Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9514ce73-113a-3e73-a075-972f2891c8ce.roa
File:                     9514ce73-113a-3e73-a075-972f2891c8ce.roa (raw, json)
Hash identifier:          wh3Q1/0l0y5vnh0SBDP3tm0lwRli9Ce2LTFd9+Hd1Ig=
Subject key identifier:   A8:FE:79:4E:B3:24:3A:7E:1A:B2:47:D5:4E:9B:DF:FA:0D:3D:58:F5
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584957F4198E096CF25BA7DB4340
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9514ce73-113a-3e73-a075-972f2891c8ce.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        67.217.28.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:19:8e:09:6c:f2:5b:a7:db:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=805fc5d9-b7b1-4899-8ba4-4905b0b001fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:2c:15:c4:d5:d6:c6:fb:2a:44:a9:16:62:
                    11:59:5b:4f:8a:fe:4f:0e:1f:6a:15:8a:2a:2b:9a:
                    02:aa:9f:78:a2:dc:ab:e7:b2:03:bb:53:62:74:ee:
                    73:8a:39:aa:b5:57:bf:f0:16:ea:75:52:5b:66:f7:
                    68:1f:34:bd:6c:f5:39:11:6e:3a:e1:f9:6e:b6:18:
                    4d:6e:e3:a6:70:d8:c5:da:2a:03:4b:bc:94:63:95:
                    35:f9:e6:d6:a8:b1:f8:f5:ca:5f:bf:37:1f:00:81:
                    e6:3e:20:38:01:69:e6:8b:08:7e:a4:69:06:da:d8:
                    a6:8c:e3:91:07:df:47:db:e2:44:43:6d:e7:99:ba:
                    e7:05:2f:c1:71:91:85:a2:5f:17:5f:37:79:a2:95:
                    bc:f1:a8:a1:16:d8:ac:6b:92:c2:5d:98:f4:ca:b4:
                    0d:b9:c8:ca:72:91:f4:91:76:4f:10:e2:af:a2:41:
                    53:0c:5c:3d:4a:ac:cc:a9:d5:79:62:58:26:11:a1:
                    9e:c5:90:84:6e:94:47:c1:d8:42:69:c5:00:69:03:
                    60:31:64:51:a8:56:d4:2a:05:62:0a:aa:b1:0a:92:
                    62:c8:e1:82:ab:46:55:1d:a0:42:01:bc:d3:69:0d:
                    eb:fc:fe:7b:8a:33:86:e3:1e:79:7c:86:ac:df:13:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FE:79:4E:B3:24:3A:7E:1A:B2:47:D5:4E:9B:DF:FA:0D:3D:58:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9514ce73-113a-3e73-a075-972f2891c8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:18:4a:db:f4:cb:59:4d:cf:a1:02:fd:03:49:05:b3:95:
         9a:14:49:ef:6d:78:e8:96:86:39:c6:dd:5c:4b:20:36:13:a7:
         ff:b5:f6:ee:9a:ab:74:b7:7f:ce:b0:6e:61:40:eb:68:7a:34:
         4e:10:9e:41:77:7a:5a:24:50:fc:83:08:41:d1:24:d3:3a:2a:
         e0:11:da:15:0d:27:44:8d:28:7a:da:99:31:8c:66:df:45:01:
         b3:6e:6a:16:f6:0d:3c:09:c1:aa:69:a9:91:07:25:a2:03:5a:
         cc:b7:e0:9a:0c:b3:1d:73:46:1f:59:63:82:bb:c7:b3:36:4b:
         87:53:15:c0:21:1b:76:d3:64:40:4a:30:f3:37:52:80:2c:a9:
         c1:90:0d:0c:b8:b5:75:f8:1d:7b:4c:76:d8:24:a7:f4:cf:ff:
         ab:ac:85:ad:85:b8:5a:ec:fb:ae:d5:9e:7b:e1:c6:4b:6a:c5:
         f8:54:2a:20:70:7d:17:2f:2b:3e:1e:f0:ea:2e:dd:b2:15:94:
         e9:28:b5:d2:fa:fc:7b:99:f0:40:d5:7c:5f:01:ff:ad:41:ca:
         7e:7d:c9:2e:26:aa:cf:2f:7d:50:9e:19:a5:d6:af:f2:eb:c1:
         3f:29:5c:5a:2d:aa:28:bf:b5:84:56:c0:57:cf:0f:6b:f5:bf:
         7e:00:69:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BmOCWzyW6fbQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ODA1ZmM1ZDktYjdiMS00ODk5LThiYTQtNDkwNWIwYjAwMWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DYsFcTV1sb7KkSpFmIRWVtPiv5PDh9qFYoq
K5oCqp94otyr57IDu1NidO5zijmqtVe/8BbqdVJbZvdoHzS9bPU5EW464fluthhN
buOmcNjF2ioDS7yUY5U1+ebWqLH49cpfvzcfAIHmPiA4AWnmiwh+pGkG2timjOOR
B99H2+JEQ23nmbrnBS/BcZGFol8XXzd5opW88aihFtisa5LCXZj0yrQNucjKcpH0
kXZPEOKvokFTDFw9SqzMqdV5YlgmEaGexZCEbpRHwdhCacUAaQNgMWRRqFbUKgVi
CqqxCpJiyOGCq0ZVHaBCAbzTaQ3r/P57ijOG4x55fIas3xN9ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKj+eU6zJDp+GrJH1U6b3/oNPVj1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOTUxNGNlNzMtMTEzYS0z
ZTczLWEwNzUtOTcyZjI4OTFjOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgsGErb9MtZTc+hAv0DSQWzlZoUSe9teOiWhjnG3VxLIDYTp/+19u6a
q3S3f86wbmFA62h6NE4QnkF3elokUPyDCEHRJNM6KuAR2hUNJ0SNKHramTGMZt9F
AbNuahb2DTwJwappqZEHJaIDWsy34JoMsx1zRh9ZY4K7x7M2S4dTFcAhG3bTZEBK
MPM3UoAsqcGQDQy4tXX4HXtMdtgkp/TP/6usha2FuFrs+67VnnvhxktqxfhUKiBw
fRcvKz4e8Oou3bIVlOkotdL6/HuZ8EDVfF8B/61Byn59yS4mqs8vfVCeGaXWr/Lr
wT8pXFotqii/tYRWwFfPD2v1v34AaXE=
-----END CERTIFICATE-----