Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
File:                     98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa (raw, json)
Hash identifier:          fSR8hAfbCo0bxoKS5DC4iKG/jvGtX2Qr6dK+O0tDpKE=
Subject key identifier:   23:CF:CF:D9:13:C6:6F:17:97:DA:49:7D:63:AE:E3:DD:58:63:69:06
Certificate issuer:       /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial:       010D0C9F4328584981D45399C8710DACCD383300
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     30330
IP address blocks:        2602:803:5001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:53:99:c8:71:0d:ac:cd:38:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=19178d4e-9d91-47f3-bad9-2e7485662c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:57:48:f1:0a:e6:1e:8c:a1:8b:15:d0:b2:
                    3c:6a:4d:eb:ce:93:64:5a:a3:bf:b7:69:37:bf:26:
                    5a:95:8e:38:6b:e9:fb:ef:8e:86:f8:6a:13:c4:dd:
                    39:37:38:86:d7:f1:91:73:b3:2b:d2:01:e7:23:9a:
                    a6:24:3e:e0:2f:79:1f:92:33:4d:d5:a8:17:e5:5f:
                    9b:7d:ae:fe:ba:a9:f0:d6:80:88:71:79:81:8e:19:
                    2f:9a:f7:4a:51:7c:44:7f:48:f5:22:90:19:01:d2:
                    a4:a4:16:fe:b3:59:c3:91:e6:03:1d:6a:ae:86:08:
                    c3:ee:eb:34:3a:82:d9:d2:f0:9f:93:47:56:a6:16:
                    ea:be:99:ff:64:ec:5b:aa:1e:8f:f8:fc:74:7c:b7:
                    7f:0b:6f:b0:fc:e4:82:94:a9:f2:ef:04:a1:f8:bd:
                    81:a4:37:4a:40:c7:f4:e9:6c:72:db:6a:9c:15:f7:
                    b2:af:ce:e1:22:81:d1:a0:25:73:c5:df:74:09:4a:
                    8b:d9:7c:d0:fd:a3:9e:f6:e0:aa:ab:fa:8a:7e:46:
                    09:c0:dd:b9:39:07:42:9f:2c:fc:f8:1b:61:74:a0:
                    90:ad:1a:81:8d:ce:54:1f:82:bc:83:4c:3a:ed:06:
                    98:0d:a3:c1:84:61:dd:0b:1d:dc:c3:11:18:02:b0:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:CF:D9:13:C6:6F:17:97:DA:49:7D:63:AE:E3:DD:58:63:69:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl

            X509v3 Authority Key Identifier:
                keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:0d:ce:61:31:a8:9c:a8:bd:07:fa:0c:e2:87:59:84:f9:
         75:ef:2f:30:9c:f8:eb:5b:bc:4f:e2:58:5a:de:25:51:ac:a5:
         bf:30:c2:98:4d:e2:74:62:59:27:7c:68:9d:2e:f3:73:01:07:
         c4:11:cb:b0:fc:5d:05:39:a5:17:06:36:99:3d:43:d4:aa:6a:
         d9:0e:3e:4c:84:14:51:f9:c7:f3:7c:88:b1:c0:f6:4f:c0:c6:
         51:5a:8e:d8:96:28:50:28:33:5c:f5:b6:86:12:15:a5:26:b5:
         f1:3b:be:43:c1:6b:8c:10:a8:0b:a5:3b:0d:33:33:15:51:bf:
         7e:fc:84:a7:dd:8d:1f:8f:56:30:54:c3:e5:e6:7e:69:c4:13:
         68:7b:95:b0:10:29:d1:6e:98:f6:df:ee:0b:d3:5b:a6:1c:48:
         b6:7f:f5:ca:84:72:b5:5f:47:d0:8f:f6:3f:99:70:9b:ad:c0:
         33:23:ca:bb:31:6c:45:49:b0:1b:d5:37:d8:2c:20:45:2d:39:
         87:56:12:2b:87:e3:f9:07:11:2f:72:43:d8:02:e0:79:bf:48:
         59:32:eb:10:6b:84:71:e5:70:00:d4:8e:9e:0c:32:e8:31:a2:
         93:5f:9f:0f:c3:a7:af:ba:17:b7:c6:08:5b:7f:35:45:2e:c9:
         a3:cb:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----