Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa
File:                     07212462-01b3-3438-9a02-06b16dbcb051.roa (raw, json)
Hash identifier:          YvaJljnEsf89r6j4FFYUnjYAOyJ269fUtVvgDZURcc4=
Subject key identifier:   C4:61:55:64:7E:F8:87:FC:B5:07:0F:B9:B7:B4:44:3C:67:C4:4E:FA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0068144C0DF83AA4744B480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396573
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:81:44:c0:df:83:aa:47:44:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f38dbc9d-00b3-499e-bcf2-e8c4329b177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:9c:5c:57:8a:7d:d7:cb:39:45:0e:61:f1:
                    db:40:30:55:99:e3:74:17:66:b6:fe:29:c7:05:85:
                    50:fc:04:10:35:a0:1b:4d:d6:be:90:da:7c:ea:79:
                    00:ed:81:75:ab:4c:28:8c:9b:4b:62:a1:1e:9f:71:
                    be:f0:bc:a9:13:b4:91:29:3a:3c:7c:9f:bb:15:b3:
                    e2:3c:d1:6a:78:64:81:15:21:7e:8b:6b:97:ae:1d:
                    73:fd:6b:9f:54:d1:9e:1f:c8:7c:9c:0c:c0:77:68:
                    cd:45:f6:1e:66:90:ec:f6:40:42:6d:30:e2:54:e2:
                    d7:2c:84:e2:75:90:6e:9d:d4:90:1c:d4:b4:c9:c3:
                    d8:1b:30:17:e1:c8:3f:d5:94:65:24:6f:49:49:7d:
                    9e:1a:2e:e8:05:bc:bc:3e:1b:a3:e6:d9:ad:2d:b3:
                    05:35:a4:7f:80:00:6f:d0:67:37:5b:24:44:83:e5:
                    43:26:42:1d:32:a3:b3:cb:1b:b8:fe:51:b5:66:58:
                    2d:76:02:53:a3:5e:1c:71:d6:86:95:63:9e:f8:4a:
                    e2:63:57:5a:91:98:49:86:f5:e7:f7:17:10:da:a7:
                    9c:0f:51:5e:76:18:80:67:71:80:b3:02:48:4c:d8:
                    04:41:b4:bd:e4:cb:0f:42:93:24:0d:09:3a:01:06:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:55:64:7E:F8:87:FC:B5:07:0F:B9:B7:B4:44:3C:67:C4:4E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:59:2a:9e:4d:fd:bc:f6:f6:d2:01:24:49:f4:1c:28:6a:65:
         6b:45:e1:04:d0:cb:ee:17:ad:4c:7d:20:2c:8f:83:04:50:81:
         48:86:17:78:73:9f:0a:bf:a1:78:df:3e:c3:7b:52:fb:dc:5a:
         97:d5:67:2f:58:47:ac:a0:f6:2b:6a:77:9e:ae:83:de:d4:94:
         27:b4:bf:24:62:32:b2:9f:3e:9f:9a:64:df:2e:ac:24:b1:5d:
         0f:d6:a6:89:cb:af:22:af:3d:e2:dc:70:4a:ea:cf:71:24:41:
         f0:e7:ed:ea:10:ea:df:c2:49:01:ea:37:31:58:43:f6:22:0f:
         a3:a1:03:18:46:b5:5b:e3:41:da:84:43:88:80:12:db:76:14:
         0f:b1:c0:da:2d:90:e5:0c:e8:df:68:cb:f3:0c:2f:54:06:ba:
         cc:bb:80:a8:ab:32:91:69:24:1d:7a:87:5e:46:a1:07:08:85:
         4d:8e:de:9f:bf:e6:ca:c2:ef:89:6b:28:b7:8c:ac:2b:08:02:
         6b:d8:b6:1e:90:4e:df:50:57:3e:ee:78:4a:70:29:0b:7d:44:
         bf:b8:fa:77:85:65:90:9f:c3:42:96:5e:43:b7:7b:99:b8:06:
         a0:39:39:52:49:0a:5e:a4:7a:f3:46:e6:29:ae:8a:3e:18:5e:
         44:f1:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----