bc:6a:67:1b:d2:7b:2a:de:18:4d:11:be:0b:5f:e6:
         1f:38:33:b5:6d:98:f4:28:32:0d:63:06:33:e1:51:67:2e:c6:
         21:f3:2f:31:2e:a2:53:d7:5f:49:04:49:ae:3f:b1:62:71:4e:
         b0:90:61:05:84:2c:8a:37:56:76:52:99:7e:f0:04:a5:b7:4f:
         e0:ae:00:79:56:0f:57:4e:8a:ad:b7:0c:3d:8f:18:bd:92:3d:
         08:e8:40:7e:02:a6:39:ea:52:aa:37:1d:9e:74:8d:de:87:16:
         47:8e:05:34:3d:88:46:92:f4:b3:f2:c7:a4:83:f0:55:25:07:
         7d:77:39:df:24:15:ed:e3:b3:df:af:a4:59:a7:34:ef:d1:b4:
         c9:a1:d0:6f:f8:80:a2:7c:f7:86:28:c2:ad:4b:7a:9a:56:ab:
         39:4d:68:25:a2:9d:13:27:44:ec:dd:50:65:ad:37:c2:91:f9:
         b7:58:ef:a2:1d:6d:04:6a:e4:81:26:21:a7:23:c4:50:b2:74:
         d1:be:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----