Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa
File:                     c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa (raw, json)
Hash identifier:          dKnAAlX43QSVNSIdvmJXMTVyQwPy/l73NIcJb05c7Wk=
Subject key identifier:   56:2F:A8:22:59:1B:1C:B8:DF:C4:CA:5B:1E:AA:8E:65:C7:8D:EE:E8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E00682CC27A65C18B553A400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396557
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:82:cc:27:a6:5c:18:b5:53:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=86ae5d0e-ea7b-4546-b2bb-00dff7247110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:39:81:8d:48:d0:70:7a:99:77:5e:ee:d7:
                    81:d3:bf:66:cd:6b:f6:9a:f8:bd:2e:d9:90:57:e1:
                    f6:c9:de:da:a7:ba:2c:44:4e:1f:69:de:15:eb:b2:
                    32:17:38:3c:c9:cb:3b:ab:f5:ad:da:30:c8:82:2e:
                    54:71:40:82:6a:78:60:b7:82:41:35:4f:0c:64:ac:
                    00:c4:8b:58:e6:7c:bf:70:c2:12:91:01:26:ea:21:
                    67:ce:96:52:f2:ae:a9:1a:9e:ab:52:70:56:1a:5d:
                    69:c4:21:07:f9:db:3f:f3:68:41:b0:2c:5f:1f:c6:
                    39:5c:67:e5:05:6b:21:7b:83:c6:2f:38:b2:0b:02:
                    08:aa:52:35:e9:21:5e:78:bb:83:95:d6:21:b8:c6:
                    b3:77:32:a0:61:78:4b:f2:27:e5:94:d7:8b:9b:65:
                    d8:96:d1:78:94:65:ad:14:55:38:fe:05:ef:79:b1:
                    77:cf:0a:b0:01:d4:49:bc:b6:ad:a4:4d:dd:c9:a4:
                    74:70:75:b7:31:7e:3c:51:57:08:f6:8b:70:a9:bb:
                    20:25:1e:d1:7e:b3:94:e6:c3:66:81:11:42:88:74:
                    e2:f5:b8:c0:c4:09:67:7a:2b:6e:5d:a6:90:92:a8:
                    80:4a:35:9b:0f:b5:80:f9:8d:33:28:60:9d:aa:5d:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:A8:22:59:1B:1C:B8:DF:C4:CA:5B:1E:AA:8E:65:C7:8D:EE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:70:f5:f0:d4:de:de:91:37:b0:f0:cd:a6:e5:33:44:bd:8e:
         77:46:29:e6:04:db:67:1f:b6:1b:3e:5f:d1:cc:1b:cf:c0:e4:
         b1:04:a3:bb:46:5f:82:0b:cf:d9:45:2b:ad:16:50:51:e9:52:
         72:c2:bc:c7:87:8c:6b:5a:95:79:7f:26:bd:d9:72:00:75:f5:
         95:39:d0:8f:19:64:81:6d:19:43:b2:d5:58:8e:e8:30:a5:58:
         0c:5f:75:ab:6c:40:ab:c0:cb:8e:5d:7b:82:66:62:2f:d7:12:
         47:ae:d1:4e:a8:6a:db:67:b7:8e:48:83:84:63:e1:09:22:1a:
         f6:ec:1b:9d:12:9d:ef:6f:9e:f5:8b:e0:15:d4:3d:f3:b2:00:
         29:1f:c7:1d:aa:f3:7b:68:5d:04:a2:df:8a:f7:14:77:ab:35:
         2d:3f:73:8b:46:9b:02:00:b7:5b:4c:58:c2:82:64:29:50:52:
         7f:cc:0d:f7:9a:e1:92:ae:73:47:ff:be:5c:c9:e2:dd:39:1f:
         8d:f2:bc:1b:d6:c2:9a:54:27:6c:3c:dc:8a:dd:f3:5a:83:06:
         a1:69:10:26:60:e1:cd:37:ae:27:c3:0f:8f:7e:37:18:d1:9e:
         b6:b3:0b:92:95:49:8c:dc:a2:dd:f7:8d:22:ff:08:a7:91:7b:
         49:5f:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----