Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa
File:                     ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa (raw, json)
Hash identifier:          vSREEKz6+goHR+cFyHABh5QsZnTMnVqrOgyoSMTBY/k=
Subject key identifier:   F1:E3:29:BF:54:1B:DC:33:7C:7B:EE:B7:F5:2E:E7:A3:54:FD:83:2B
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285849806F2317BFDD5FECD80D0080
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     13009
IP address blocks:        147.249.97.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:23:17:bf:dd:5f:ec:d8:0d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=fb146c40-ad27-43f7-ad5e-4ab90944afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:13:8d:7f:e4:c6:ca:22:40:ea:bf:0c:b9:
                    f4:ae:b5:23:e0:9c:0b:4a:ce:e0:f8:16:d8:55:aa:
                    68:e2:cb:23:68:71:34:f1:aa:8d:9c:98:44:ce:87:
                    57:06:5c:04:a8:83:7a:37:b2:ad:c8:eb:19:f8:bc:
                    dd:40:8f:d9:9a:84:21:eb:00:f7:d4:c6:8e:d9:14:
                    09:c3:59:d3:49:e7:8e:08:09:d1:21:e9:8c:28:8a:
                    30:67:f1:b8:38:6f:b9:a4:9c:3f:3c:8a:52:ce:d9:
                    4e:32:6f:3b:ef:00:9f:28:87:ae:22:a2:fe:27:24:
                    f9:dd:62:7a:54:8b:8f:cf:a1:d9:20:4f:2e:60:df:
                    25:33:7b:d0:55:26:b9:11:95:66:02:6c:de:25:35:
                    34:2d:7c:5a:e5:fb:78:bb:a9:77:41:e1:cf:ce:85:
                    68:f1:96:b1:1c:4d:c5:55:58:ac:56:57:0f:21:eb:
                    a0:9d:07:48:25:ce:ae:ef:4c:c6:0b:b2:dc:ea:0e:
                    9d:4d:e5:ce:c8:92:4e:c0:3c:b2:44:ad:19:30:ce:
                    dc:20:b0:cb:eb:6b:24:bb:b7:09:f6:03:4e:36:a8:
                    b7:35:1a:b5:71:69:ac:4d:1a:b4:21:42:4f:b0:a9:
                    cd:c4:8f:d5:e5:cd:90:87:6e:f7:61:64:2a:0a:70:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E3:29:BF:54:1B:DC:33:7C:7B:EE:B7:F5:2E:E7:A3:54:FD:83:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6f:3e:12:c5:72:cc:6f:64:30:c0:e0:b1:9b:50:8c:12:bf:
         4b:71:0b:66:5a:ed:91:ce:1a:ff:67:b1:90:be:fe:15:bd:38:
         a9:2c:96:a6:43:c1:1b:53:92:b5:6f:21:57:3e:6e:30:56:52:
         33:40:2a:47:d3:d6:7f:33:9b:03:f1:ca:c2:78:48:35:a5:61:
         2b:25:aa:7a:37:3b:60:ac:7d:ae:4d:d1:10:ac:fe:02:61:73:
         fd:ea:b7:48:a0:0b:cd:fb:1e:78:bd:5b:9c:b5:71:b2:e1:ec:
         5e:27:09:60:65:c6:25:e1:7b:b7:21:62:9b:e5:a5:58:be:72:
         53:ea:79:50:8c:1b:58:4d:c7:5b:dd:f3:ca:34:43:ae:5e:b9:
         19:23:d4:8a:b3:67:74:dc:08:7c:38:cb:7b:70:95:f4:fc:1e:
         d6:59:7e:42:0d:4d:e4:07:62:bb:1a:28:65:51:45:0d:8e:cc:
         e6:24:38:4c:33:77:01:87:a8:f2:03:87:9f:a3:a9:46:8e:76:
         41:f7:63:a3:a3:99:ba:e1:92:e9:26:e3:17:2e:c4:dd:9b:cc:
         27:0b:3b:63:38:bc:66:d4:8c:ec:91:60:f5:4b:3e:1a:8b:c9:
         f9:18:57:2f:cc:b8:4d:76:27:00:4b:8c:3d:40:fd:08:fd:1e:
         49:00:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----