Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
File:                     253cdd3a-36e0-3298-9d6b-13208042593e.roa (raw, json)
Hash identifier:          hyIFQyLRlu8L5AskaK9L5vCaLz0O+uSKEfTyyx8aK68=
Subject key identifier:   58:1B:B9:D3:1C:CA:F9:C6:B6:5A:BA:F9:B9:53:83:31:51:E9:41:4F
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F432858496A19A24E43E2FF4449EC1080
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a2:4e:43:e2:ff:44:49:ec:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=3aff920b-c5a9-4500-9e54-1b00bc7eee25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:11:5d:ff:9d:8d:7f:a8:72:66:6e:54:b2:
                    cf:de:85:2a:3f:05:35:07:73:65:25:ea:ec:82:9e:
                    7d:31:c0:0d:8a:47:6d:c2:39:04:b9:ba:40:5f:eb:
                    5f:85:90:de:dc:93:61:16:26:c8:85:8b:bc:18:4d:
                    45:11:b6:5c:44:5b:8e:ef:b3:6a:57:2d:4e:91:5a:
                    61:0b:65:59:5e:30:8a:3d:e0:6c:63:9f:d9:60:46:
                    d9:1a:9f:01:85:9e:00:f5:56:bf:5c:86:4d:e2:b2:
                    28:65:95:c0:0f:6d:44:4c:f3:21:5b:fb:0b:b5:cb:
                    50:5a:98:0a:96:b3:49:82:9d:a2:ce:47:d7:17:b5:
                    e7:cc:3a:6d:b4:37:e1:75:12:68:f1:3f:40:cb:fb:
                    10:03:d8:2e:9a:62:f1:df:9a:9c:4c:09:fe:3a:09:
                    ac:4c:a6:93:31:94:11:ab:17:18:32:a8:47:28:27:
                    e5:53:01:21:ae:26:47:ff:d8:7f:d8:2b:22:a9:8d:
                    a4:f7:3e:8f:09:13:39:ea:61:84:44:8a:57:56:0f:
                    c5:fc:0d:a4:e8:9e:ee:2a:2e:dc:7f:ed:94:d8:a2:
                    b3:35:c3:a3:5a:8a:58:40:01:e0:ac:b3:02:16:1b:
                    c2:20:0d:19:fb:40:24:7b:9f:e8:70:0f:ca:89:8d:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:B9:D3:1C:CA:F9:C6:B6:5A:BA:F9:B9:53:83:31:51:E9:41:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:24:48:dc:fd:cb:91:32:95:69:35:21:07:53:af:30:ce:
         10:5b:6f:50:94:bc:9d:12:f2:c9:29:b8:19:b5:c8:71:21:7e:
         c6:35:0e:76:ed:e0:28:62:4a:33:0d:91:cb:5c:f4:37:ab:87:
         e5:a2:73:64:38:03:00:b3:23:85:0d:2e:63:f5:96:95:ca:9a:
         6f:4f:ce:e4:50:f2:0d:f9:d9:fb:2e:0e:a2:48:83:7a:ee:bf:
         5b:ed:bb:0b:c3:a5:1d:39:ae:f5:e8:3e:c4:ed:e0:a6:a1:60:
         eb:19:bb:62:cd:da:d8:e4:18:ec:a6:e1:43:ad:3c:b7:8e:8f:
         95:21:78:c1:79:b9:7a:e4:bf:16:e0:d7:d0:99:2b:2f:47:be:
         05:41:97:09:5c:94:c1:d9:32:24:9d:71:d7:16:9a:bf:a2:20:
         38:8c:fb:39:e4:37:28:a1:f5:c7:24:87:32:7f:c3:24:dd:ad:
         a4:55:79:e4:af:58:66:b0:18:66:78:41:fd:01:18:0d:02:ce:
         b6:68:a0:58:83:94:6d:d8:b7:94:db:5d:64:ed:39:4a:4d:60:
         38:1b:ca:f3:f0:45:b4:3c:fe:c7:82:96:5d:3b:d4:9c:b7:6d:
         92:b0:9b:ab:6a:29:74:fd:25:e3:65:a4:bd:af:cb:5b:cd:10:
         ab:0f:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----