Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
File:                     205510ec-fe65-33cc-a2dc-11dde1186393.roa (raw, json)
Hash identifier:          mr2A1Z1efwv516rjGtEAUSE11Zj2GUaLzp/6we2nBgY=
Subject key identifier:   88:87:06:C7:39:0B:57:2E:CF:EB:9C:B0:BF:73:E4:43:7D:8F:CF:B8
Certificate issuer:       /CN=068fe099-ec29-42a6-8cc8-92597523d41f
Certificate serial:       010D0C9F4328584950F96DCAC6FE37717CDE04CB
Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     33263
IP address blocks:        2602:f9d8::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6d:ca:c6:fe:37:71:7c:de:04:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=00c0f25a-6eca-4af8-b28c-15b3d219a829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:e7:3a:23:83:12:34:ca:9f:ab:80:13:39:
                    64:ef:93:eb:18:6f:7e:b6:c7:45:85:e7:56:8d:6e:
                    a1:99:ac:3c:71:29:fe:01:2f:d0:38:ea:83:e4:a1:
                    61:4e:c4:d8:59:1f:ed:62:58:a9:5f:2f:91:0d:a7:
                    ff:84:ba:dd:bd:99:9d:59:70:09:ad:50:02:6b:68:
                    fc:bc:9e:b3:ce:c6:76:95:7b:9d:c4:06:2b:12:25:
                    0b:09:11:2e:28:b8:3d:22:2e:66:57:64:15:65:55:
                    03:f3:23:3f:76:e1:21:db:fa:a1:1b:91:31:d0:f3:
                    04:1d:22:ff:35:1b:ff:36:3f:d9:5c:a0:05:e2:d2:
                    df:3b:9f:02:1d:0d:25:36:a1:c8:a1:b5:7c:02:34:
                    40:58:2a:da:f1:71:62:d6:ef:c5:2a:fe:10:21:a8:
                    7c:9c:d9:09:26:1d:da:b5:d8:54:49:3d:88:c6:50:
                    90:50:03:76:52:8a:c8:c4:1b:2d:5f:8b:44:0d:dc:
                    77:d3:ae:7f:33:3b:3b:60:7c:d7:c9:c7:b2:67:81:
                    cd:45:d8:b1:79:c8:ef:e9:d1:e4:f0:fa:2f:0b:84:
                    04:d3:49:46:e1:13:58:d9:90:90:98:4b:d8:eb:3a:
                    00:38:a6:5e:58:3d:b5:8f:eb:64:61:43:55:68:77:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:87:06:C7:39:0B:57:2E:CF:EB:9C:B0:BF:73:E4:43:7D:8F:CF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl

            X509v3 Authority Key Identifier:
                keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:0c:99:e0:cd:44:e0:b6:f4:6d:b0:26:fd:7b:b3:cd:2b:
         d2:0c:73:07:f8:04:e1:b0:02:e2:f7:b2:a8:10:06:9a:aa:e1:
         bb:2e:3d:47:f6:5c:b1:11:ba:4d:ea:31:eb:81:0b:91:dd:34:
         46:64:8f:30:38:80:a2:c2:3f:a0:cd:fc:55:7f:72:33:e6:a2:
         6f:67:5f:53:f6:d0:41:c3:31:a4:95:f1:9a:e5:b1:64:86:82:
         8b:f8:ff:30:ad:27:09:8d:9a:15:d1:26:2d:f1:ab:d3:14:e9:
         43:e9:f3:e4:66:74:2d:15:9c:0e:13:49:4a:e8:c5:f0:de:bf:
         4e:84:93:57:43:0e:71:00:32:89:99:de:88:d7:ba:0b:45:99:
         c4:90:06:e9:d9:cb:c5:6d:0f:00:9d:5a:e7:09:ff:b2:f6:69:
         6e:41:b8:11:1c:cd:94:79:63:a5:6a:86:ee:5a:f9:41:c8:52:
         94:5b:88:ec:0b:94:54:46:80:e7:03:95:f7:c1:32:07:3d:15:
         6f:fb:e0:69:1c:b3:af:a6:ed:a3:b9:12:3b:d8:ab:b4:26:61:
         05:9a:df:f5:de:4d:9f:4b:c0:7a:20:80:fd:78:88:3c:49:16:
         34:46:21:26:24:e9:d6:47:d6:6d:5e:b4:18:2e:ff:ac:40:25:
         5f:bb:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----