Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
File:                     b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa (raw, json)
Hash identifier:          nPfKx6xISJgkUWBvah9rUQmGZ6HHajoOeSd+HTlphMo=
Subject key identifier:   38:80:2F:8D:35:86:25:5B:45:08:C9:EF:1B:F4:7A:F0:C5:82:5E:01
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584981D45854438D1FAAD4C413C8
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     396982
IP address blocks:        2620:1b2:6d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:58:54:43:8d:1f:aa:d4:c4:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=c24d66fd-1c61-4250-b529-038268bd42da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a5:e2:57:44:94:a9:fe:00:e8:1b:72:d1:ca:
                    b3:0e:81:7c:63:9e:f9:8f:a3:91:be:73:9d:a6:92:
                    53:3f:72:b7:89:d8:68:d0:f2:ae:51:33:99:79:a1:
                    ca:cf:ab:11:89:33:07:43:db:26:a4:26:55:ca:6c:
                    e0:46:44:0a:e8:e0:0d:8b:a0:e8:1a:df:4e:7a:36:
                    3d:90:4f:ef:8a:50:a1:d0:dc:2f:9e:a6:cb:32:5f:
                    68:7c:79:9e:3f:87:d5:90:75:02:b0:0f:d6:09:e3:
                    21:a9:23:ce:c9:e9:74:21:12:33:9f:e8:eb:d6:ce:
                    fb:20:49:a7:57:98:bd:ee:6b:bf:9c:22:e0:b3:fd:
                    f9:ed:5c:e1:f4:e0:a3:a8:63:c4:f2:9b:63:c4:39:
                    21:32:3c:4e:a0:f7:75:76:e3:fc:dc:0d:ba:5f:a2:
                    23:d4:c8:7e:0e:bb:10:39:0d:48:d4:2e:d4:06:7a:
                    30:06:0c:dd:dc:86:3f:4a:38:2c:3e:97:ee:2a:9b:
                    e2:c5:94:47:76:34:6d:70:13:ec:38:cf:54:7c:ff:
                    59:ef:09:62:95:9e:c1:da:42:b3:71:f9:1e:6f:38:
                    ec:58:54:74:45:41:ab:b7:1a:bd:fe:ed:ee:9f:31:
                    6e:1c:b9:42:43:c8:c8:2a:8f:e1:b8:c7:2f:97:96:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:2F:8D:35:86:25:5B:45:08:C9:EF:1B:F4:7A:F0:C5:82:5E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:c9:4a:ee:0e:d8:62:c6:4d:fb:e2:3c:e6:3d:c4:5e:64:
         37:d6:f8:a5:eb:cc:18:e6:d1:4f:4e:42:bd:4f:9d:b7:bb:6b:
         06:fe:e9:b0:5e:96:7a:06:10:fa:e8:3e:ff:48:6b:5a:91:dd:
         4c:ae:73:e5:88:5d:6f:56:8d:29:91:4e:73:2f:29:e0:d4:a1:
         73:f2:2d:50:1a:e7:02:f1:8f:2d:0d:51:fd:2d:87:24:e0:f1:
         92:f4:24:3a:ad:75:f2:9f:7c:21:98:cf:bb:ec:dd:e9:0f:14:
         7e:3b:47:a7:f8:e2:22:d2:a8:fa:b5:6f:04:00:0a:88:bc:7e:
         6a:2a:21:9a:65:d5:c0:e4:d3:a9:54:14:53:f4:4d:dd:94:1c:
         ab:24:b8:95:f2:12:12:70:a6:0e:74:26:32:c6:30:57:42:8f:
         76:42:d7:79:bc:8f:9b:28:cc:6e:b0:c2:b4:bc:04:96:d8:4e:
         c8:78:dc:76:40:d6:ab:60:cb:92:f8:76:64:9e:ab:4e:ec:63:
         74:7a:01:21:60:81:36:8f:78:8a:70:f6:ad:59:c2:dc:94:93:
         67:2c:ca:bd:fe:20:04:24:10:30:94:f4:f3:1c:e2:f8:8d:ba:
         50:f5:ca:26:98:e8:3d:e6:64:52:32:a6:49:1e:8f:35:81:0e:
         1d:99:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----