Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa
File:                     4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa (raw, json)
Hash identifier:          xihsFEFnZyKSSabz7Fa0slZjiRbUj9B3bFlwkDvtD+4=
Subject key identifier:   5A:F4:7F:95:92:67:BD:8B:2D:54:A6:57:2A:2F:2E:F4:E9:4E:89:CE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584902EC19DF6E47EE7558C77E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     63018
IP address blocks:        172.111.237.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:19:df:6e:47:ee:75:58:c7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c074b974-9950-4bb4-8a25-c2c0fbd64d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:56:31:8d:01:81:a5:8e:86:f5:8d:f0:f0:
                    fe:ae:8b:ea:47:1e:0b:36:c6:97:39:94:57:e3:68:
                    0e:49:9f:2d:14:e0:5f:7a:97:90:c5:e2:44:84:cc:
                    6c:41:21:12:e2:f5:12:ac:6a:b2:64:55:1e:52:17:
                    1b:c0:2d:3b:10:56:3c:4b:6d:98:09:ad:a9:e9:2b:
                    cd:99:6a:d8:24:0f:f5:77:cb:8a:1d:3a:b3:fa:55:
                    fb:20:3e:ed:40:64:26:b8:0f:42:87:e6:92:e7:80:
                    71:a3:fc:23:e9:4d:47:49:9a:6f:67:29:d9:14:ce:
                    bf:9d:d1:aa:85:05:91:bb:2e:70:ed:3c:d1:bf:83:
                    30:0f:1c:d4:60:c8:f1:65:5c:25:c4:6a:30:8a:70:
                    44:ca:33:45:18:11:c2:74:18:ec:da:80:3f:74:95:
                    97:21:09:7e:d0:c5:97:74:71:3a:89:97:e1:bc:0e:
                    10:00:b9:51:28:f2:49:4b:14:42:f3:0e:04:17:d3:
                    f0:fe:44:61:ab:fc:a7:32:84:ae:d7:ac:02:83:31:
                    73:1d:e0:b0:59:d6:c0:74:e2:d3:63:81:55:0c:de:
                    bb:55:9b:7f:39:5b:ff:dc:fc:82:b9:c6:59:ff:79:
                    9b:06:74:e0:61:61:4d:cd:6e:e0:bf:be:ab:46:b3:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:7F:95:92:67:BD:8B:2D:54:A6:57:2A:2F:2E:F4:E9:4E:89:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:86:96:c9:43:63:40:3f:6b:78:c5:cf:d2:74:50:f7:79:
         10:9a:4f:78:96:2f:f6:f3:7e:96:0a:ba:d8:f6:06:d7:71:61:
         ce:c1:72:54:0d:2c:dc:26:d4:91:13:8f:91:3b:90:8b:47:47:
         7a:9e:55:9f:a1:02:25:5b:4e:b9:fb:24:43:2d:24:7d:4e:e1:
         f6:ee:fd:f2:4b:30:1a:1a:16:12:99:c2:fa:62:a3:80:78:9e:
         cd:bc:70:03:be:ab:35:dc:3c:2a:fa:c4:0b:82:03:78:b3:31:
         19:5f:c3:fc:ea:63:09:d6:e6:b4:cf:0d:30:d1:33:8a:71:d0:
         40:46:bf:05:d7:e2:69:52:fb:01:2b:5f:ea:ce:d3:c6:73:69:
         ad:81:0c:ec:ed:21:3b:ca:d6:17:b2:2c:c2:e9:35:5f:a3:b6:
         ee:00:66:e1:92:76:11:63:67:3a:41:2e:12:8b:e0:c4:1e:c4:
         58:ed:6c:52:54:f7:56:34:d9:bd:18:6f:4b:7c:78:b2:a8:64:
         70:c3:2c:82:e2:7a:b6:34:a7:1d:61:13:be:79:ce:64:6b:46:
         9c:f0:8f:2e:d4:cd:0b:36:ce:2f:fb:c7:7d:16:3f:5c:d3:bb:
         85:b3:9f:11:fc:6d:8e:b3:94:82:c1:5d:a5:54:41:46:01:24:
         8e:bf:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----