Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa
File:                     30475b02-3cc2-316f-9252-ebff747b45f7.roa (raw, json)
Hash identifier:          fnHeS0unCMuw72qFteU+W5PgsEwZJpHxJ7DJldCzFHE=
Subject key identifier:   DB:CA:93:38:91:66:37:5A:0D:44:5D:A0:06:4B:91:48:35:D8:71:9F
Certificate issuer:       /CN=5ca7850e-2959-40e8-b387-e6608ae33eb4
Certificate serial:       010D0C9F43285848B4C0D0422A42B9491384D900
Authority key identifier: CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     27167
IP address blocks:        192.190.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d0:42:2a:42:b9:49:13:84:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca7850e-2959-40e8-b387-e6608ae33eb4
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=92fba7ba-dbba-481e-a3fd-028019408485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:91:26:1b:f2:8f:38:03:32:34:bf:69:86:
                    3f:30:97:6d:7c:0f:52:89:d6:3d:15:bb:19:41:6d:
                    86:b2:57:36:9c:7c:ba:e9:18:97:a7:d2:92:34:2f:
                    98:de:96:67:f9:b5:82:77:0e:8e:7d:a8:d5:39:30:
                    b7:b5:10:a6:16:ed:23:5c:d7:c5:80:16:ee:de:7b:
                    3e:a6:e4:5f:6a:1e:ac:d4:f4:a6:f8:55:d5:0f:7f:
                    20:14:f8:ef:cb:cd:10:5c:e7:50:86:be:7e:b0:77:
                    5d:be:8c:41:10:76:cd:8e:00:28:5c:7b:07:6d:09:
                    64:9a:e8:d4:0e:50:81:4d:11:a7:25:e0:e7:68:e0:
                    b0:ed:b4:9c:7f:0a:d7:38:fe:ee:3a:b7:3a:f6:e5:
                    5b:88:3e:f6:4b:3a:30:a6:25:91:73:1e:98:53:b4:
                    15:33:f3:05:71:92:f0:7b:ec:4c:13:df:d6:68:c1:
                    8c:bc:75:fc:3f:4a:c9:3f:66:09:eb:08:85:54:ec:
                    16:c9:87:ab:6a:b5:f4:d9:62:c1:46:e4:14:d3:86:
                    32:89:32:c5:de:d7:ce:db:a7:44:42:3d:ac:44:8f:
                    5f:d9:09:b7:f3:b7:ef:43:73:6f:07:f3:b3:dc:23:
                    15:f2:7a:0a:33:c5:c4:84:09:2b:60:21:1a:94:59:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:93:38:91:66:37:5A:0D:44:5D:A0:06:4B:91:48:35:D8:71:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.crl

            X509v3 Authority Key Identifier:
                keyid:CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:ee:db:06:96:fa:fe:85:32:df:cf:e9:eb:51:a4:68:98:
         c0:e6:7e:52:32:32:8e:5c:b6:5c:4d:58:28:f5:f9:4d:d9:77:
         be:18:ad:2e:e8:b4:73:ce:6a:08:04:38:cb:d4:f5:16:dc:fa:
         25:4a:4f:28:ee:9a:b5:f4:7c:e0:33:df:ee:94:69:df:26:5c:
         ce:9f:7e:a5:44:5c:2c:f6:d5:a4:3f:46:8b:23:1f:a7:cd:33:
         55:5b:ac:92:56:71:55:57:4f:1d:e7:a1:2d:aa:fc:53:0c:5a:
         e7:c6:2b:96:24:1b:e5:7a:2d:c2:49:cd:a9:23:34:c3:5b:a5:
         55:d8:95:a3:be:37:34:81:d4:d9:43:3c:ee:b3:3f:01:6a:b8:
         d7:8e:31:d3:86:ee:1e:62:f6:c1:42:74:65:f1:e5:cf:8d:92:
         b1:a3:bd:e5:92:0b:c1:44:b0:46:16:03:6c:31:d6:2c:91:8c:
         73:d9:08:61:e4:0f:29:ea:16:f3:06:9f:97:f2:d8:9f:8a:69:
         af:4c:1e:a9:45:6b:b6:40:0e:ee:6a:99:2d:e3:87:d0:33:f5:
         7b:b1:06:0b:d2:ad:18:b8:5b:86:73:93:35:43:75:7a:34:f9:
         c0:b7:0c:bc:3a:37:57:dc:26:6e:f5:81:d9:11:95:94:1f:b9:
         7e:db:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----