Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/80962491-32ac-359b-b5ec-98d1bc5fc3a9.roa
File:                     80962491-32ac-359b-b5ec-98d1bc5fc3a9.roa (raw, json)
Hash identifier:          vys9dK0VyjkhlFsBf+MZs/MuR+Ky3U7ye1DuJzqHxBo=
Subject key identifier:   F0:C1:80:C8:C3:71:82:53:25:87:F8:36:1F:4A:9C:6D:D8:91:B7:F3
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285848E0065A303C2DDAD394C71550
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/80962491-32ac-359b-b5ec-98d1bc5fc3a9.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     46846
IP address blocks:        2607:f368:b004::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5a:30:3c:2d:da:d3:94:c7:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=5d9d49d8-560b-4dfe-a654-d99dd4d3f3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:62:c2:ea:49:8e:e6:a4:b5:c4:67:3c:ba:
                    06:cd:b7:4a:cb:39:35:75:23:c8:3c:d1:f9:65:0d:
                    c4:db:e7:e7:1c:a5:20:e6:b5:2c:d0:33:8b:7d:86:
                    34:f2:ae:06:d0:a4:82:05:c5:bc:b9:38:0a:ca:0b:
                    47:60:5f:aa:fc:81:a1:6b:4c:2e:ff:cc:7c:e2:86:
                    5c:bf:a9:41:23:4b:25:6f:5c:57:b9:3e:50:77:91:
                    bc:ef:81:eb:d4:99:78:e6:c6:eb:51:8c:80:d4:93:
                    7a:ce:88:ed:18:f8:e8:3e:49:db:e4:dd:9f:9c:b2:
                    8c:06:a5:16:f0:ef:cc:c2:0c:1c:c1:1c:0f:34:91:
                    af:52:1e:fd:27:0f:b3:a0:7a:8a:90:48:02:a2:cd:
                    d4:9f:76:f6:30:a5:92:7d:fc:0e:05:af:f3:e9:a3:
                    29:25:c7:25:83:7e:a6:60:bd:84:b0:d3:a4:e9:46:
                    dc:6f:51:78:ec:9f:5d:70:47:9f:f0:1e:43:75:ac:
                    fe:fc:a5:0a:40:86:6d:85:9c:6c:dc:82:be:4c:7e:
                    28:ee:93:96:b2:e4:b5:7c:38:2f:d6:40:d6:42:56:
                    12:61:8b:30:2c:23:92:c7:ee:59:51:5b:3d:1e:e4:
                    f2:82:2b:9f:8c:9a:77:86:2e:b8:a7:a9:4e:b9:09:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C1:80:C8:C3:71:82:53:25:87:F8:36:1F:4A:9C:6D:D8:91:B7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/80962491-32ac-359b-b5ec-98d1bc5fc3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:7e:66:86:9b:9c:11:10:80:cd:cd:c0:f0:4a:43:eb:b3:
         9f:80:19:54:b1:49:01:ab:fc:59:10:97:fd:b4:32:55:3f:03:
         a8:19:ae:d3:b8:03:02:6b:aa:f1:9e:11:13:bf:cc:76:4b:c9:
         5a:b4:b2:a0:18:1e:38:ef:4d:25:a7:66:9d:a8:b7:73:b0:4f:
         ec:d6:c0:73:fa:42:b7:d6:e2:b3:f7:08:0d:c8:54:de:81:6c:
         4e:5e:05:f6:7f:8b:2e:e2:a3:f9:7b:0f:0e:9b:21:5b:17:ec:
         9e:8c:9c:a3:cf:93:50:e5:8e:2f:6c:3e:c2:aa:68:47:52:e4:
         c6:a1:91:c3:1b:e6:8f:f9:d1:c9:e2:ee:78:e4:20:3e:c0:8b:
         60:cf:14:0b:4a:4e:96:0a:9c:61:a6:94:bf:2d:c8:5b:f2:10:
         b1:e0:0f:87:66:90:07:73:99:1e:7b:53:fc:01:a9:68:32:ee:
         d1:17:2e:5e:8d:45:e7:6c:7d:e2:24:dc:da:17:c3:45:a9:3f:
         75:bd:8c:1e:39:48:44:b4:2b:d1:db:91:a4:3f:d8:67:62:13:
         81:07:46:91:3a:db:a4:a6:9a:d7:7e:3a:70:46:ec:44:60:fb:
         ae:cb:e6:91:c8:e1:11:48:a3:ed:ec:b6:cf:ca:d7:1c:c6:49:
         6b:7d:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----