Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/71faeec4-a8f1-3550-a9ac-b86605163fc8.roa
File:                     71faeec4-a8f1-3550-a9ac-b86605163fc8.roa (raw, json)
Hash identifier:          lQv4hVSvR5y7/qLeXTT6magXT1s5EUHaHGIV0IA716Q=
Subject key identifier:   D7:B0:BA:17:3C:28:98:C0:64:1F:12:E6:71:94:61:D2:F1:6D:47:F4
Certificate issuer:       /CN=2654343f-7862-4859-8638-b9c2008b3151
Certificate serial:       010D0C9F43285848F22C6AB6608422A7ECDAB8C0
Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/71faeec4-a8f1-3550-a9ac-b86605163fc8.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     13737
IP address blocks:        2602:f99f::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6a:b6:60:84:22:a7:ec:da:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=bd72709f-20ce-4b78-a961-76e9b1a71297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:0a:b4:48:4d:52:e2:68:26:b3:d6:3a:ff:
                    fe:3d:85:2f:53:86:e6:55:5a:c1:63:3e:fe:a0:a7:
                    d7:fd:05:ce:47:d6:2d:e3:ea:82:de:23:b4:5a:c9:
                    8e:46:ec:7b:d2:74:d5:97:8d:0d:b3:f5:96:5f:ea:
                    93:10:2e:9c:09:de:60:77:cb:b5:67:67:aa:97:f6:
                    fd:c1:6d:09:2e:6a:d7:ec:ca:ae:58:31:b9:28:a9:
                    5e:bc:94:1c:ad:cd:a8:ea:56:dc:76:7a:cd:3c:a2:
                    68:30:8b:66:fe:df:19:d7:54:68:7a:80:3c:5c:a2:
                    91:18:5b:37:e7:92:ee:62:1a:8d:1c:12:0f:f1:9f:
                    5f:c6:8f:9b:4e:5f:88:f8:6a:fa:43:ed:79:d3:37:
                    97:85:ee:c6:ef:d3:2e:65:9b:0d:4d:90:e8:82:f2:
                    9a:9d:d6:d3:43:59:f7:da:e3:4b:38:16:56:41:2c:
                    f2:6e:3f:64:45:9d:4a:31:db:ad:a2:5c:e0:fb:8c:
                    fe:4b:6d:d3:6b:f4:50:42:7a:25:66:77:04:37:a1:
                    0c:f2:9c:42:49:cb:3f:38:9f:b1:9f:37:36:8d:38:
                    e7:c2:54:58:07:49:64:79:aa:0f:90:63:8a:73:c4:
                    25:7c:62:ed:01:92:65:aa:ec:cd:56:05:4f:43:ba:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B0:BA:17:3C:28:98:C0:64:1F:12:E6:71:94:61:D2:F1:6D:47:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/71faeec4-a8f1-3550-a9ac-b86605163fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl

            X509v3 Authority Key Identifier:
                keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:6f:00:d6:c4:47:8c:06:ff:4c:c8:49:29:38:c1:2b:e1:
         ed:7f:f5:1b:9d:df:67:11:d7:75:5b:ba:f1:e4:83:68:32:79:
         bf:ee:c6:c2:82:a7:16:d5:eb:57:d3:95:ca:42:0c:49:4f:a8:
         7d:2e:c2:e4:fa:cf:91:e7:88:3c:ac:55:7e:0a:e2:e9:d5:b8:
         ab:d0:a2:e4:97:f9:43:b8:5d:6c:38:23:55:17:7f:7e:93:9b:
         bc:5c:2c:38:09:7d:17:06:f5:23:be:6b:21:1f:b0:de:a4:22:
         ef:0e:2f:0a:c0:40:cd:ae:89:69:9b:90:ea:72:54:ae:dd:e3:
         78:d2:15:72:f7:f3:7b:5b:35:48:58:e9:b1:ac:fc:c3:68:cb:
         ec:a9:f2:eb:98:43:e8:60:5f:e8:b9:fd:0f:81:df:31:fc:a3:
         ea:46:1d:f0:c3:83:25:8d:7e:53:e3:68:28:33:f6:44:4a:5e:
         c6:a2:98:62:a0:36:02:45:05:3a:c9:1f:90:1c:96:5c:25:64:
         e5:48:12:d9:f0:a2:45:87:00:3b:1e:5c:92:b3:f2:fd:07:8e:
         39:5b:af:47:1d:07:5a:1b:a6:03:e9:2e:d3:7a:88:65:53:6c:
         14:8e:a8:2c:29:5c:25:eb:a2:f0:02:b6:52:1c:6b:2c:0a:7b:
         ca:41:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----