Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa
File:                     b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa (raw, json)
Hash identifier:          Yi0J43UD9TNfBi3WGd3I/7R1i0I0wzl/wDArDNKieyM=
Subject key identifier:   E4:07:83:38:32:1F:46:B8:91:FB:95:00:A5:D4:00:7A:A3:AB:03:40
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F4328584981D45530EB8D03BB91450B80
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     20473
IP address blocks:        63.133.218.0/24 maxlen: 24
                          2602:fbd9::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:55:30:eb:8d:03:bb:91:45:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=dda5f391-ada9-43dc-8fd1-4dccd64bf8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:17:37:bb:c4:8f:42:de:bd:75:19:33:7b:
                    36:ae:0b:12:ef:a2:98:31:7a:65:0d:9b:8a:67:6b:
                    e9:87:42:f3:b3:5e:a9:ee:7f:75:3c:4b:f5:c3:c6:
                    39:d2:5d:09:34:0d:07:f3:a9:76:36:30:bf:de:8a:
                    95:06:72:1b:67:cd:aa:e7:5d:56:0c:dd:54:13:ee:
                    9b:c7:fb:47:30:53:7e:38:48:01:30:01:55:fb:38:
                    bd:66:0a:a7:d3:aa:c1:df:ab:6f:37:35:8f:73:a1:
                    a1:f4:3b:a3:fe:db:2a:8e:1b:68:de:83:df:d8:c3:
                    76:74:44:a7:1f:a8:dc:5a:b8:bd:8e:2c:42:b6:ef:
                    b1:df:8a:37:9e:8a:dd:dc:db:98:81:10:59:18:b2:
                    63:cc:5f:6d:ed:fd:e5:de:37:1f:cb:49:4f:1f:38:
                    59:60:eb:24:1c:23:0e:cc:d7:ec:0f:5d:9c:eb:20:
                    c1:69:93:3c:a3:9d:58:86:48:66:ce:04:5a:36:60:
                    ac:02:f6:bf:1f:6e:a3:2b:06:88:56:dc:4e:d4:4f:
                    d1:d9:50:c0:78:9c:66:03:4a:87:b0:f5:3f:5f:38:
                    11:c9:f3:79:44:c3:cc:05:b6:f1:ba:ea:f7:18:3a:
                    f7:72:f4:87:04:a3:04:83:5b:de:e9:84:61:5a:a2:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:83:38:32:1F:46:B8:91:FB:95:00:A5:D4:00:7A:A3:AB:03:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.218.0/24
                IPv6:
                  2602:fbd9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:4b:1d:71:7d:21:ad:1e:90:6f:44:47:fd:5d:2a:66:e0:34:
         0c:70:d9:af:89:70:72:a8:02:89:3b:e6:78:bb:d0:8d:40:10:
         07:b1:38:f7:f7:6a:e5:5a:a0:93:de:cd:1c:c9:f4:d7:61:d4:
         42:77:6f:e0:d6:fd:75:37:94:b2:34:6e:84:9c:29:d9:50:af:
         f2:65:79:96:19:af:25:cd:ec:8e:1a:e5:c5:32:2f:91:7c:08:
         18:bf:58:95:49:10:36:3e:ac:fc:aa:d3:67:0b:bc:5e:36:a5:
         7e:37:99:34:92:01:3c:8e:d4:77:ef:cd:dc:ab:2a:f0:4c:55:
         7f:62:4e:77:7b:93:86:d2:fb:9b:b1:88:b9:18:10:f9:19:c2:
         b1:2e:b2:36:5c:76:cc:6b:69:ee:83:90:2c:1a:39:4c:76:87:
         04:cb:46:47:e7:c8:e4:9a:68:af:d0:e3:ed:9e:2b:68:f9:ec:
         9d:20:98:bd:2c:de:7c:6d:63:b0:c5:5a:d2:20:5f:cb:f5:99:
         62:7e:be:22:c8:1a:1f:aa:db:d8:a2:00:44:90:4d:05:8e:ce:
         7f:be:2d:c0:cc:5c:f5:63:52:ed:75:de:96:a7:05:ed:8e:6d:
         00:f1:cb:fb:05:3f:77:c7:40:52:65:21:f7:01:77:e4:63:0f:
         65:29:0e:ba
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmB1FUw640Du5FFC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl
Njc2MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
ZGRhNWYzOTEtYWRhOS00M2RjLThmZDEtNGRjY2Q2NGJmOGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW0XN7vEj0LevXUZM3s2rgsS76KYMXplDZuK
Z2vph0Lzs16p7n91PEv1w8Y50l0JNA0H86l2NjC/3oqVBnIbZ82q511WDN1UE+6b
x/tHMFN+OEgBMAFV+zi9Zgqn06rB36tvNzWPc6Gh9Duj/tsqjhto3oPf2MN2dESn
H6jcWri9jixCtu+x34o3nord3NuYgRBZGLJjzF9t7f3l3jcfy0lPHzhZYOskHCMO
zNfsD12c6yDBaZM8o51YhkhmzgRaNmCsAva/H26jKwaIVtxO1E/R2VDAeJxmA0qH
sPU/XzgRyfN5RMPMBbbxuur3GDr3cvSHBKMEg1ve6YRhWqJ6AQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFOQHgzgyH0a4kfuVAKXUAHqjqwNAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh
OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvYjUzZTI1NjEtODliYi0z
OGMwLWEyZjMtYmYwZDVkYTk5MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2
YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj
ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw
MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAP4XaMA8E
AgACMAkDBwAmAvvZAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAq0sdcX0hrR6Qb0RH/V0qZuA0DHDZr4lw
cqgCiTvmeLvQjUAQB7E49/dq5Vqgk97NHMn012HUQndv4Nb9dTeUsjRuhJwp2VCv
8mV5lhmvJc3sjhrlxTIvkXwIGL9YlUkQNj6s/KrTZwu8XjalfjeZNJIBPI7Ud+/N
3Ksq8ExVf2JOd3uThtL7m7GIuRgQ+RnCsS6yNlx2zGtp7oOQLBo5THaHBMtGR+fI
5Jpor9Dj7Z4raPnsnSCYvSzefG1jsMVa0iBfy/WZYn6+IsgaH6rb2KIARJBNBY7O
f74twMxc9WNS7XXelqcF7Y5tAPHL+wU/d8dAUmUh9wF35GMPZSkOug==
-----END CERTIFICATE-----