Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
File:                     7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json)
Hash identifier:          CSJjJkbCZRvUWieYquWFMUUoVQ7m7T5JW0nEibhv9fo=
Subject key identifier:   28:0C:5A:C4:1F:7B:28:33:3D:81:F3:99:03:27:8B:7E:C9:9E:8C:52
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858497DA4737D32057B7532ADD140
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     11810
IP address blocks:        2620:98:c000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:73:7d:32:05:7b:75:32:ad:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=30a898b8-24be-4190-93b4-a5fb9c42cf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:55:44:45:18:c6:f0:ed:3e:41:45:79:71:
                    10:1d:65:b7:4f:fa:3e:6d:2e:d1:de:a9:76:0e:0d:
                    dd:8d:bc:01:86:0f:3e:ab:b8:ba:37:3f:93:b1:76:
                    6b:33:68:23:a3:65:4f:73:01:bf:8d:0e:12:96:9a:
                    a2:f4:03:b4:67:27:9a:5a:b8:61:a3:ce:c9:d7:e8:
                    e2:15:18:da:f6:1e:58:9d:b4:91:8f:38:a2:d3:4c:
                    0a:72:d8:55:8b:7b:14:d7:74:b9:aa:4b:58:8b:70:
                    fd:01:b1:ab:eb:0b:60:73:a0:d1:53:c7:c9:2f:a5:
                    3d:f0:ac:10:8a:d4:30:7b:f7:fa:a6:42:e9:bb:f3:
                    8a:ec:20:d6:88:14:59:f9:24:00:45:9c:3b:19:fc:
                    c9:ae:e5:cd:f0:df:84:a2:63:ea:5f:11:34:d2:76:
                    fc:2d:dc:03:40:13:eb:94:16:ed:cb:46:ad:5d:58:
                    8c:d1:9f:90:54:f1:18:71:19:39:2d:98:46:4e:e9:
                    c7:64:0d:6c:c5:53:e6:c9:51:79:b0:e4:69:bc:00:
                    25:7d:47:2d:e0:f0:db:93:68:f5:9a:30:d8:4a:f8:
                    82:aa:b5:e4:fa:e4:ff:e3:ce:44:0f:e8:fd:46:18:
                    64:c4:fa:24:5b:25:74:5c:7f:17:87:7d:c8:65:9e:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:5A:C4:1F:7B:28:33:3D:81:F3:99:03:27:8B:7E:C9:9E:8C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a5:12:68:69:f8:69:f6:ba:e3:f7:be:bf:a7:83:6c:3c:ae:
         64:d0:82:e2:d5:4f:a0:30:1a:bc:49:22:1e:1c:a9:ad:02:9f:
         0a:49:8b:f3:6d:f1:e6:82:a5:6f:a0:9f:c5:91:0f:67:fc:76:
         92:98:da:cb:83:f2:a4:f7:9c:fb:19:2d:80:7e:ac:a6:9a:f1:
         b3:99:7c:07:ed:71:b8:d6:97:e4:d5:55:74:fd:b3:95:a0:eb:
         cc:da:18:81:5e:25:4a:ff:2d:91:be:c1:97:0c:e8:d3:6f:5d:
         a3:9c:0d:e6:07:91:80:40:a7:a7:29:05:87:ce:62:33:be:5f:
         41:1b:fe:62:69:c3:21:e7:d9:5f:fe:3b:a4:7f:4e:87:3e:d6:
         cf:72:a4:79:84:2a:6b:f1:44:4d:8b:d9:42:f8:ca:58:7f:60:
         aa:ba:d9:42:b3:c0:d8:c1:30:cf:2d:ff:f9:ed:11:50:30:9d:
         b0:f9:e1:db:d5:42:ac:dd:c3:32:be:fe:0c:4e:de:74:1c:da:
         48:1a:a8:4d:87:eb:fd:67:78:50:49:16:7d:fc:51:76:e0:d6:
         ae:14:5e:2c:ec:b4:64:20:27:ad:05:df:9a:2d:eb:15:65:13:
         5e:33:c9:d1:5f:df:af:4d:6a:ba:e8:f6:c1:08:81:4b:a5:5b:
         e8:9e:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----