Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24b47f0b-22dd-3043-ba0b-37b24a583677.roa
File:                     24b47f0b-22dd-3043-ba0b-37b24a583677.roa (raw, json)
Hash identifier:          aqHHXSp0Q0d3ir6QkA5gku9sCMp3USBOljoaByL0Pl4=
Subject key identifier:   17:61:AC:DF:BA:E9:AE:2C:82:89:D3:C6:CA:DD:E4:C7:2B:83:52:C1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470FCEFCA4BB888F1420C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24b47f0b-22dd-3043-ba0b-37b24a583677.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397243
IP address blocks:        2001:503:e239::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0f:ce:fc:a4:bb:88:8f:14:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3554923f-62ca-400a-be41-19ec5ae14fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:a1:58:3b:f9:ca:da:f0:ec:e7:d4:de:b3:
                    10:c1:1d:f4:ba:71:d2:41:d5:05:aa:8a:9e:86:4f:
                    68:c7:d8:2a:fe:67:c4:f4:7a:cf:6b:b3:b1:15:6e:
                    a4:d1:e8:73:59:c4:2f:eb:6e:6f:b9:5b:f5:95:93:
                    56:51:f4:25:d6:79:70:91:88:bb:52:61:61:76:c1:
                    20:7c:5e:99:24:e4:56:a3:94:c8:00:2d:b8:cb:47:
                    47:1a:02:c1:22:4b:e9:ce:42:bd:8e:9c:14:79:55:
                    0b:c4:9e:46:7d:fc:16:46:d7:91:a1:3f:71:05:85:
                    b7:ed:18:6b:72:4b:4e:0d:3a:be:37:1b:4e:4f:81:
                    12:23:fc:fa:12:3b:60:cf:49:6c:d7:f7:43:95:f1:
                    7c:33:b6:fb:93:61:c8:4a:1c:9f:50:f5:99:78:15:
                    c8:ab:d4:2a:34:a8:fb:20:dd:0f:59:82:d1:5b:f6:
                    f1:1d:72:90:f3:75:b5:d1:f0:e5:65:24:43:e9:75:
                    af:e8:80:82:fb:fa:f8:a1:7b:c6:31:66:f8:50:ad:
                    57:d0:80:b9:cc:f7:71:9f:6a:e7:60:aa:34:a6:44:
                    98:fa:da:05:74:75:8c:c1:42:25:10:7a:fc:b6:e0:
                    6b:ce:2a:bc:e3:51:6f:2b:0c:e4:e8:10:e8:08:cd:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:AC:DF:BA:E9:AE:2C:82:89:D3:C6:CA:DD:E4:C7:2B:83:52:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/24b47f0b-22dd-3043-ba0b-37b24a583677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:6c:76:c5:bf:cf:c3:5e:43:70:6d:6f:f9:23:a9:fc:2e:
         0c:22:80:44:bd:fa:9e:50:a0:30:4b:47:fe:3f:1f:b3:90:ff:
         00:f8:ef:0b:5c:22:75:17:f5:1c:2f:d2:4c:65:5e:aa:57:c4:
         77:6a:53:0f:29:a8:4e:7e:d1:64:46:4b:91:4e:e5:b7:6d:18:
         d4:95:4c:7c:95:0f:fc:71:aa:2b:af:97:57:a7:f7:a6:ad:40:
         41:6b:25:ae:42:01:16:d9:4c:77:4d:4c:39:61:8c:3e:75:89:
         88:db:c9:cd:ca:0a:2d:3e:d8:75:bb:96:85:01:48:bd:7a:ad:
         53:6c:c0:38:4f:8c:37:e2:fd:68:c2:fa:6f:94:84:90:b2:2a:
         9a:58:c7:f5:8c:9b:c0:3c:86:8f:a4:10:80:bb:e7:db:5c:c3:
         34:91:aa:c7:d8:26:cb:24:e3:a1:87:73:fe:f8:f8:b2:af:69:
         d3:68:0c:8b:7a:50:ac:59:e2:16:07:bb:94:ac:d5:60:e6:a3:
         ec:76:ca:ac:ae:1b:ac:41:54:78:13:cd:42:40:e3:f5:61:66:
         bd:17:1c:d4:98:ca:9d:9d:3f:80:84:dc:d6:f6:ee:ae:28:b2:
         96:47:77:53:32:91:ec:c6:68:e7:da:fb:af:05:fd:55:62:d1:
         22:c4:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----