Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa
File:                     574a93c6-a18f-3df5-a131-c283150c7482.roa (raw, json)
Hash identifier:          fXpSv8TZ0O0hHmZ/uBo8dRGhd6DanazJCNvEbLT93K8=
Subject key identifier:   A1:54:AC:A9:D3:08:81:67:4C:93:3D:15:6C:A5:1E:F4:2A:6B:87:B3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0067C773B3CF57CD686EC40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396594
IP address blocks:        209.112.127.31/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:7c:77:3b:3c:f5:7c:d6:86:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=667bc69d-a47c-45a5-b0c9-8cbdca16127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:7c:fb:95:34:0c:55:5a:60:ff:06:57:a2:
                    58:61:57:08:54:83:17:ad:b2:a6:0e:73:30:a7:a8:
                    f8:64:67:23:63:49:1e:86:80:11:1f:c7:46:32:e0:
                    10:ca:21:d8:37:2d:1e:49:1e:16:bb:b6:9a:7b:73:
                    e2:eb:5d:27:74:f9:eb:20:13:8d:27:1b:98:4c:76:
                    2b:fb:92:00:06:4f:b6:2d:0a:c0:82:70:74:92:45:
                    3b:c1:a6:62:fb:54:63:d8:91:b1:85:48:cc:d2:98:
                    4e:77:6c:4c:cb:5b:6c:ed:4e:51:41:65:af:3e:a4:
                    5c:ce:1e:73:67:29:fc:a2:56:47:26:04:18:ed:60:
                    6b:e7:b3:33:31:d9:ca:18:19:f3:1e:05:b6:0e:1b:
                    18:5e:52:8b:cb:79:03:25:26:45:a1:c2:a0:95:6b:
                    41:07:06:28:21:ff:75:e6:d0:08:b7:31:fe:55:41:
                    f2:24:24:bb:0b:d8:ad:3c:48:08:4a:73:0a:0d:65:
                    2a:75:11:62:01:fe:c3:b3:3d:08:49:db:78:74:c0:
                    23:33:eb:12:8b:d9:c6:f1:fa:b7:b2:82:4b:02:0e:
                    72:af:1d:d7:97:2a:8b:07:46:7b:33:82:40:94:30:
                    83:4d:32:ee:36:9e:a7:a0:fb:83:e9:ef:29:fd:b2:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:AC:A9:D3:08:81:67:4C:93:3D:15:6C:A5:1E:F4:2A:6B:87:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:b8:c3:01:42:b0:d4:5d:cd:da:46:8c:de:cf:b2:d3:3b:
         56:96:81:a5:7e:fa:05:9d:36:5a:a8:a1:ff:c9:c6:0d:4c:fa:
         b4:29:62:31:7d:cc:a0:66:b3:f8:1f:e3:2a:98:2e:75:90:60:
         cb:ac:ee:12:47:2e:9b:72:a3:5d:5b:66:29:9f:89:d8:7f:c2:
         a7:2a:aa:eb:d8:cb:14:23:3a:2f:d4:7a:64:5e:21:fe:0c:5b:
         9e:c4:3f:99:d9:f1:a9:da:f4:57:3c:49:45:24:fd:fa:85:81:
         4b:77:6e:7d:be:29:47:d2:52:bf:24:60:21:fa:c1:40:53:14:
         92:07:65:17:e6:a4:94:d6:64:c5:bf:ef:6e:5a:66:f6:c1:1e:
         0c:4a:0c:50:ee:87:12:8e:e4:c8:10:4f:74:84:bd:fb:f8:68:
         95:5a:9a:06:57:d5:10:d4:c3:2e:27:a0:8b:cb:b0:ec:b5:db:
         c8:f8:af:80:4a:9b:43:40:78:37:1c:ad:9c:69:b8:24:83:52:
         28:3b:19:dd:65:a1:c0:f0:b7:92:92:12:a1:0e:91:d7:c8:b7:
         49:77:16:89:d5:06:69:9d:8e:2e:b2:a2:07:2e:d6:cd:89:15:
         69:16:31:f5:51:6a:f8:51:95:8c:2d:1e:38:e9:64:58:52:d0:
         67:3c:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----