Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          2lHfcBPA9XYN1LueMN9j9BSRmRJEDrbA7QwMZ5qSw38=
Subject key identifier:   7D:E2:C1:6E:59:69:76:D5:CB:A6:15:D0:5E:5B:48:25:88:0E:53:9B
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F43285848A99624F3F36C8F28DDE4C200
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:24:f3:f3:6c:8f:28:dd:e4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=b50d5b35-9010-4b6a-9df6-6e959c1b8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:81:8c:77:97:d4:3d:18:08:02:9a:e6:05:
                    a3:b5:02:d6:25:f9:11:94:58:45:c9:77:ef:82:43:
                    64:83:0a:94:82:a2:15:e9:1f:91:df:7c:b7:bb:8f:
                    1a:17:94:ef:05:96:25:24:ec:59:78:2b:55:6d:e2:
                    9a:aa:d5:9b:03:22:6c:68:ae:bc:d2:80:31:d0:81:
                    5d:71:e5:38:b5:d3:f9:c3:4c:61:26:76:ec:e9:3a:
                    b2:33:2b:c7:07:57:bc:b6:0a:7c:c2:c7:e1:21:bf:
                    05:e7:fa:d4:f8:8b:42:70:85:1b:a2:0d:50:4c:13:
                    59:c7:9b:e8:89:30:09:8b:ed:e4:26:09:3f:c0:f8:
                    63:ee:7f:4f:8f:f0:9c:29:6e:56:4d:6f:7b:ea:f6:
                    c1:da:d0:70:bc:fc:e2:e9:dd:98:8f:70:ce:58:0f:
                    f8:a5:d7:83:4d:fb:44:5d:2a:f7:ee:28:9d:71:39:
                    04:1b:37:dd:03:44:5c:3c:c8:93:e6:9a:1f:c5:7f:
                    3d:7c:35:73:ef:5e:0c:3d:0e:9c:91:37:70:d1:4a:
                    b9:04:39:5d:46:b9:9f:f0:cb:17:1a:15:b9:59:b4:
                    6a:98:8b:22:74:7b:a5:b6:eb:a1:7c:f9:3a:0f:54:
                    83:15:9b:01:bc:26:59:5d:02:d4:db:33:06:c4:f8:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:C1:6E:59:69:76:D5:CB:A6:15:D0:5E:5B:48:25:88:0E:53:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:c8:29:0e:de:47:28:0e:32:e3:8e:fd:4b:57:57:1f:f1:63:
         ec:a5:61:65:9c:4e:13:db:3d:b0:0d:e3:67:ea:81:91:18:62:
         f1:3d:33:bd:80:c9:db:4b:e3:6f:37:d1:27:32:28:91:83:21:
         95:b5:2f:fa:d8:14:3b:99:ef:24:51:30:a4:f1:f4:7c:71:a4:
         3e:93:e0:2c:6e:76:6e:b7:99:c4:a9:4d:74:d6:ba:78:50:c5:
         0b:9a:97:0e:d8:35:7c:95:b8:67:4e:b2:ac:2f:9c:94:f6:de:
         eb:5e:7b:c0:6c:cf:23:3e:cf:74:fa:f0:09:d4:21:a0:ff:55:
         9c:44:85:c7:a9:f2:29:24:23:8a:29:36:37:a3:7b:c2:32:98:
         db:51:52:c8:0f:7c:10:32:c0:be:a3:06:c0:ca:a4:3c:c3:59:
         18:c0:77:ed:65:a8:8b:a2:bf:1a:ff:a2:42:b5:7c:37:49:2b:
         6b:2a:3f:98:b0:c8:b2:b0:a5:a8:13:d4:23:65:b7:62:e2:25:
         11:1e:1c:57:b1:05:fe:f0:58:a9:6b:fb:b0:68:a4:1e:8d:07:
         c2:5e:b2:f7:b1:f7:70:3e:ad:77:c3:8a:8c:b4:4c:d1:e7:38:
         c3:e1:b5:e9:e1:28:4c:a9:f0:6f:9c:fa:48:8e:85:21:62:67:
         f2:fc:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----