Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
File:                     373e5114-6177-369e-a731-f44084ebbd41.roa (raw, json)
Hash identifier:          1jVOv4dpdjnb8lClT3v2o7YYERXenxVHhO4fCVvrEd4=
Subject key identifier:   E7:C1:CD:5D:5A:CB:54:C9:81:7B:76:4D:BC:70:F3:B7:FA:D7:68:10
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849350EA998F6F4AB85C4B0C800
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     30133
IP address blocks:        2001:4f8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a9:98:f6:f4:ab:85:c4:b0:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=690efb75-2663-4165-99ba-6ceecdb6af5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:0a:67:6e:7a:f9:40:48:4e:0d:85:78:c2:
                    2d:2c:93:20:26:d4:35:b9:d5:cd:49:ca:3e:e3:dd:
                    ca:34:4a:5d:b7:c0:6d:8c:a6:ce:90:c4:da:b8:c4:
                    1a:34:53:da:2f:f0:73:e5:79:97:18:19:f0:59:da:
                    7f:9f:c2:d3:55:19:96:1c:3a:6a:1b:43:20:52:37:
                    7d:3b:65:b5:75:d2:05:3c:41:3d:2c:4c:28:f5:c5:
                    57:ba:4a:7d:e8:0c:7c:7e:d5:7e:a3:4c:9b:70:f8:
                    1c:58:8e:8d:a8:b0:a4:51:b2:fe:30:16:9d:b0:a4:
                    c1:15:60:82:af:c0:32:6f:fd:b0:fb:14:c7:fb:bd:
                    d3:91:1a:2d:a7:e8:96:51:69:39:f5:87:08:c7:e9:
                    7c:1b:ae:00:5f:97:a8:c5:85:36:60:13:90:27:2c:
                    23:aa:46:ab:31:f9:9c:b8:6a:d6:5a:14:bd:3a:ae:
                    f7:cc:70:b9:b9:c0:76:08:e6:4a:b0:cd:51:65:3b:
                    fd:04:d4:c3:51:76:0e:42:6d:60:49:82:36:ba:8f:
                    26:6a:7a:41:bf:09:b7:eb:2c:a8:24:f2:80:52:75:
                    20:df:a2:03:77:c8:e6:50:4b:e9:00:69:3f:36:43:
                    33:15:99:5c:8f:c2:d9:05:0a:1b:c0:88:8a:2d:35:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:CD:5D:5A:CB:54:C9:81:7B:76:4D:BC:70:F3:B7:FA:D7:68:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:6e:70:e3:a6:eb:1d:f3:6d:ad:36:e7:08:a7:5b:6c:35:
         53:4a:ae:09:75:e5:fd:28:97:d1:de:e0:f7:72:14:19:86:0b:
         1c:74:13:27:ef:35:d8:87:0d:1e:3c:7d:5d:56:47:6f:a2:3d:
         69:a8:7b:5d:25:13:58:b8:1c:48:a9:c0:00:30:2f:91:7b:6a:
         9c:10:3e:8b:b4:96:7f:60:3e:78:d6:09:f7:4c:03:58:de:1f:
         67:a5:31:90:f8:24:2a:97:9d:8d:aa:55:c4:60:31:fd:c5:74:
         0e:a0:db:ab:8f:f5:be:65:00:f5:72:ba:a7:d4:4f:8e:51:19:
         ee:dc:90:34:30:50:ff:fd:55:2a:73:be:7c:b1:dd:4d:a9:39:
         ca:93:03:25:76:fb:4b:be:81:16:ad:a1:eb:52:26:07:8c:ad:
         3d:1a:18:79:78:87:66:52:3a:cc:54:3f:a6:ca:ca:c9:4f:d4:
         2e:0f:0d:42:a9:a8:65:8b:5f:04:cd:c7:8e:e0:d8:c2:48:bb:
         63:a3:23:cf:ce:0b:e1:79:94:9c:d9:fa:c0:65:47:07:bc:a1:
         28:23:a5:78:45:b7:39:3d:cc:51:e5:e3:aa:45:34:55:ee:89:
         91:bb:6b:e4:ee:fe:ca:a8:aa:02:7a:47:66:bf:7c:c3:a5:28:
         42:94:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----