Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa
File:                     5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json)
Hash identifier:          4C27QUOHz+ZGSt5cqXGkskWZwRpKhFM739z4/+0X964=
Subject key identifier:   5C:57:01:AB:0C:24:2F:2C:95:49:9E:26:00:AB:D9:CC:BF:6A:45:94
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F432858492CAE820AEFB6600E7EF54380
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     141776
IP address blocks:        174.136.239.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:82:0a:ef:b6:60:0e:7e:f5:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=1e154b10-5c7c-4e00-981a-509dfea63e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:79:08:fb:4b:ea:2c:b2:10:b4:b3:cb:3f:
                    09:9d:ff:0c:71:26:74:d0:04:00:61:0e:ec:e4:96:
                    a9:f5:09:75:00:20:e7:4e:16:78:e9:e5:c9:e3:e4:
                    00:3e:11:54:81:4b:95:c1:f6:8e:c4:ea:95:e9:9a:
                    db:70:cb:7e:ba:df:38:91:ef:6b:47:8d:01:25:28:
                    f4:55:d4:96:55:8a:83:3c:54:ae:49:25:73:7d:1f:
                    bd:f3:00:e7:99:7e:85:57:0a:60:f2:84:74:d7:e0:
                    61:cc:c8:93:e9:e6:c2:43:8b:45:8d:0d:7e:06:56:
                    96:c0:7f:6a:65:39:14:4d:99:db:9e:0f:0c:e0:4e:
                    db:15:20:72:8d:9b:6f:02:a7:41:85:79:91:94:68:
                    3f:72:ca:5f:b0:5e:0b:7a:f8:50:73:1d:70:11:e6:
                    d1:f3:7a:2b:02:8e:26:9a:5e:28:6f:4b:c7:68:5f:
                    42:44:c3:7e:56:84:05:aa:db:d7:c1:fa:86:ac:3a:
                    92:c1:7e:9d:fb:f6:57:68:9c:75:06:cf:57:3e:50:
                    57:09:a1:42:60:5a:2b:d2:84:fc:0d:f5:1d:92:6c:
                    6f:f9:90:6d:10:55:68:be:93:41:35:38:6c:1f:9d:
                    5c:2f:ec:62:59:89:0f:f7:4e:5c:3a:00:87:83:b5:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:57:01:AB:0C:24:2F:2C:95:49:9E:26:00:AB:D9:CC:BF:6A:45:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:32:a6:0a:de:fe:f7:c9:44:e0:09:99:7b:fc:e1:46:b7:
         5e:23:de:bb:dd:e9:bc:12:91:23:ac:d2:34:8e:78:bd:07:c9:
         04:81:6c:a9:cf:05:cc:2b:a0:79:3e:71:48:5a:38:43:72:b3:
         ee:4e:40:f6:3d:ae:f3:05:21:29:6d:ee:7e:7b:52:89:17:fa:
         a2:2e:61:49:bf:ce:2e:35:ef:6b:97:99:ca:d6:3d:b6:60:8c:
         38:9c:d4:24:18:3f:e6:b7:3b:f0:12:fc:83:31:09:bb:fc:a0:
         67:8d:3c:89:13:d3:aa:34:2c:d2:2d:1e:8d:95:bd:57:f5:ed:
         82:40:d8:da:ef:2a:79:0b:af:c1:42:d4:0c:a2:17:f3:a7:e2:
         0a:0f:c0:66:58:6a:70:f1:07:0d:05:0d:0f:46:66:36:25:f6:
         c9:89:a7:04:47:86:5a:21:4f:37:90:fb:04:26:04:6e:5c:ae:
         af:8f:70:3d:4c:90:d8:1b:96:cd:8b:b5:4e:00:f1:24:9f:e1:
         f3:f7:4c:75:9e:7a:38:8a:17:c5:2b:97:31:f2:18:66:47:e4:
         0d:c8:7f:95:42:b0:0e:0d:57:aa:2c:04:cc:6f:41:2b:7b:66:
         a3:52:70:f8:85:f9:08:da:f8:c8:0e:d9:98:ce:fa:81:13:2f:
         21:36:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----