Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
File:                     a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa (raw, json)
Hash identifier:          Ev/jrL4ItSA/zN/ewqXPJr8fLgdzuAujKorSXsPnpDA=
Subject key identifier:   B3:92:26:25:22:B9:C5:43:EF:79:54:7D:85:B7:9A:54:A8:3E:3D:7D
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F43285848E2D11B3CA1E7DE6955ECA700
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     36001
IP address blocks:        2605:bbc0::/32 maxlen: 48
                          2606:3d00::/32 maxlen: 48
                          2606:ab80::/32 maxlen: 48
                          2607:580::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1b:3c:a1:e7:de:69:55:ec:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4d2beb1c-bc3a-434a-97e6-bda33670dfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:9e:e7:42:d5:57:63:63:26:da:85:11:0e:
                    0b:74:e4:38:8b:ee:b1:68:f7:2b:8f:de:35:a2:76:
                    d6:35:43:69:af:ee:8c:db:ec:f0:ab:97:a3:cd:84:
                    e6:5b:71:e3:ef:6f:fb:cb:ca:81:f0:3d:66:f0:1b:
                    b4:ca:84:2f:e4:8d:40:18:0b:cd:fc:99:4a:83:2f:
                    8a:1b:40:cc:15:a5:56:ec:77:54:24:ef:b9:b6:54:
                    30:90:5e:44:fe:20:02:3e:1f:7b:b0:d6:1e:23:40:
                    9d:b3:e8:78:f8:df:a9:7c:9e:1d:76:68:b7:e8:5f:
                    cb:26:5e:72:a6:7a:e5:5e:24:71:2d:d2:36:f0:8d:
                    42:eb:b4:ce:e0:7a:75:29:d1:28:bf:bd:68:66:e9:
                    64:d2:ea:68:32:97:78:24:f8:77:05:6d:02:5c:f4:
                    b8:fb:61:b0:53:b6:eb:65:a6:30:c1:81:80:17:59:
                    45:ad:e0:ea:e3:57:db:64:fb:b4:5b:ce:d7:5d:81:
                    5e:7d:b1:d2:f5:c3:54:4c:41:43:8e:08:8b:90:07:
                    6a:50:39:d9:f9:90:2e:ae:9e:87:5d:3d:f6:ed:9d:
                    46:7a:75:a6:aa:81:ea:c3:39:97:ff:35:e9:fe:05:
                    b6:5a:cb:83:c9:81:e9:a8:e7:6c:99:b0:bf:5e:39:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:92:26:25:22:B9:C5:43:EF:79:54:7D:85:B7:9A:54:A8:3E:3D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32
                  2607:580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:f4:27:b2:df:7b:65:ae:c4:fe:3f:66:a1:27:4c:49:f3:
         77:df:4b:36:43:9b:db:cd:5b:0a:39:0c:27:ff:8e:78:b6:34:
         f3:b9:11:ba:09:8b:ca:12:6b:77:b7:b4:e1:d1:18:eb:01:47:
         3e:36:06:78:7e:dc:a7:38:5d:a3:d8:5e:2f:2b:a1:1c:0f:d6:
         a9:33:24:85:36:d0:96:81:de:c8:6b:fc:b3:21:e7:e4:a9:9a:
         e8:20:a7:b1:64:d9:f8:fd:c5:36:59:62:61:c2:0a:dd:0a:da:
         2c:4f:22:a4:e8:dc:db:03:73:e5:2f:d5:31:56:4b:25:30:77:
         e6:c6:3f:d6:e5:88:67:a5:a0:1f:93:52:f6:77:59:c4:02:e1:
         ab:a8:07:1f:29:15:08:5d:21:d5:d7:c6:59:b5:3e:77:50:22:
         9a:af:13:2d:94:55:45:b7:d0:27:62:5c:19:73:12:d8:c8:14:
         88:13:b2:2e:45:0b:36:7f:f7:36:10:36:fb:40:fa:88:7c:fc:
         37:87:ca:c5:6c:78:3a:d3:a4:09:a0:6f:29:6e:4a:8f:c8:3c:
         5f:d0:8d:9c:fe:1f:0a:6b:63:12:0b:ec:a1:4c:5f:29:f5:ea:
         04:cf:f6:36:b7:28:53:60:f1:9b:8b:09:fd:bb:e5:3e:32:c9:
         a9:e1:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----