Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa
File:                     c730344e-7e34-3542-b771-2ccda9e850ac.roa (raw, json)
Hash identifier:          X/pNRwlad2s/nollOnwDE43pgnKDu3c70GjjpmMLeAA=
Subject key identifier:   15:79:03:55:5E:0C:78:4C:2F:FF:31:60:0D:11:5D:0E:36:BA:51:0C
Certificate issuer:       /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
Certificate serial:       010D0C9F43285848DD1AACFD1A2FA0B7CFED0C20
Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa
Signing time:             Thu 13 Feb 2025 00:54:17 +0000
ROA not before:           Thu 13 Feb 2025 00:54:17 +0000
ROA not after:            Tue 13 May 2025 23:54:17 +0000
asID:                     11821
IP address blocks:        2604:5d40::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:1a:ac:fd:1a:2f:a0:b7:cf:ed:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
        Validity
            Not Before: Feb 13 00:54:17 2025 GMT
            Not After : May 13 23:54:17 2025 GMT
        Subject: CN=eac2da0b-ad26-4b94-b218-ac9e950f7122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:5a:f1:5b:42:a0:39:06:03:0e:4c:5f:ab:
                    a4:c7:da:a8:75:4d:e8:ef:c0:51:1f:3b:33:ac:43:
                    43:18:f2:00:ec:15:8a:42:65:9d:5f:5c:fa:f2:36:
                    01:02:1a:27:c1:23:98:22:b9:40:b2:ec:f5:21:33:
                    bd:87:5a:0d:a1:b3:80:05:f9:d0:3e:80:cb:f9:d0:
                    b7:17:3f:82:35:f6:6c:58:ad:c9:15:c4:ef:dd:d1:
                    24:52:bd:40:ac:e9:eb:8b:d4:a2:6c:e7:0c:da:e9:
                    20:15:bb:8f:b2:94:ea:2f:b8:80:1e:39:aa:42:22:
                    21:d0:46:f9:0c:90:78:bc:9d:1f:00:f2:a7:c0:0a:
                    c0:6e:77:da:36:67:12:4e:92:25:98:9b:7e:92:e3:
                    40:c3:1d:9f:d6:a4:53:bb:45:fb:09:3d:af:c7:20:
                    a7:03:66:a4:d9:40:11:e9:4b:3a:77:3a:12:bf:a0:
                    7c:dd:97:f9:5c:35:ed:ec:67:9e:95:34:29:f2:1f:
                    d2:64:45:b9:d4:6f:1d:7c:ad:11:3f:68:1d:2a:bf:
                    f3:7c:0e:cd:b1:5e:5c:48:00:d0:1a:df:49:83:b9:
                    5b:ee:22:09:ba:73:96:01:ae:f2:ef:56:9c:0a:75:
                    97:e4:ce:30:34:18:aa:f1:3b:9d:39:3a:b5:6b:9d:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:03:55:5E:0C:78:4C:2F:FF:31:60:0D:11:5D:0E:36:BA:51:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl

            X509v3 Authority Key Identifier:
                keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:b0:04:fc:4b:bd:05:cd:1e:19:17:84:e9:ed:09:9e:46:
         37:51:41:8d:60:5c:42:30:6f:ae:f2:0c:c6:79:47:6f:23:fa:
         66:2f:f7:04:81:bc:f7:a2:ea:a1:f7:a3:4d:f6:4c:49:84:66:
         18:23:7b:76:c4:7b:44:5c:6c:0a:93:f0:53:f6:35:bc:66:5e:
         f4:4c:36:27:db:92:0b:72:01:74:3d:5a:a2:74:15:ba:31:ba:
         ab:1e:33:a9:04:71:18:0c:cb:47:37:c5:50:07:c3:1c:b6:7b:
         00:97:e5:8d:50:c1:ff:f4:ad:e9:1a:af:31:f9:f0:b2:e1:9f:
         bb:6f:d0:df:60:07:a6:40:53:bd:18:a5:71:87:c8:f7:71:30:
         74:c3:31:73:bf:69:31:17:b3:c0:b6:40:67:8c:e7:dd:4f:e2:
         1d:c0:bc:31:15:0e:a5:b6:d7:05:3b:28:b5:07:bf:5e:49:3e:
         e5:48:51:84:b9:20:f0:49:a7:3c:dc:3c:ee:dd:c4:bb:6b:8f:
         c0:1b:03:be:37:e4:ed:26:05:31:6b:b8:b4:40:15:75:f7:94:
         a3:29:8a:b7:cf:54:98:c6:22:38:20:56:17:f6:ff:86:db:5a:
         4b:e0:41:56:18:66:3a:88:33:36:95:0f:55:2c:68:c0:96:a9:
         31:21:31:c9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjdGqz9Gi+gt8/tDCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5
ZWRkMB4XDTI1MDIxMzAwNTQxN1oXDTI1MDUxMzIzNTQxN1owLzEtMCsGA1UEAxMk
ZWFjMmRhMGItYWQyNi00Yjk0LWIyMTgtYWM5ZTk1MGY3MTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJVa8VtCoDkGAw5MX6ukx9qodU3o78BRHzsz
rENDGPIA7BWKQmWdX1z68jYBAhonwSOYIrlAsuz1ITO9h1oNobOABfnQPoDL+dC3
Fz+CNfZsWK3JFcTv3dEkUr1ArOnri9SibOcM2ukgFbuPspTqL7iAHjmqQiIh0Eb5
DJB4vJ0fAPKnwArAbnfaNmcSTpIlmJt+kuNAwx2f1qRTu0X7CT2vxyCnA2ak2UAR
6Us6dzoSv6B83Zf5XDXt7GeelTQp8h/SZEW51G8dfK0RP2gdKr/zfA7NsV5cSADQ
Gt9Jg7lb7iIJunOWAa7y71acCnWX5M4wNBiq8TudOTq1a53lnwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBV5A1VeDHhML/8xYA0RXQ42ulEMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1
OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvYzczMDM0NGUtN2UzNC0z
NTQyLWI3NzEtMmNjZGE5ZTg1MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3
MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3
OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0
Y2YzNzllZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRdQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBisbAE/Eu9Bc0eGReE6e0JnkY3UUGNYFxCMG+u8gzGeUdvI/pmL/cE
gbz3ouqh96NN9kxJhGYYI3t2xHtEXGwKk/BT9jW8Zl70TDYn25ILcgF0PVqidBW6
MbqrHjOpBHEYDMtHN8VQB8MctnsAl+WNUMH/9K3pGq8x+fCy4Z+7b9DfYAemQFO9
GKVxh8j3cTB0wzFzv2kxF7PAtkBnjOfdT+IdwLwxFQ6lttcFOyi1B79eST7lSFGE
uSDwSac83Dzu3cS7a4/AGwO+N+TtJgUxa7i0QBV195SjKYq3z1SYxiI4IFYX9v+G
21pL4EFWGGY6iDM2lQ9VLGjAlqkxITHJ
-----END CERTIFICATE-----