Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c2be86d9-6a60-3801-9b43-00d3a91651e9.roa
File:                     c2be86d9-6a60-3801-9b43-00d3a91651e9.roa (raw, json)
Hash identifier:          DzW8W+jEWasBGW8TALol4rW9cAVlGueDhUNFgch9+XM=
Subject key identifier:   3C:4D:21:69:AC:12:BB:2C:91:B8:C8:BF:55:25:A5:74:F7:27:34:8A
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584957F40BEBFDD4B198EBF5B280
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c2be86d9-6a60-3801-9b43-00d3a91651e9.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     13720
IP address blocks:        64.37.167.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0b:eb:fd:d4:b1:98:eb:f5:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=41e21f9f-2e44-485c-9c4c-67800707f944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:a3:04:da:87:d0:d7:12:72:03:2b:5a:9a:
                    64:ae:40:3c:da:43:27:e7:7c:97:f8:2f:21:d0:5d:
                    f0:3e:18:0f:0a:52:42:2b:05:59:c8:b6:a4:d5:78:
                    12:d1:9d:7b:8b:c0:e1:83:34:fc:dc:b9:a9:92:f0:
                    79:4e:a6:ff:5c:27:0c:b3:fb:ec:6a:0d:23:92:af:
                    47:a9:3f:e3:5a:e1:4f:38:4a:70:09:3a:1b:9f:d8:
                    04:c0:86:fb:cb:ce:3d:5f:52:f5:4d:89:82:9f:05:
                    df:e8:1a:30:92:42:7f:e5:44:43:dd:96:9e:17:49:
                    bb:da:6e:00:de:36:a2:9c:ac:eb:57:d5:f9:65:bf:
                    2e:9e:54:ae:99:66:3b:5e:85:f3:6c:0b:f6:58:90:
                    10:a1:c4:bc:ea:17:ab:25:20:0c:5d:64:ca:6d:e1:
                    a4:c3:ba:21:20:8e:38:0f:7b:cc:d3:ca:e0:29:40:
                    29:52:05:69:8a:8b:6c:85:3a:fd:80:6b:d6:09:32:
                    1d:91:61:37:c6:71:55:49:57:c1:06:91:b1:ba:89:
                    6d:b1:2f:f3:fb:c5:69:10:20:fc:9a:fa:82:70:3a:
                    b0:53:a4:f7:ea:55:2b:d1:ca:9c:7c:02:a0:f6:43:
                    1f:70:c7:f6:f6:18:b7:35:0b:ab:4d:16:64:b6:e8:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4D:21:69:AC:12:BB:2C:91:B8:C8:BF:55:25:A5:74:F7:27:34:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c2be86d9-6a60-3801-9b43-00d3a91651e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:b7:05:b2:72:79:0e:1e:47:e9:3c:ff:25:88:fb:09:f5:
         41:0d:35:60:95:31:34:e3:6d:83:48:ca:05:0b:c2:a8:7a:4f:
         fb:68:4f:55:8b:96:ae:e1:1d:d7:b4:dc:be:55:9f:10:06:39:
         38:ea:3f:8f:1e:eb:37:fd:38:1a:de:a7:cd:c7:1a:a1:73:2a:
         34:7d:ff:ef:b6:91:56:d6:35:01:b8:a1:a0:7e:ec:19:38:51:
         41:bb:da:21:08:57:64:60:13:07:be:c8:e2:c3:6d:2a:2b:9b:
         b5:ca:c1:22:39:84:95:3a:7c:26:2c:70:2a:99:59:fd:21:57:
         1f:a3:c0:5d:8f:55:f0:39:2b:fb:f6:86:7f:6e:cc:93:db:56:
         4f:90:68:d1:e9:3c:c9:d1:40:cb:37:c0:87:ac:72:42:a1:86:
         82:34:8d:93:63:22:2f:cd:8a:e2:f2:a3:0c:d9:c8:38:fb:09:
         dd:ac:bd:8d:8b:7a:15:7e:2d:23:8f:83:f3:30:e9:ec:f1:41:
         90:2d:d1:08:f4:c3:2f:c7:7e:0f:60:ee:17:49:67:35:36:24:
         cb:1a:be:16:2c:de:c3:30:7c:15:86:33:ce:27:ee:a8:a6:a6:
         fa:36:6d:1b:20:bd:42:5e:44:2f:d9:66:3d:2d:7b:2f:72:69:
         57:27:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----