Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
File:                     4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json)
Hash identifier:          IVcIfsgJNlzW/837tXWQ4mKMGG29TfsaN3oTBxwZQjk=
Subject key identifier:   3B:40:85:33:9E:9B:EA:47:0E:73:E5:D1:8E:33:CA:F2:AC:36:18:C5
Certificate issuer:       /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial:       010D0C9F432858497F09A34E86934C9CBB85D480
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     18540
IP address blocks:        198.148.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a3:4e:86:93:4c:9c:bb:85:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=08631b1f-a74e-4672-a2f3-3a3c3e48d7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:cf:50:10:0c:ab:3a:9b:4c:21:cd:87:2f:
                    f3:f5:ff:4c:79:ee:79:cc:60:b1:6a:db:b9:80:03:
                    7d:c4:00:c8:eb:92:46:72:04:da:86:3c:07:21:75:
                    d2:44:a4:7b:8f:46:1e:e4:19:95:ae:16:ea:b4:19:
                    89:29:cd:f9:69:86:06:09:96:93:45:53:d5:09:7d:
                    91:e2:40:70:e6:47:7f:04:b9:bd:8a:e7:92:b6:7f:
                    48:c7:95:67:fb:bb:aa:be:a2:5f:50:dc:16:22:13:
                    f4:cc:b1:01:0e:32:1c:c6:18:9f:a8:f7:cb:ee:56:
                    a4:6a:88:93:94:4d:93:56:9e:21:31:28:f8:8b:45:
                    64:58:02:d4:67:37:b1:fa:38:ad:8b:3a:81:11:8d:
                    a9:2e:90:8a:0f:85:7c:e5:a9:25:22:b9:80:e1:93:
                    1f:7e:71:bb:11:f7:b9:39:95:bc:6a:81:9e:f1:29:
                    fd:ca:c5:c3:98:ac:fd:dd:e0:16:74:b6:76:97:35:
                    20:f6:8e:6f:2b:3e:35:3c:c3:7c:e1:09:a1:5a:46:
                    42:54:d8:41:eb:b2:65:de:d2:52:2b:9d:2c:a2:6d:
                    45:d4:28:b8:3b:86:7e:ae:d8:e2:8e:1a:b8:ee:6a:
                    22:28:65:07:5e:25:fa:83:d0:ba:87:c7:16:3e:7e:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:85:33:9E:9B:EA:47:0E:73:E5:D1:8E:33:CA:F2:AC:36:18:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl

            X509v3 Authority Key Identifier:
                keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:23:a5:28:36:00:f7:5d:75:d3:27:0d:58:82:f1:de:ef:73:
         95:c3:14:a5:d2:41:05:4a:2a:02:54:54:e5:3a:f4:0d:42:2a:
         9f:37:0e:01:34:a8:4b:3e:6d:e7:d5:a1:54:9b:78:7b:f4:4b:
         66:e2:7e:43:34:00:77:e0:ef:74:3b:dc:1d:94:32:b5:77:88:
         ae:30:7b:25:55:35:4f:22:37:1a:97:c5:eb:33:28:e2:19:a7:
         c6:fb:71:a8:e7:7c:df:ba:d3:cf:ba:a6:14:79:ed:34:63:f3:
         38:4e:90:72:c0:c2:3d:ed:6c:27:f0:16:65:d0:95:17:8a:a6:
         6d:75:7f:d0:54:c4:ae:3a:c2:75:10:e9:e1:cc:07:4b:da:45:
         ea:b0:f7:3f:19:ac:53:25:05:47:33:ff:8a:eb:68:06:5f:01:
         8f:5b:70:28:9c:78:47:5b:1f:30:3f:5e:c2:30:ce:14:93:88:
         3c:c5:b2:68:c1:7a:75:33:fa:07:eb:3c:1a:35:fc:6f:bf:80:
         44:69:34:0e:39:ce:53:d8:47:ec:61:a1:a6:d3:c0:94:13:af:
         1b:fa:c4:79:c0:d7:04:a1:0e:07:58:d6:ce:c0:93:1f:83:5a:
         61:33:8f:5a:77:3e:d3:e5:7f:f7:6e:5f:da:42:98:82:49:90:
         46:66:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----