Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
File:                     3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json)
Hash identifier:          5fjtjd/cCxWxpAlhFrOXQ/s48MpFGsFq/ACo/vcRNog=
Subject key identifier:   08:0E:95:D8:77:B3:C8:D9:80:F0:B9:8F:5C:BD:6A:B8:91:3E:B6:7E
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F432858498339F1E8535F784E004A9800
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     14230
IP address blocks:        2607:fb20::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f1:e8:53:5f:78:4e:00:4a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=578d2938-f074-4d08-ad01-a75336a8f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:77:50:6f:0d:d2:09:51:af:e4:1c:c4:60:
                    14:c3:1e:94:23:62:8d:f9:27:58:12:13:41:8d:e6:
                    a5:da:a3:31:9b:90:7a:98:99:9b:b8:f8:eb:12:76:
                    19:0d:d3:88:61:c4:ee:6b:b6:f0:29:bf:3a:5b:d1:
                    74:a8:bb:5e:7f:ac:cf:c8:7a:49:c2:82:54:d4:19:
                    3b:af:59:95:af:00:ad:15:5d:f8:76:1c:ed:76:f4:
                    c4:68:50:79:1f:b4:04:51:61:76:b7:a3:8d:15:bc:
                    62:6e:67:26:04:ce:c8:5e:0a:4f:3b:9b:73:a5:cf:
                    0d:bf:fa:c8:d6:74:a0:83:f7:8e:ce:09:50:ad:28:
                    68:7c:91:ff:3e:13:5a:80:d7:cd:d1:18:03:eb:b7:
                    85:b8:bf:08:96:b9:40:65:d4:e7:2d:06:6f:78:9e:
                    b3:64:42:88:4a:f9:65:4e:e3:fb:b1:92:e4:18:8f:
                    00:c2:92:51:d1:08:84:23:50:a7:ec:df:30:11:a9:
                    5b:f0:42:fe:92:8e:86:54:fe:29:de:1c:82:2a:d8:
                    78:b8:e3:03:6f:6b:3c:98:32:c7:b4:0b:a2:78:57:
                    39:3a:fc:cd:23:1a:7a:23:ce:a7:22:25:87:10:c1:
                    10:b7:90:71:44:35:54:98:cd:f2:82:a2:39:b0:f4:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:95:D8:77:B3:C8:D9:80:F0:B9:8F:5C:BD:6A:B8:91:3E:B6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:49:27:97:56:15:49:98:e2:c2:a9:e8:cc:4a:cb:e2:82:
         0f:82:52:bf:76:93:0f:9b:0f:50:92:88:67:6e:21:b6:3d:04:
         10:55:50:37:98:52:c0:ac:56:24:37:8f:77:e2:b3:71:a5:f0:
         27:e5:d1:b3:b5:bd:88:0c:87:6f:f6:00:da:2a:59:a3:43:76:
         9a:93:18:9c:cb:2d:69:4e:43:50:d2:8b:6c:03:43:b0:12:64:
         e2:d6:24:68:b2:2f:e0:62:92:b9:42:0c:61:83:03:f4:87:e4:
         97:ab:1f:01:57:23:5c:6b:d8:26:f8:72:4f:65:ef:9d:96:54:
         8b:37:5e:92:5a:69:7b:09:51:14:09:11:7e:d5:c6:c8:d8:ff:
         9f:0a:ea:23:33:35:ac:b4:28:1c:bd:b7:09:63:09:ae:2d:51:
         1a:f8:02:51:72:13:dd:58:54:05:31:3d:a6:9e:06:67:4d:f8:
         1a:0d:6f:5c:93:2e:45:2b:9c:ab:b2:4c:bf:87:c4:4c:a1:da:
         1f:8f:aa:0d:18:fe:65:24:4d:6c:b3:a8:fc:33:e8:74:bb:13:
         1b:e4:61:cb:2f:0a:97:07:c6:9b:5d:8f:d4:84:56:e1:2c:f8:
         8b:f7:51:42:6c:cb:13:99:84:36:e8:3e:e7:c3:4d:4d:aa:30:
         ee:d2:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----