Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa
File:                     f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa (raw, json)
Hash identifier:          rwjyIriPX2ZLMfqLmDlfXolTaB0mKiRqa6cbkwTwzFo=
Subject key identifier:   9F:9A:23:A2:A5:EE:D1:A2:E9:C8:D2:3B:AD:D4:C6:78:5B:D9:15:CE
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F432858494F93E81A2F0FCF1D56097660
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     199203
IP address blocks:        2602:f9a9:3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:e8:1a:2f:0f:cf:1d:56:09:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=83fc3fc7-3288-4c5c-b6e9-2bfce33ba7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:8a:4f:73:c7:fd:6b:11:18:f6:cc:05:5d:
                    c0:46:d3:c8:b0:8d:3c:58:47:6a:ec:90:82:ca:e5:
                    a9:d2:e3:06:a5:6f:fc:47:9b:3a:ce:56:35:08:65:
                    c1:44:73:a8:e2:1a:06:31:31:fe:cf:72:e0:3b:ef:
                    8d:cf:ac:58:b4:83:dc:80:5a:a5:8d:e8:c0:d6:cc:
                    8b:e1:a8:6e:55:5c:f5:14:a5:c8:7a:ef:33:8c:c6:
                    18:8f:b4:d9:a3:c7:66:6a:ac:31:8f:77:e9:f9:07:
                    43:f3:98:85:d4:e8:ac:e7:29:9c:49:9b:27:e2:7c:
                    c7:7e:88:72:0f:0e:22:c0:60:83:ee:3d:a8:72:0d:
                    d4:f6:28:e7:f9:e8:d1:bf:52:c4:25:9c:e8:58:d6:
                    e1:e6:c8:3f:4d:b6:d6:b2:89:f0:a6:ca:c7:c8:f1:
                    5b:33:ac:c8:18:7c:93:a9:e4:48:93:e1:f0:e7:a7:
                    76:3b:02:b4:9f:e8:54:a7:9e:15:94:37:cf:28:de:
                    7a:9d:bf:14:c4:74:71:3e:66:fa:6f:18:e9:24:ee:
                    4d:03:76:e6:f0:7f:d1:e3:84:c7:9f:fb:b4:cb:00:
                    c3:bf:0f:ea:d8:21:a4:b9:e4:5e:c2:7e:6a:b1:b6:
                    32:b4:29:e9:a4:61:69:1a:bf:3b:51:bc:46:12:cb:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9A:23:A2:A5:EE:D1:A2:E9:C8:D2:3B:AD:D4:C6:78:5B:D9:15:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:f4:db:08:18:ca:3f:34:1c:dd:7d:02:55:c8:4e:64:3e:
         07:7d:bd:a8:5f:ba:f5:0b:91:94:f7:fc:37:82:44:d7:15:97:
         47:64:54:eb:35:5b:44:5c:8b:b7:71:78:90:43:9e:7a:27:b1:
         b5:db:20:19:d8:d6:d9:8a:2f:a3:65:0e:e9:a8:41:b0:88:9b:
         da:0b:11:2d:c4:9d:e6:21:1b:ef:47:9b:ff:1c:49:8c:cb:cf:
         6f:95:1d:e9:8b:39:6e:b9:87:20:10:b2:58:58:06:0c:e9:5b:
         e9:08:2f:7b:78:9e:e9:33:66:81:fa:84:aa:00:1a:99:4f:0c:
         f4:03:b4:e3:4d:a9:dc:a9:32:1b:55:5d:96:fd:43:1f:7e:f8:
         92:3f:f8:0b:48:1c:73:91:99:44:2f:36:bb:c4:cb:42:6b:f8:
         58:68:10:8a:a1:5c:3a:68:47:eb:24:8b:77:d8:1d:09:08:76:
         5b:6e:e6:45:f8:96:b6:5d:d0:17:a1:b6:7b:80:78:c0:49:93:
         2b:e3:75:3d:f6:52:42:89:a0:68:12:76:44:47:0d:33:87:23:
         8c:b6:14:5b:ad:66:f3:75:a0:f3:21:7f:e9:5d:6b:d5:83:76:
         61:36:ce:cf:ea:00:ac:53:3b:a6:c2:fc:27:02:10:dd:ef:bb:
         f8:7b:36:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPk+gaLw/PHVYJdmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk
ODNmYzNmYzctMzI4OC00YzVjLWI2ZTktMmJmY2UzM2JhN2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqKT3PH/WsRGPbMBV3ARtPIsI08WEdq7JCC
yuWp0uMGpW/8R5s6zlY1CGXBRHOo4hoGMTH+z3LgO++Nz6xYtIPcgFqljejA1syL
4ahuVVz1FKXIeu8zjMYYj7TZo8dmaqwxj3fp+QdD85iF1Ois5ymcSZsn4nzHfohy
Dw4iwGCD7j2ocg3U9ijn+ejRv1LEJZzoWNbh5sg/TbbWsonwpsrHyPFbM6zIGHyT
qeRIk+Hw56d2OwK0n+hUp54VlDfPKN56nb8UxHRxPmb6bxjpJO5NA3bm8H/R44TH
n/u0ywDDvw/q2CGkueRewn5qsbYytCnppGFpGr87UbxGEssgMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ+aI6Kl7tGi6cjSO63Uxnhb2RXOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvZjIzNGE3YzEtMjdmMy0z
YzZmLTlhOWEtMGJjM2E3MjBkZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5qQAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABWL9NsIGMo/NBzdfQJVyE5kPgd9vahfuvULkZT3/DeCRNcVl0dk
VOs1W0Rci7dxeJBDnnonsbXbIBnY1tmKL6NlDumoQbCIm9oLES3EneYhG+9Hm/8c
SYzLz2+VHemLOW65hyAQslhYBgzpW+kIL3t4nukzZoH6hKoAGplPDPQDtONNqdyp
MhtVXZb9Qx9++JI/+AtIHHORmUQvNrvEy0Jr+FhoEIqhXDpoR+ski3fYHQkIdltu
5kX4lrZd0BehtnuAeMBJkyvjdT32UkKJoGgSdkRHDTOHI4y2FFutZvN1oPMhf+ld
a9WDdmE2zs/qAKxTO6bC/CcCEN3vu/h7Nk4=
-----END CERTIFICATE-----