Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa
File:                     0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa (raw, json)
Hash identifier:          EKl1SV2Fq0LjfpFx9EhU5BB05qcX45T9fD9z7CUAZco=
Subject key identifier:   17:DF:E2:36:40:A1:D6:B1:FD:2C:53:C8:61:57:C8:C6:3C:27:20:FD
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F432858495ABEB77D47CD70A14EE6E040
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     31859
IP address blocks:        208.180.74.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b7:7d:47:cd:70:a1:4e:e6:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=83b7b442-0589-40e3-8743-64fb260bc140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:8f:90:a1:59:d8:68:e1:49:bd:0f:20:84:
                    5a:5b:e0:69:67:fc:bb:10:ce:a6:0d:a8:8b:f0:13:
                    48:f6:da:d0:f9:89:9a:14:53:50:29:80:58:21:9b:
                    c9:41:f0:88:d7:64:82:64:c3:0f:44:9e:b5:01:db:
                    b7:07:be:0f:88:c2:f4:e9:ce:fd:fa:9f:7b:99:d9:
                    24:03:5e:d4:44:f8:17:d6:6d:fb:86:bc:ad:8d:93:
                    43:45:99:47:6a:2c:fd:7d:8e:7f:46:d8:18:54:b7:
                    c5:c7:76:13:8e:3f:ec:08:7b:e6:15:a7:39:5f:69:
                    57:14:c8:95:a2:1e:c6:59:69:c1:34:24:f3:2f:77:
                    a7:da:02:73:7e:10:63:34:9c:09:bf:53:5a:73:18:
                    5b:71:36:92:99:df:f4:f3:99:aa:18:68:be:c7:bb:
                    0b:28:d2:97:9e:13:f4:95:45:af:a5:47:9f:ed:70:
                    99:e3:cb:97:df:4d:17:24:e7:c9:42:bc:2e:fb:e9:
                    d4:b5:4f:aa:31:1b:7a:3d:30:fb:d4:5c:9b:58:74:
                    7d:dd:b5:93:ae:73:f5:3e:13:5c:8f:32:bc:b7:00:
                    8f:05:41:17:c9:1a:bc:87:cc:3d:03:5f:77:8d:7e:
                    cd:20:84:ad:01:dc:0e:c4:57:3a:b4:b3:25:e4:ac:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DF:E2:36:40:A1:D6:B1:FD:2C:53:C8:61:57:C8:C6:3C:27:20:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.180.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:42:4a:4d:b8:60:87:7e:8f:bf:cd:84:4b:83:60:71:49:
         1c:af:ce:a7:2f:3e:ac:af:eb:0e:ef:95:5b:ef:bb:32:70:ba:
         e6:9b:58:c0:79:60:3f:62:c8:ba:2c:be:36:43:9b:6a:5d:75:
         e7:bf:75:89:6d:c4:ad:25:7d:91:87:27:15:a4:0b:0f:7f:e8:
         56:b5:49:42:2e:1f:4f:df:e3:da:59:8f:1d:38:32:8b:75:f8:
         af:f7:62:97:1a:38:56:57:23:86:61:37:7d:1a:d3:f4:b3:95:
         d4:52:19:d6:d7:59:81:fd:37:4e:e8:9d:ed:91:87:e9:3d:d4:
         32:52:62:8e:ba:0d:17:2b:17:cb:c6:36:76:4a:46:3d:8b:b6:
         3d:d4:1b:b4:eb:9b:bd:f5:5f:e1:16:30:bd:87:0a:3e:2a:71:
         56:6a:c4:33:33:c6:73:ef:b6:20:7e:2e:5e:18:00:ba:56:ef:
         5b:36:c3:e5:82:1b:79:26:a2:98:5d:eb:4e:96:2d:e5:3f:52:
         ec:6e:65:03:c6:05:d9:19:8c:e3:42:11:52:e9:72:5f:08:fd:
         5f:d2:c6:50:3d:62:95:44:b9:6d:2a:ef:03:74:fc:8e:25:6d:
         7a:c5:44:85:08:dd:49:9a:38:89:19:8a:07:45:ea:b8:ff:ba:
         15:a4:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----