Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa
File:                     e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa (raw, json)
Hash identifier:          UeBMxKHfIKRfJhg/AWy4KQBRBMQWBZM+yEIavHwZvRw=
Subject key identifier:   62:6F:F8:32:24:68:A1:B8:93:A0:E1:E0:77:56:EB:74:28:37:61:46
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584957F41935B1D4DD860C0E6680
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.236.40.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:19:35:b1:d4:dd:86:0c:0e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=31061948-eccc-48c8-ad4c-d68723af72ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:6f:c3:0c:6d:2b:b6:42:37:aa:7c:b7:84:
                    78:4d:33:1f:00:1c:ac:0f:b3:b1:62:32:54:04:21:
                    29:4a:fe:d7:d9:91:ec:8f:2c:d7:fa:d0:a1:3f:8c:
                    21:9d:1f:c2:86:c1:22:b3:3a:3c:c6:e2:ba:16:14:
                    03:a6:03:8c:31:68:8a:d2:28:c0:6c:f0:cb:7f:b2:
                    b5:07:f0:3c:c8:21:67:67:fb:c8:49:4c:d0:78:34:
                    77:42:be:8a:1a:75:a0:8d:22:80:02:83:34:a7:80:
                    77:91:bd:11:60:c4:cd:f5:ce:66:24:b4:9f:ee:a4:
                    60:47:9a:38:ba:cf:a7:7a:c4:fd:02:00:ab:33:89:
                    7d:70:1c:44:f4:90:d4:df:c0:4a:1f:5e:ee:a5:c9:
                    3c:99:b4:08:23:e4:f5:32:95:64:15:51:20:21:3b:
                    cc:87:b9:ae:16:cc:a4:c2:e8:eb:02:29:27:94:e6:
                    17:b5:e6:e8:85:57:85:54:30:fe:b8:a3:8b:03:41:
                    ec:e9:43:fa:8b:fb:1b:c6:2c:31:dd:2f:e2:74:d9:
                    3b:0c:36:75:19:94:54:b6:e2:96:01:4d:80:50:c9:
                    7e:aa:f4:e2:2a:36:a2:86:3d:7b:85:3d:89:4d:2e:
                    99:61:f0:db:30:e5:ab:8c:87:2b:33:d5:27:99:a7:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:F8:32:24:68:A1:B8:93:A0:E1:E0:77:56:EB:74:28:37:61:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.236.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:27:73:6e:f4:7d:d8:c5:45:dc:c7:ee:ab:ad:9c:4a:e6:d2:
         b3:29:46:c2:37:70:df:65:2e:90:ac:1b:c4:c5:04:f0:7a:35:
         f5:42:5b:18:fd:80:13:7f:e6:43:a6:ff:4f:c2:38:11:96:73:
         c4:3e:10:09:cd:3f:3d:6e:b4:c0:a2:02:ce:31:c4:fb:d2:92:
         c7:10:a3:d7:f0:a4:e4:6a:d5:1c:1d:af:61:81:04:50:45:a4:
         a5:5f:d0:cf:46:0b:3c:6d:5b:37:2d:38:d6:4a:5c:da:59:80:
         a6:0d:06:1d:30:3d:93:a9:4b:c6:be:87:28:a5:7a:33:60:98:
         56:01:68:6b:8d:32:5f:2a:04:ca:59:46:34:e3:30:5f:ff:9b:
         a1:e1:d1:45:ab:09:f3:07:27:1a:01:ff:92:8e:8a:5b:b2:25:
         0e:7b:73:c2:7d:54:07:aa:b0:aa:11:3b:71:db:9a:7b:73:45:
         b3:bf:4f:92:86:e9:f2:f9:da:9b:c3:19:f0:88:aa:bd:05:bc:
         d0:67:6a:3f:1a:6b:be:01:d8:db:61:60:a3:76:58:6e:b0:b2:
         a5:48:15:d8:d1:75:ba:d1:83:fa:0b:52:1c:7f:f7:12:a7:82:
         e1:f4:3d:0e:85:09:8b:d4:f1:d1:f0:17:ca:de:aa:42:8a:ed:
         43:8d:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----