Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/22f47107-798f-350e-8f10-68c93e099c94.roa
File:                     22f47107-798f-350e-8f10-68c93e099c94.roa (raw, json)
Hash identifier:          zSdnCCUGEu3+QfHfzovEj/RI6OBhJd046Q8dS9+0R8Y=
Subject key identifier:   FB:9E:44:AB:82:A2:0B:C6:00:AA:C0:C8:9D:C9:09:E6:08:22:AB:70
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584950F9587EDF8CB9CB4EB3D020
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/22f47107-798f-350e-8f10-68c93e099c94.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     7720
IP address blocks:        174.136.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:58:7e:df:8c:b9:cb:4e:b3:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=5907c779-5c53-43a7-b25f-23fa79066331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:f8:f0:a6:84:e4:a3:ce:f7:14:03:e6:17:
                    3b:2d:fb:66:68:6e:88:f2:02:ed:b8:e6:26:15:77:
                    6e:a3:1d:bf:c5:4e:fb:21:b4:1a:49:83:92:7a:6b:
                    e7:64:c5:2b:eb:39:82:c2:7d:fb:fb:62:3d:f0:fd:
                    6f:f2:ca:59:db:d7:51:4f:a8:6e:5c:41:df:a0:e7:
                    fb:63:8d:a2:42:87:74:58:88:2b:fa:72:01:65:5c:
                    cb:28:a5:ce:10:26:8f:52:4f:2e:01:c4:b9:72:bc:
                    7c:5f:94:eb:75:66:de:e4:b7:d7:29:fa:79:9d:bb:
                    d4:55:11:58:01:98:ae:d2:a3:35:20:6c:b8:52:c4:
                    b6:6f:06:ec:b6:c1:1d:d8:7a:50:6d:dc:d9:d0:44:
                    d3:e5:5e:36:66:74:ef:51:94:c9:57:64:8f:37:36:
                    2e:b2:f8:a5:72:bb:f1:b8:1e:c8:ef:39:b4:71:a9:
                    94:16:73:17:60:4c:10:85:da:90:cd:70:29:f1:e8:
                    8e:20:e8:13:60:b5:c4:68:2b:9b:3b:7f:c1:e7:28:
                    92:93:7e:cc:c1:0b:92:3b:80:d4:f2:ec:93:aa:8e:
                    e7:08:1f:1f:ff:a8:f7:f4:55:70:2c:a5:1d:fb:d5:
                    70:5e:55:20:8f:a0:ec:2a:2a:2a:31:43:8c:c3:cf:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:44:AB:82:A2:0B:C6:00:AA:C0:C8:9D:C9:09:E6:08:22:AB:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/22f47107-798f-350e-8f10-68c93e099c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:37:83:5f:ab:25:25:48:59:db:30:0f:9c:2d:3b:0c:31:
         cf:f4:e8:3c:cb:4b:2a:a8:a5:e8:d5:a8:de:a4:00:2c:87:5f:
         01:92:83:d5:c5:e2:9d:28:39:5c:5e:58:5f:89:d0:39:d4:4b:
         4b:d1:a1:4a:71:08:4c:bb:28:a6:6e:84:52:d6:f1:f2:80:5a:
         a9:f6:d8:2a:43:a6:3a:55:95:82:ca:80:2c:d0:cf:fb:4b:7c:
         0e:32:a8:f8:f6:ba:8c:69:af:c2:24:3f:29:2c:da:8b:cb:bf:
         78:e7:e7:39:6b:31:f0:f1:9b:67:46:22:89:2a:cc:99:bc:5a:
         68:0f:53:d4:8f:3e:a1:12:6f:74:7a:55:98:4c:d6:ec:07:ad:
         73:5f:ce:19:b9:00:0f:b9:dc:97:48:a8:32:71:8f:59:50:fe:
         1c:af:8f:f1:fa:58:26:5e:38:8c:c0:00:d4:63:bd:a5:d2:86:
         a0:89:b7:42:74:21:6b:82:62:a5:bf:76:64:c6:6e:40:28:fd:
         a7:4f:0c:30:96:ec:b7:11:a5:92:e0:92:63:8f:15:e6:0e:1c:
         2e:1d:62:81:d5:83:22:5e:55:28:2d:04:20:7b:fd:5f:3f:e7:
         78:d1:3d:89:ae:a4:5c:91:a0:34:96:a6:ab:f8:ea:b0:68:3c:
         d0:9c:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----