Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
File:                     8bd691ab-32da-3d38-8979-813d9a45a73c.roa (raw, json)
Hash identifier:          E/lDCIditDUyRG4iki9QlTnI4Aa3829KkKjuIoz8/CY=
Subject key identifier:   C2:31:EF:4D:B6:C5:C0:04:DB:B6:6C:6F:03:97:AC:9F:A5:25:47:14
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849287E635324BEB8C76692B380
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     399122
IP address blocks:        74.123.98.0/24 maxlen: 24
                          2602:fcd5:1a::/47 maxlen: 47

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:63:53:24:be:b8:c7:66:92:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=404a7aa9-a943-43fe-922c-2cb97b6710b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:a9:df:d2:2e:db:ca:d2:5f:07:aa:3a:5a:
                    38:97:cd:19:be:b3:52:85:5c:54:b2:19:a9:b0:4c:
                    32:18:e8:31:87:af:c6:bf:8a:2c:35:56:0e:ba:0c:
                    c7:41:40:d0:59:dc:35:d5:2e:b6:23:68:d3:c7:e1:
                    1e:70:f6:4b:e2:a9:be:9e:37:20:48:ae:9f:74:84:
                    52:7c:2b:c4:aa:cd:63:06:24:bb:27:75:c6:b8:fa:
                    11:af:7e:11:75:df:2b:a6:9c:19:df:c5:43:e5:d0:
                    38:b4:b5:2f:22:46:da:fe:2d:4a:80:25:e6:8d:6f:
                    0d:f5:e6:61:74:67:83:e1:bc:e1:bc:ce:bb:37:6a:
                    57:dd:e6:3d:ff:e8:52:15:60:88:78:94:68:2f:83:
                    d7:cc:f0:0d:15:9d:e7:0e:04:47:aa:eb:9d:4d:08:
                    3a:14:aa:c5:8f:9c:61:3f:f5:be:c2:eb:63:f3:14:
                    50:4d:66:3b:32:dd:3f:47:49:ae:7f:85:44:30:4c:
                    39:9c:e2:7a:d3:3b:0b:18:9c:d3:7f:d4:25:59:58:
                    16:7e:b7:a8:d8:d5:f5:54:3e:b3:73:75:40:7a:b7:
                    69:80:0f:34:f9:55:68:07:e7:e8:b7:88:22:50:17:
                    71:90:10:86:d7:be:02:24:3a:5a:00:c0:28:e2:35:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:EF:4D:B6:C5:C0:04:DB:B6:6C:6F:03:97:AC:9F:A5:25:47:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.98.0/24
                IPv6:
                  2602:fcd5:1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:48:41:02:91:13:7f:2a:04:37:48:c7:a1:9e:83:1a:61:
         18:39:1e:0e:0a:ef:a4:9e:a9:2a:7d:f9:80:2a:fd:ce:9f:19:
         f9:1b:ba:8a:e7:76:2a:68:31:d1:96:3b:18:f6:ae:bc:94:b5:
         3d:dd:ec:10:48:a5:cc:a1:20:c8:6e:11:37:b0:c8:27:e3:8f:
         1b:82:89:9d:9f:b2:a1:75:61:c0:01:29:50:17:96:42:27:e5:
         a8:bd:f4:fa:bf:f3:89:7c:6e:97:1c:e6:da:e9:6e:3e:8b:6e:
         f8:48:48:5a:86:ea:52:89:24:37:b9:2c:52:7c:cf:f6:9c:bf:
         da:74:fb:2c:08:cb:57:ad:e0:9f:7d:fb:1e:ae:92:1a:0d:c0:
         75:95:e9:f0:58:fa:09:d5:66:b6:5f:67:d9:7e:c9:f5:7c:e7:
         11:69:c8:ea:13:74:94:a7:4a:22:57:a6:24:29:43:43:ab:8b:
         40:99:d3:39:cc:2c:55:e0:c4:8d:7a:2f:a5:4f:88:bc:60:e0:
         2d:fc:c5:33:f4:14:c4:81:9e:08:44:26:27:bb:30:a2:3e:89:
         3b:44:46:a1:1b:00:6e:a0:d5:05:b9:31:27:37:20:54:14:6c:
         cf:e4:ed:75:4b:d5:2d:f4:05:78:26:17:15:ef:0a:75:b1:3d:
         74:a9:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----