Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa
File:                     b640e40a-1d4d-3423-99a0-815a476ab16e.roa (raw, json)
Hash identifier:          5AOD2PzKuABLYoZwabUeUhBjmi76IP97+gtLcjH9EkA=
Subject key identifier:   3A:3D:79:AE:1E:9D:B0:B9:86:C2:84:9C:B3:1F:92:D9:E5:F8:66:6E
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F432858498339EF3E53DD3DD0DE916040
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     14230
IP address blocks:        2604:9b00::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ef:3e:53:dd:3d:d0:de:91:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6a3234ac-3193-4bd6-9d29-a10a0130efd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:ef:79:f3:7a:76:2e:52:ff:f2:30:a6:64:
                    83:9b:a6:91:0b:31:40:16:b1:ca:e0:b1:cf:49:d2:
                    43:5b:e6:c0:b9:0c:25:2f:36:e3:8e:5d:04:2b:c2:
                    c8:db:d5:49:b5:f3:86:91:8a:e1:8c:20:97:de:56:
                    2a:c9:a0:13:45:44:13:8c:71:c2:ef:02:26:80:49:
                    87:7a:34:53:9a:5a:42:42:4b:60:50:85:3e:b4:6d:
                    95:60:c6:e4:47:f1:ee:08:12:84:ac:13:91:0e:fb:
                    0d:f4:96:1e:fe:6d:6a:b0:b1:d1:5f:df:da:4f:04:
                    1a:2d:fb:3c:d6:6d:ae:34:ad:39:65:c3:ed:c3:0c:
                    78:ef:ce:c7:63:73:33:aa:32:b4:e8:36:b1:70:d5:
                    c8:e8:2b:c4:c8:88:49:18:2a:a0:e1:59:31:88:63:
                    41:31:97:55:e2:12:65:a0:ac:60:ae:5f:47:c8:4d:
                    bc:82:63:b9:30:5a:bc:55:bf:2f:ca:f1:bb:78:65:
                    74:d8:89:cb:8a:e3:e3:41:75:67:f2:40:46:f0:3c:
                    93:1a:b0:d9:8d:ed:67:d2:75:37:19:9e:b7:93:be:
                    b4:11:1a:b0:ea:7f:18:b8:6a:68:10:6b:d0:5b:00:
                    53:be:4d:1d:22:54:62:3d:8e:d6:c5:d7:59:69:7b:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:79:AE:1E:9D:B0:B9:86:C2:84:9C:B3:1F:92:D9:E5:F8:66:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:2a:18:ab:38:d8:21:9b:9f:65:14:6d:ff:32:29:d2:92:
         ef:c8:05:f3:35:bc:60:42:c2:11:b4:a8:7b:a4:59:c1:ff:e8:
         25:1b:df:d3:89:64:d6:57:ff:0c:2b:24:ba:18:27:a6:45:67:
         76:45:98:31:af:f8:e5:3f:06:5c:66:9e:de:2c:05:5e:f4:d9:
         60:4f:6f:f3:e2:50:04:b8:64:18:64:f6:04:68:18:76:ac:4f:
         4d:01:13:bc:04:fa:62:a0:80:86:4b:44:a4:48:39:67:02:fd:
         bd:b0:fd:a9:d5:d3:c1:91:5c:ac:d8:7a:62:66:8d:94:a9:c3:
         e0:cb:6f:68:f2:f8:74:43:5f:7e:ef:71:fd:08:f6:7a:1b:51:
         99:71:cd:a0:61:5b:f9:75:39:13:0e:5d:ea:5b:8d:68:02:c1:
         01:ca:16:a5:5f:58:82:4d:de:a4:a2:39:e7:e1:93:77:bd:71:
         63:9b:cf:4d:87:c9:77:24:72:50:c6:c4:5b:fc:0f:10:e1:00:
         c3:8b:9e:0a:a6:a0:46:48:b5:dc:b6:ce:03:a2:6f:05:4d:56:
         ed:eb:d5:a2:6b:6f:7b:22:eb:af:52:76:63:27:4b:36:f2:5d:
         4b:ed:b6:67:76:4f:49:2e:05:4f:a1:5d:1b:58:16:ef:b6:62:
         d8:29:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----