Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
File:                     cf70d300-25bd-30f4-a6fd-23a33417314e.roa (raw, json)
Hash identifier:          KnZhB1uDse4W2M43xZMG81plaKTam53JCAQh0kNOf2c=
Subject key identifier:   F6:B5:0A:CF:5F:58:E2:D5:B7:49:76:CA:D4:A6:E9:9A:99:3D:C8:A9
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584929E3C9D6E5BD2D0F14106F60
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     397003
IP address blocks:        76.74.137.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c9:d6:e5:bd:2d:0f:14:10:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=1fb5998a-f87f-4b28-aa3c-3d07ace8bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:d9:21:69:1f:0b:e3:c9:e1:fd:b3:cc:08:
                    67:10:9d:8e:88:52:1c:c0:66:ba:81:2c:da:4e:5d:
                    ca:5e:2e:f3:08:04:fc:90:97:13:0f:2d:dd:52:ba:
                    3b:ab:c6:50:8c:b9:b2:86:7c:80:ce:3d:a3:dd:fd:
                    72:8c:25:10:33:75:8c:7e:43:19:22:fe:5c:79:a6:
                    d6:10:34:3e:de:2e:9d:02:93:71:44:73:6b:74:a1:
                    b3:38:c3:de:6b:bb:81:d0:73:65:4b:06:64:d2:d2:
                    43:a8:c2:d8:d6:c9:37:10:e4:0f:9a:61:4c:85:8b:
                    d2:9a:7d:4b:63:ee:b9:ac:d2:a2:d7:f5:37:f8:66:
                    88:dc:4d:d1:e0:76:8e:9f:0c:43:75:12:96:62:d6:
                    e0:5d:50:01:10:f1:52:2a:21:8d:86:81:1f:cb:f6:
                    0a:5a:66:2c:fb:a1:8d:dc:47:65:51:68:d2:cd:79:
                    79:ab:fa:54:b5:9b:80:27:38:53:58:a5:4d:c8:15:
                    a5:50:ba:c8:22:4d:43:c5:5c:cf:ef:b0:ba:8a:94:
                    5c:de:ee:35:f4:a7:ab:76:e1:db:33:db:d7:9b:8d:
                    e5:ec:c0:57:3d:1f:ea:e3:fc:56:b6:b1:4e:33:83:
                    47:a9:17:bb:19:e2:af:d3:2e:6c:d3:c8:07:b3:a8:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:0A:CF:5F:58:E2:D5:B7:49:76:CA:D4:A6:E9:9A:99:3D:C8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:60:cb:73:64:1e:50:a5:bb:61:b2:12:78:36:ba:89:39:d9:
         ef:29:7f:38:5a:c7:78:da:1d:ed:ff:2c:bc:b1:8a:5e:72:a9:
         74:ee:00:30:ad:55:e2:23:07:f9:87:6f:1f:3e:05:06:ba:b1:
         84:f8:77:5e:d4:d5:18:00:61:2d:f4:2a:28:3a:ff:22:ff:f1:
         1a:ce:62:56:48:8c:68:c6:df:b5:5b:65:fc:42:c1:e4:cd:8c:
         b0:b8:3f:3b:00:04:44:64:e5:45:0e:de:b2:f0:13:53:98:4e:
         ad:f8:0a:0e:13:39:95:67:d5:60:64:36:f5:49:58:4f:cc:aa:
         b7:1f:c3:bf:76:36:fd:e6:d2:be:f0:ae:80:1b:10:40:63:1a:
         cb:f4:a2:f3:d4:54:45:9a:89:62:3f:0f:36:2b:bb:7d:79:73:
         42:87:25:6a:56:5e:80:73:a5:5d:bb:23:ec:2c:23:a9:b0:5c:
         f0:0f:a9:49:e0:bd:ba:48:69:8a:65:b4:ea:6a:a1:3b:28:82:
         c8:bd:6c:15:ec:a3:3b:3a:84:96:78:52:c9:e3:41:37:4b:75:
         ea:79:38:60:f9:09:a8:6a:11:a1:00:17:81:b2:76:2f:67:c0:
         67:67:87:5e:09:26:51:d7:50:86:77:db:a4:ef:5b:63:e6:fd:
         49:2c:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----