Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
File:                     37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa (raw, json)
Hash identifier:          PVTMBGx6kV0t2/z8C6h2Om+BfvYD8H8YJ5SYyWpHAQg=
Subject key identifier:   4C:05:8F:BC:0C:13:A4:C5:E2:BD:33:A9:C9:2A:A2:D1:40:CD:2A:54
Certificate issuer:       /CN=110a5b23-7e5e-47cb-81e1-4e9068274549
Certificate serial:       010D0C9F43285848A565F958654AD21BA6B85E00
Authority key identifier: D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     19186
IP address blocks:        208.103.169.85/32 maxlen: 32
                          208.103.169.222/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f9:58:65:4a:d2:1b:a6:b8:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110a5b23-7e5e-47cb-81e1-4e9068274549
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=860acc10-2759-418a-837a-0f0ff5a311bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:09:9c:1d:39:a5:94:a9:3a:9a:f8:53:e1:
                    24:31:b9:08:0e:63:e8:95:d5:27:b1:e1:58:27:0e:
                    bc:ee:bb:84:36:83:fc:1c:e9:e5:d1:00:40:51:0f:
                    8c:42:a3:5d:3c:d6:c8:51:b9:d5:1f:53:aa:9f:72:
                    a1:33:c2:02:a9:a5:a9:d1:7b:6b:0c:3c:9a:69:e0:
                    92:22:e5:90:69:49:72:22:1b:d4:b4:40:6f:d8:15:
                    43:02:2f:39:d6:da:0e:6f:ed:37:3b:7e:c5:57:29:
                    e3:bb:11:c2:09:77:6e:21:29:0a:02:3d:e0:31:01:
                    b4:91:0a:40:fe:ae:b4:76:0c:db:12:86:2f:42:7e:
                    9c:7f:97:8d:25:d5:d7:37:b7:d7:22:14:ac:77:a4:
                    06:00:53:d0:4c:69:36:33:ed:41:79:4c:ce:88:67:
                    b3:e8:57:e0:52:10:1e:36:13:26:a9:e9:9e:64:fd:
                    09:22:a5:bc:6b:36:6b:c3:8e:49:0f:65:f4:c0:36:
                    5a:96:aa:f5:fd:b4:ed:4d:59:03:d4:d3:47:51:d1:
                    f1:35:a1:f4:04:0e:ef:f8:11:d1:d5:94:57:16:4b:
                    f8:a2:f2:7c:ab:53:13:05:61:ce:7d:40:27:7e:5b:
                    b7:44:b2:f2:8c:7a:cd:f4:f6:77:d1:9b:9e:ea:85:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:05:8F:BC:0C:13:A4:C5:E2:BD:33:A9:C9:2A:A2:D1:40:CD:2A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl

            X509v3 Authority Key Identifier:
                keyid:D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.169.85/32
                  208.103.169.222/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:0f:f1:4e:fd:bc:21:ff:62:e8:22:a5:ba:58:8b:59:11:b9:
         ca:5f:5b:77:35:89:c5:34:43:48:8e:93:c8:bc:5d:5e:97:9d:
         e1:87:63:bc:05:47:63:5d:04:3b:76:6a:01:91:f8:0e:75:16:
         41:71:6c:17:dd:c6:33:e2:4d:fe:a0:c0:a1:cc:ce:ad:c8:58:
         2e:8a:be:fd:81:ea:d0:8d:10:17:d2:1a:26:97:7c:42:92:32:
         f6:7c:b2:87:4d:e6:65:14:12:58:5a:c9:be:ac:9a:5a:10:f1:
         81:c9:8f:28:f0:5a:8b:e4:cd:d5:a0:a3:5d:7e:30:bf:5d:57:
         99:db:dc:70:d9:7e:57:4f:02:ae:37:89:61:ef:63:63:2b:c6:
         87:4d:c0:d5:19:dd:46:5b:20:bc:bb:3d:7f:e9:26:b2:66:43:
         3d:69:56:0a:7a:c0:8f:4c:33:37:c1:ee:8c:08:5d:62:b1:36:
         4d:d8:5a:c7:ae:50:08:b1:64:b7:96:eb:dd:89:77:da:be:d1:
         a0:ab:13:23:a7:7f:6d:c5:cd:95:12:14:99:8d:03:0d:ec:08:
         86:d6:c8:e8:fa:00:11:bd:dd:82:6d:2c:a2:c4:1d:a8:19:33:
         30:a3:a9:ed:ae:c1:f5:ff:d8:68:92:3c:92:74:d6:01:55:5b:
         a2:d6:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----