Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
File:                     0420671e-3982-3344-9b47-51bea31f38a2.roa (raw, json)
Hash identifier:          DdgRf2WrLjUYNVNJgZSTE656akJL6cRYDW7OtzRR4/8=
Subject key identifier:   8C:45:4F:FD:FF:AC:50:4B:B6:E2:A6:99:B8:27:F5:AA:92:A0:31:67
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F432858498339F3B150C2F1A5D4D6D480
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     33548
IP address blocks:        104.200.32.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f3:b1:50:c2:f1:a5:d4:d6:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=0fe1ceb6-6a8a-49a7-abb5-7519a55d0b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:ce:e6:ad:ef:11:df:90:96:21:92:76:ae:
                    3c:46:68:c6:6e:5f:65:c3:84:c5:65:6f:34:09:0e:
                    ff:ba:7c:03:c1:fb:01:7d:84:a1:b8:52:b7:1f:33:
                    bf:18:45:6a:17:80:2f:b4:a8:55:d7:70:b6:79:90:
                    20:a2:4c:65:4a:97:e2:dd:99:93:91:e2:56:83:e3:
                    2d:c1:57:eb:e5:d3:51:35:d1:fe:16:49:d0:3e:7d:
                    74:95:ec:62:66:f7:8c:bc:66:db:9d:cd:c7:51:a0:
                    c5:5a:12:47:77:87:dd:3a:74:5e:eb:1f:c0:23:9c:
                    b3:52:ad:49:1c:76:92:00:5c:28:44:38:87:da:0e:
                    24:04:35:f8:ab:d3:0b:0d:56:77:8f:7a:33:14:20:
                    bb:74:f1:c9:97:b9:90:34:2a:3b:4c:4c:05:8e:18:
                    8e:42:39:b5:00:9b:1a:f5:76:52:9a:fb:7c:cd:e0:
                    c6:4b:fa:84:03:a2:ed:8b:0f:be:40:39:17:d5:81:
                    8d:90:18:7e:05:23:fe:f8:c9:ad:ab:ab:5e:5f:89:
                    78:9a:04:f2:fd:a2:40:fb:ac:74:a7:a4:ec:c7:6d:
                    fc:1f:b6:22:34:8e:8b:f9:56:9a:8a:aa:ae:cb:fc:
                    3e:11:60:0c:c8:26:e6:fc:36:f0:ad:fd:88:4d:b2:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:45:4F:FD:FF:AC:50:4B:B6:E2:A6:99:B8:27:F5:AA:92:A0:31:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:26:13:2d:6f:3c:ef:f3:86:16:d7:5c:b3:b8:7f:e5:2b:
         e0:3e:7c:3b:3e:47:73:46:26:f7:9b:a0:a8:da:21:77:08:a3:
         07:90:bb:e2:15:b7:ee:e5:3c:90:fe:b0:cd:f9:4d:0a:68:e0:
         44:a1:df:0d:8b:00:e7:2b:02:2a:f5:d7:65:3d:36:26:56:72:
         3f:e8:bf:63:9c:1d:10:24:5e:a8:e5:2a:1a:5f:9a:47:7c:e3:
         8c:f2:d2:16:a0:c5:fd:42:80:3c:bc:a6:c8:0b:17:d7:25:73:
         f9:e1:34:e2:c8:a3:f2:a2:79:69:38:9f:ca:07:fe:c0:0d:86:
         d4:19:79:ea:d8:a3:16:76:88:24:9f:a3:10:38:fd:63:68:25:
         0c:b9:dc:60:51:6d:79:c3:cc:26:28:cf:78:2d:3b:40:79:87:
         24:5c:b6:b4:d8:68:c0:28:52:f3:2d:36:fd:39:d3:53:51:4d:
         4f:57:3e:3d:f6:33:08:06:56:81:f7:5b:e3:aa:ba:89:ae:79:
         92:1f:05:b4:39:a1:98:5b:2b:03:56:79:a0:d1:56:a2:2c:fd:
         4b:eb:77:38:83:ac:d3:a1:df:84:9e:bf:ee:32:1b:57:83:9c:
         aa:7e:c5:27:87:b1:05:28:3f:41:06:48:3a:79:04:10:5a:f3:
         ce:96:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----