Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/a0d81ea3-b231-387f-bbf8-1c82ac3c29e1.roa
File:                     a0d81ea3-b231-387f-bbf8-1c82ac3c29e1.roa (raw, json)
Hash identifier:          1b3D7bJVK31mLx1txDjX5NQipCqVytwvHbHTsTbJUWw=
Subject key identifier:   4F:4A:B3:FC:BA:04:D9:5B:99:A5:32:0B:6E:71:1D:A9:6A:82:0D:35
Certificate issuer:       /CN=afc34129-e2da-4364-a9df-4c6c4db3d903
Certificate serial:       010D0C9F432858493ED3D706ECAA534C6CDE8790
Authority key identifier: FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/a0d81ea3-b231-387f-bbf8-1c82ac3c29e1.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     399829
IP address blocks:        2606:6840::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d7:06:ec:aa:53:4c:6c:de:87:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc34129-e2da-4364-a9df-4c6c4db3d903
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=760b6a55-bf6c-479f-a0ce-727c5889c2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:e7:a1:f4:73:cc:ed:16:87:70:20:b9:c7:
                    73:7d:c8:2b:69:1b:cf:70:c7:9b:4a:0f:f1:67:0c:
                    81:ba:66:d0:25:47:d6:26:c3:c4:af:64:89:c1:19:
                    32:28:7c:44:18:64:ee:f7:63:11:1f:08:e6:41:1f:
                    12:40:6d:95:6b:f2:c2:e9:0f:81:7e:b8:2e:c7:3b:
                    60:54:5a:7b:01:c9:cc:43:75:2a:e2:8f:8b:5e:6c:
                    d4:f4:5d:3b:c0:11:a8:4d:ad:bd:25:3e:fb:bf:c4:
                    7c:b1:16:6d:11:98:7f:fb:3f:d5:43:61:06:db:b8:
                    f7:b1:af:f4:d1:5f:38:8e:98:4a:89:f0:2a:0f:e3:
                    89:f0:26:cc:fe:93:7e:6c:31:e3:71:a0:71:27:9b:
                    f9:17:24:fb:91:8d:f3:7f:c5:f6:e0:22:14:77:6d:
                    45:bb:f0:5e:9e:3b:25:a8:8a:26:3a:e8:f1:77:62:
                    9d:f2:8b:1c:6a:4b:c3:f2:ae:8e:87:3e:74:87:82:
                    9f:6a:d5:c0:b3:64:54:3b:52:27:73:78:41:b5:21:
                    aa:7c:5a:92:a7:84:67:1d:54:d2:ad:c9:97:87:46:
                    fc:0d:b8:68:d2:97:e2:12:cc:02:71:8c:91:61:2b:
                    b6:5d:b7:dd:64:8d:5c:e9:13:df:8e:92:48:4c:14:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:B3:FC:BA:04:D9:5B:99:A5:32:0B:6E:71:1D:A9:6A:82:0D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/a0d81ea3-b231-387f-bbf8-1c82ac3c29e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:a7:59:4f:07:6c:41:e2:fd:a4:7d:dc:8f:0a:82:49:be:
         45:0f:5b:a2:86:ee:fd:ea:ed:e2:0f:30:60:9a:24:86:0e:7b:
         37:73:72:2b:a2:e0:67:79:4f:9b:33:cc:84:a4:e8:ea:c1:77:
         45:19:22:0f:e1:b1:72:6d:df:5c:79:de:a7:a7:71:49:e2:5d:
         26:92:c1:17:b8:c4:2d:3e:7a:8d:17:6f:40:b7:97:ff:e0:46:
         94:92:30:df:8d:99:14:ce:7a:83:91:97:d1:4d:bf:83:cf:16:
         d5:e5:4b:9d:cc:97:2a:e1:53:6f:96:1c:ef:2d:eb:a6:3a:7d:
         fd:ac:3d:8f:35:96:64:4d:f5:63:f9:94:52:6f:f4:f2:3c:20:
         f5:26:6a:c4:af:3f:64:28:9d:59:7b:9f:7d:42:30:bc:1e:51:
         31:2a:43:42:66:61:95:1e:66:2b:2d:21:b2:95:ec:72:ba:2d:
         5f:5a:15:80:18:85:89:62:6c:c9:c8:ce:dc:3c:c4:ed:d5:08:
         74:01:bc:a9:10:c1:bb:62:28:97:dc:f1:77:ef:af:f8:58:bc:
         c9:10:91:b6:2c:4c:2f:cf:da:c1:08:6f:9b:48:fe:d7:5a:25:
         49:a1:0e:04:e6:ae:51:10:5b:f2:d5:0f:82:5a:90:b0:89:c8:
         2e:f4:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----