Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/dbf7b836-0942-3383-80a3-2355c7bd28a6.roa
File:                     dbf7b836-0942-3383-80a3-2355c7bd28a6.roa (raw, json)
Hash identifier:          N7QJCm6DOU/+KuEUHcFejAyyRiw4EmSMXIAN0Ke/IMA=
Subject key identifier:   71:08:71:76:31:2C:49:B5:89:41:B5:34:D8:47:3F:13:36:F5:30:44
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F432858493243DC8A59AB794275836200
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/dbf7b836-0942-3383-80a3-2355c7bd28a6.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     18434
IP address blocks:        156.55.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:dc:8a:59:ab:79:42:75:83:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=935a5364-9992-474c-8030-4ed393f3cadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:f8:25:38:6a:db:ba:60:17:52:4a:7f:ef:
                    5e:03:fa:81:63:e0:36:e7:c0:12:d3:b2:a4:11:e6:
                    41:a6:7d:c0:d3:48:59:e0:bb:3e:c3:d7:79:00:46:
                    02:ee:4a:8d:20:f5:ff:e0:81:83:b7:3b:49:39:f6:
                    1e:e5:76:76:fc:71:0a:42:d2:a8:6e:cb:33:cd:89:
                    85:57:37:b0:e3:27:6c:7f:b6:ed:c9:db:30:9a:a8:
                    cd:d2:32:71:00:d4:c5:ba:8a:de:b0:be:d9:1a:c6:
                    5d:a9:68:62:a2:04:2f:1a:e1:17:1d:6a:16:bc:5b:
                    f7:b8:9f:db:d4:47:b4:4c:0d:38:17:49:31:43:f4:
                    47:4c:a6:f6:3e:21:e1:fc:25:56:b5:37:d7:58:9d:
                    68:ff:63:c3:ab:76:98:07:73:c3:a8:1d:de:de:25:
                    13:be:e9:40:28:f7:f8:ef:05:69:b0:40:21:89:e3:
                    e2:f8:1b:fc:94:0b:93:0e:4b:b5:ad:6f:6c:d3:99:
                    27:61:fc:be:89:86:4a:4b:82:e9:d8:44:e1:cf:f4:
                    f0:ae:42:59:6b:d8:c0:b3:c8:ae:81:b0:6d:69:55:
                    a8:c4:47:cc:c2:45:7c:c7:2c:7a:51:98:ad:63:88:
                    ff:e9:a6:9e:eb:68:d6:cd:a5:62:97:1c:82:08:a5:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:71:76:31:2C:49:B5:89:41:B5:34:D8:47:3F:13:36:F5:30:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/dbf7b836-0942-3383-80a3-2355c7bd28a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:51:9e:0a:82:e5:e8:e3:56:e9:ff:f6:e0:bc:0e:ab:be:
         8b:62:95:7d:74:68:7a:17:53:40:5e:ac:2c:42:cc:ba:74:76:
         5b:46:1a:25:9f:3e:59:14:29:1a:bd:d7:16:65:24:3a:fd:b9:
         fb:99:af:3c:15:2c:04:c5:66:0a:15:59:ad:5b:ae:4e:aa:b5:
         32:15:b4:5f:d1:e5:13:35:75:5e:38:83:79:40:1d:6b:c4:3f:
         fb:b8:a5:dd:ed:cc:9b:8b:3d:f5:01:35:6a:1c:01:6a:b3:2a:
         ec:79:91:6f:90:95:76:63:a0:a0:8a:c3:b3:2e:3f:e4:2b:bc:
         0f:43:63:a7:97:2d:ca:e4:b9:6d:34:89:d5:b7:ed:af:3f:d6:
         d2:88:10:5c:f3:76:e0:c1:1c:da:cd:a4:8d:ab:24:35:4b:9d:
         65:ab:ff:6d:6f:3d:64:8c:77:83:2f:1a:2f:55:07:2b:bb:20:
         dc:5a:74:3b:d4:8b:99:43:70:4b:13:1d:36:86:28:49:80:e8:
         11:f2:2e:fc:7a:15:f0:47:b1:ea:58:4d:39:34:2b:58:40:4f:
         61:02:d8:f5:13:bc:a2:64:13:72:da:9c:aa:fe:43:cf:9f:ea:
         f6:7a:a1:a2:07:b4:dc:b5:03:3a:f2:0d:ea:42:cc:1f:fb:90:
         49:2f:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----