Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa
File:                     26d0ec30-673c-3c09-acc5-b6d96cb73524.roa (raw, json)
Hash identifier:          Z5kHViBHv5ytWcEUw3i3gE960DAXpHDw+IGU/2TX3u4=
Subject key identifier:   43:5A:A5:5D:12:28:AE:B6:B1:E2:EA:67:D7:B9:96:79:AC:7D:C4:FF
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584981D44AA2847A1E6FF4A72940
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     22652
IP address blocks:        207.253.56.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:4a:a2:84:7a:1e:6f:f4:a7:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=487d4b68-ac3b-4205-b708-12d96e9fa4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:08:ce:ef:3c:8e:84:4b:d7:69:aa:7a:97:
                    90:10:96:d3:0b:37:76:3c:11:4b:bb:cb:c3:7d:a2:
                    75:50:4d:19:9b:bc:ae:f8:cf:b8:43:8b:b7:59:da:
                    df:04:cb:cc:1d:1b:f6:20:bd:b7:2b:f6:64:25:b3:
                    5c:25:9f:37:2a:81:c8:92:cd:36:b7:dd:53:bb:2d:
                    8a:10:79:1c:9a:ef:41:44:32:35:2b:33:8d:74:47:
                    58:93:69:4f:e4:7d:4b:d2:0f:a4:3e:20:4e:e5:46:
                    5d:89:7f:4a:e8:8a:0c:3e:e1:c7:34:ef:9c:33:a9:
                    6d:fc:6e:73:8c:98:9c:8b:70:b2:dc:98:36:de:df:
                    61:ab:51:64:53:25:dd:e2:60:05:bb:02:58:4a:2c:
                    a0:58:27:53:20:6c:02:bd:87:f6:0e:3c:ad:c2:2b:
                    02:03:36:e5:41:0e:cb:e3:23:35:26:75:56:ca:cd:
                    67:62:d5:c2:be:fe:eb:53:96:d3:fe:7e:69:96:d5:
                    2e:d6:ec:ea:f8:17:cc:b2:f5:f1:de:5b:0a:81:e2:
                    8c:e7:c2:f8:83:92:36:7a:08:7d:a6:ee:db:ff:da:
                    18:20:2b:00:72:2a:4f:81:3c:09:15:79:42:d8:fc:
                    57:46:e3:34:f7:2b:d2:0f:e4:53:00:75:0f:d7:bb:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:A5:5D:12:28:AE:B6:B1:E2:EA:67:D7:B9:96:79:AC:7D:C4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:23:a8:63:39:bf:7a:42:1d:d5:99:11:f4:c3:41:b3:d5:
         5d:85:61:12:05:6a:1f:c7:14:22:26:d9:2f:23:f5:4f:3a:a8:
         f5:20:e2:b4:98:9e:ad:82:69:b9:66:88:9d:43:5b:dc:95:52:
         d4:c1:dd:56:78:2c:24:8a:6b:4e:ac:fc:ee:c8:5a:03:5d:e2:
         fe:87:7a:39:45:7c:70:5f:1d:ca:d2:cd:64:db:62:15:b9:3b:
         92:35:9c:17:3f:61:30:e6:9d:8d:02:95:cc:79:97:1a:0c:ad:
         8f:c8:47:56:5b:5f:76:4b:9d:63:96:87:a0:d5:e7:7f:d0:a0:
         ae:0e:45:6c:e4:08:ac:d8:df:e0:e8:9c:d2:c9:b8:fa:03:c1:
         ec:ae:1f:31:6d:09:49:ee:50:9f:cc:cf:69:3b:b7:16:34:99:
         80:89:9b:d9:07:74:b9:74:4a:48:ec:70:d9:2a:fc:64:8a:46:
         be:44:5d:19:d8:84:29:a4:2d:e5:fa:da:cc:70:40:fc:90:aa:
         41:97:7b:c9:54:81:42:81:90:3f:f2:d2:80:55:9c:90:42:f6:
         79:87:f7:1c:b9:7d:73:2e:48:c6:1a:2f:60:2b:76:66:31:4f:
         84:a1:1e:fb:6a:95:aa:ad:38:bc:17:25:64:3d:bc:ed:45:2f:
         9c:23:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----