Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f10b3790-c07b-3076-a038-7c2c549ca7ba.roa
File:                     f10b3790-c07b-3076-a038-7c2c549ca7ba.roa (raw, json)
Hash identifier:          PKFhAIwbbJluzh6uplAZVL+LREcNosiBu+h1wgZdgGI=
Subject key identifier:   79:28:40:E2:24:B6:E0:CA:9B:EC:2F:DB:CF:86:67:C3:44:E1:C2:CF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0067F883694BA981DF97780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f10b3790-c07b-3076-a038-7c2c549ca7ba.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     32651
IP address blocks:        209.112.127.30/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:7f:88:36:94:ba:98:1d:f9:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=b42908ae-100b-49aa-be30-d00fea90b4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:65:4b:e8:80:4a:2b:fb:5b:f7:21:44:63:
                    37:88:ec:12:3c:f6:2d:03:33:c5:b5:45:93:f8:58:
                    5f:ef:37:2e:57:0d:4a:10:76:2b:f6:fd:f8:de:42:
                    96:e9:c0:2c:a8:29:35:2c:05:81:f4:bb:aa:bf:6d:
                    bc:79:c5:40:d2:05:d6:0e:f1:fc:08:a7:d2:8b:0c:
                    f9:26:6e:88:44:d7:45:f5:bc:72:c0:d1:e1:53:6f:
                    e0:4b:cf:de:8e:f0:58:81:e2:9c:88:15:26:4d:78:
                    5b:f4:a7:0d:18:7d:7d:e9:0d:04:01:39:fe:43:f5:
                    03:0b:43:0c:5e:3b:ea:d5:59:f9:c5:33:99:c1:0e:
                    e8:78:89:09:3e:13:b8:75:83:f3:c7:73:17:89:e7:
                    8a:4f:fb:4e:3c:8c:3d:fd:a2:1a:26:9f:4e:e4:58:
                    95:8f:9e:89:fa:d8:a4:2e:5f:a7:d1:55:d9:47:fb:
                    fe:92:8f:c9:b8:f5:47:93:91:d5:d8:d9:a5:60:d9:
                    1c:83:5c:00:ff:85:c1:cd:3b:cc:76:ec:21:25:45:
                    a2:a6:0e:23:25:ac:0d:58:6b:e6:04:ea:8e:cf:d2:
                    bb:40:70:6d:b8:50:bf:4e:55:51:1c:5a:83:94:32:
                    d6:65:81:be:e5:d1:b0:64:d1:7c:43:e5:0e:42:9b:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:40:E2:24:B6:E0:CA:9B:EC:2F:DB:CF:86:67:C3:44:E1:C2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f10b3790-c07b-3076-a038-7c2c549ca7ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:6f:ac:c9:1c:49:a3:76:d2:2c:f0:e6:5f:7d:2f:a3:54:
         fa:35:cd:32:b9:e3:80:18:61:dd:45:2f:b2:97:92:de:b4:b1:
         c9:a9:0b:b8:c6:96:01:5e:69:d9:25:6e:b3:c1:62:95:d8:7f:
         34:5f:65:42:0e:24:71:90:6f:93:e2:e3:9b:71:2d:c0:54:3f:
         85:13:77:af:52:c8:39:76:b4:2c:b4:5e:9f:04:60:9e:e1:00:
         40:77:97:68:48:9f:70:d0:76:78:18:e8:83:82:59:d8:fe:54:
         a7:9a:6c:e7:11:db:ee:ce:91:4f:37:63:c6:91:2d:11:c1:d7:
         31:ba:0d:f1:ef:64:2d:9a:a4:84:4b:b9:3c:11:ac:5e:28:40:
         26:46:5d:da:5c:9a:b6:7d:02:37:f9:81:6e:7e:bc:3c:34:37:
         02:55:9e:68:2a:25:6c:bd:54:7f:e3:96:92:35:ed:f2:d6:93:
         78:be:0a:de:a2:64:a0:63:33:80:ef:fa:10:c8:db:65:02:77:
         32:22:20:2a:fe:a0:a8:56:5d:7e:03:53:c8:ae:65:4a:06:42:
         08:a4:d6:da:92:99:f7:84:f1:9b:39:3f:7f:2c:62:da:56:f3:
         16:be:e8:05:ae:dc:d8:af:a1:d3:bc:0f:aa:4b:0e:79:c7:fd:
         c2:95:e5:31
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn+INpS6mB35d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
YjQyOTA4YWUtMTAwYi00OWFhLWJlMzAtZDAwZmVhOTBiNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSdlS+iASiv7W/chRGM3iOwSPPYtAzPFtUWT
+Fhf7zcuVw1KEHYr9v343kKW6cAsqCk1LAWB9Luqv228ecVA0gXWDvH8CKfSiwz5
Jm6IRNdF9bxywNHhU2/gS8/ejvBYgeKciBUmTXhb9KcNGH196Q0EATn+Q/UDC0MM
Xjvq1Vn5xTOZwQ7oeIkJPhO4dYPzx3MXieeKT/tOPIw9/aIaJp9O5FiVj56J+tik
Ll+n0VXZR/v+ko/JuPVHk5HV2NmlYNkcg1wA/4XBzTvMduwhJUWipg4jJawNWGvm
BOqOz9K7QHBtuFC/TlVRHFqDlDLWZYG+5dGwZNF8Q+UOQpuNRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHkoQOIktuDKm+wv28+GZ8NE4cLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjEwYjM3OTAtYzA3Yi0z
MDc2LWEwMzgtN2MyYzU0OWNhN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCL8m+syRxJo3bSLPDmX30vo1T6Nc0yueOAGGHdRS+yl5LetLHJqQu4
xpYBXmnZJW6zwWKV2H80X2VCDiRxkG+T4uObcS3AVD+FE3evUsg5drQstF6fBGCe
4QBAd5doSJ9w0HZ4GOiDglnY/lSnmmznEdvuzpFPN2PGkS0Rwdcxug3x72QtmqSE
S7k8EaxeKEAmRl3aXJq2fQI3+YFufrw8NDcCVZ5oKiVsvVR/45aSNe3y1pN4vgre
omSgYzOA7/oQyNtlAncyIiAq/qCoVl1+A1PIrmVKBkIIpNbakpn3hPGbOT9/LGLa
VvMWvugFrtzYr6HTvA+qSw55x/3CleUx
-----END CERTIFICATE-----